Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
File:                     vwxRAalGDasWiyHwJOMMiVoCjEI.mft (raw, json)
Hash identifier:          WjT61q9bad1Sm/uhDou8Tpc82u6+fOwQehzwmO28vsU=
Subject key identifier:   F7:9F:61:A6:E7:5B:16:26:07:59:B5:71:D2:09:A0:AC:C5:29:45:70
Authority key identifier: BF:0C:51:01:A9:46:0D:AB:16:8B:21:F0:24:E3:0C:89:5A:02:8C:42
Certificate issuer:       /CN=A9180307/serialNumber=BF0C5101A9460DAB168B21F024E30C895A028C42
Certificate serial:       0531
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
Manifest number:          052B
Signing time:             Fri 22 Aug 2025 23:44:20 +0000
Manifest this update:     Fri 22 Aug 2025 23:44:19 +0000
Manifest next update:     Fri 29 Aug 2025 23:44:19 +0000
Files and hashes:         1: vwxRAalGDasWiyHwJOMMiVoCjEI.crl (hash: mVKXqYh58rYcnr1oDb6QpKwHxE1OrOJkRSGUUr8X3VY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.crl
                          rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 23:44:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1329 (0x531)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180307, serialNumber=BF0C5101A9460DAB168B21F024E30C895A028C42
        Validity
            Not Before: Aug 22 23:44:19 2025 GMT
            Not After : Aug 29 23:44:19 2025 GMT
        Subject: CN=68a900d3-2fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f1:97:e2:cf:c4:a5:a4:e8:95:8a:e0:92:b5:
                    40:58:5b:b3:d7:aa:08:c9:22:4e:ac:14:f4:dc:7f:
                    95:69:51:23:25:84:53:3a:93:93:df:6f:16:f4:69:
                    d4:15:71:f2:2a:74:b0:22:14:12:60:aa:53:f2:b1:
                    86:41:bd:ad:56:27:7d:e8:14:34:13:89:82:6b:85:
                    fe:e8:38:1d:6c:52:0d:24:26:6b:06:a8:9d:13:f9:
                    15:7b:4c:7a:fc:ee:25:3b:a3:c0:df:ec:08:97:02:
                    67:d9:35:fa:1f:4d:fc:7c:b0:57:43:63:78:31:60:
                    11:0b:83:c8:fb:23:61:02:8b:99:59:71:c7:0b:66:
                    00:c7:d0:92:1d:f6:28:a5:d2:75:4a:90:b4:c9:c8:
                    99:ae:ec:3c:6f:22:e0:a0:c6:a7:df:58:b8:3a:f6:
                    ff:bc:64:5e:6a:da:ad:1a:ae:e0:0f:2d:d3:2d:23:
                    49:9a:c9:0b:e8:3d:51:0a:30:b4:df:c7:4e:13:2f:
                    c1:96:9f:a1:55:13:82:d9:12:cb:0f:21:f7:5e:e3:
                    38:70:95:2d:40:6c:12:06:49:42:de:5d:ad:94:12:
                    8b:04:46:5e:87:92:21:4e:d4:16:01:28:20:ee:9c:
                    79:13:85:74:30:89:10:b6:53:d2:85:19:6c:c2:e0:
                    fb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9F:61:A6:E7:5B:16:26:07:59:B5:71:D2:09:A0:AC:C5:29:45:70
            X509v3 Authority Key Identifier:
                keyid:BF:0C:51:01:A9:46:0D:AB:16:8B:21:F0:24:E3:0C:89:5A:02:8C:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vwxRAalGDasWiyHwJOMMiVoCjEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180307/A9A819F20EDC11EC9DCCC155C4F9AE02/vwxRAalGDasWiyHwJOMMiVoCjEI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ee:94:2a:d8:46:df:a9:33:55:5d:e2:b3:7b:93:67:02:18:
         55:19:16:ef:d6:4a:1e:b6:8a:52:77:7f:c3:9d:d6:24:02:70:
         82:03:4b:66:c5:a9:22:9c:3b:bf:bf:07:7d:bd:fa:0b:ed:b1:
         c4:6e:8b:b6:ae:5c:3d:ab:8a:15:3c:30:96:c9:05:6d:92:c0:
         23:e2:74:84:cf:0c:6a:ed:83:60:2c:9e:c0:30:07:f2:ab:d6:
         5d:44:ff:57:58:9f:56:5f:fa:26:b5:2f:a4:be:2c:f3:d0:f3:
         b4:31:10:03:35:5a:17:d3:46:29:c9:8f:89:03:92:e8:e7:6f:
         ae:8d:7d:82:a9:da:7a:b8:ce:8b:87:9e:a0:c1:98:75:49:b2:
         84:54:50:04:47:d3:4c:a4:ec:ce:75:43:5d:ed:8f:81:6b:87:
         fd:ff:6b:a4:29:44:b2:c8:4e:e8:2e:c8:aa:a3:64:8f:3f:9c:
         24:c2:84:36:02:d2:ab:4a:3e:4f:cb:83:4b:24:36:a0:f7:0a:
         be:1a:ed:4c:68:b6:66:6b:50:7a:ae:fb:8c:14:f3:fa:8c:7f:
         a8:3a:fe:42:d3:c5:a9:c7:81:fc:c9:b9:33:66:32:7c:5e:b1:
         71:b2:9b:de:fc:c0:2a:96:cf:f5:9a:b3:f5:e5:25:9c:69:71:
         2c:9b:8b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:14:04 2025 by rpki-client