Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
File:                     VQWhoodm2zGCLEYVhuaO3fKnk_o.mft (raw, json)
Hash identifier:          qBxc2xu4lJ8sX/1mzFp5+6jhU3UxFpKMasFY2i/orU0=
Subject key identifier:   34:8E:13:EE:E8:8E:A3:50:14:9A:3A:71:8D:6D:CD:DF:C9:4D:C9:AD
Authority key identifier: 55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA
Certificate issuer:       /CN=A91850AD/serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA
Certificate serial:       D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
Manifest number:          D6
Signing time:             Sun 19 Oct 2025 08:38:47 +0000
Manifest this update:     Sun 19 Oct 2025 08:38:47 +0000
Manifest next update:     Sun 26 Oct 2025 08:38:47 +0000
Files and hashes:         1: VQWhoodm2zGCLEYVhuaO3fKnk_o.crl (hash: HwPr3Q0NFrSlM+WybKbpFRH4TBuEtMLEYu4pV3t2ueg=)
                          2: 95737270643711EFBCD1344AC4F9AE02.roa (hash: 0MmgAOsynAk/z75v6F6/3mM/hRV1GTY1/gUKJqE0crQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl
                          rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:38:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91850AD, serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA
        Validity
            Not Before: Oct 19 08:38:47 2025 GMT
            Not After : Oct 26 08:38:47 2025 GMT
        Subject: CN=68f4a397-ddea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a1:b9:8a:17:5f:b0:41:7a:58:a2:1f:84:0f:
                    66:7e:bf:62:b6:64:30:e2:e1:11:49:06:6f:c1:91:
                    8b:fc:24:64:08:5e:e0:17:01:92:f6:c5:53:e7:ad:
                    47:bb:dd:ac:47:4d:f5:44:43:96:1e:a6:f0:b4:40:
                    60:c1:78:97:85:46:90:a0:fe:6b:9e:c4:11:99:6f:
                    a7:d0:59:c6:6f:37:4c:a5:4a:44:23:b1:38:66:08:
                    a9:34:e8:d6:79:1a:37:26:e8:6c:a3:84:45:7a:b0:
                    e4:5f:ae:71:d3:5a:71:9b:03:d6:66:41:a7:9c:d4:
                    90:7e:fa:56:4e:7a:37:bb:d6:4f:46:44:9d:2c:43:
                    a5:79:c0:bc:86:0f:40:2c:ad:00:44:44:db:e7:3d:
                    d7:d9:1f:f0:a6:f8:bf:f8:9b:4b:2a:60:70:ae:b8:
                    64:da:e7:1e:ce:54:f8:2c:2f:7a:b5:39:80:db:7d:
                    14:31:8d:11:14:1f:c2:9a:64:f3:5a:9f:6c:8d:05:
                    b3:35:e5:7f:d2:83:96:a2:6d:8c:3c:a0:2b:a3:78:
                    88:2a:f8:07:8d:d9:bd:2b:7f:99:68:54:96:51:1c:
                    0c:a7:38:a4:fe:8e:ba:61:72:d3:ba:d4:60:c1:33:
                    59:ae:e2:16:be:82:2f:8d:af:74:20:80:94:70:43:
                    53:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8E:13:EE:E8:8E:A3:50:14:9A:3A:71:8D:6D:CD:DF:C9:4D:C9:AD
            X509v3 Authority Key Identifier:
                keyid:55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:8c:be:18:10:b2:d2:2c:29:1e:2c:c0:94:21:ef:37:b2:99:
         fe:03:4c:0b:b3:d6:04:c9:1d:18:a6:7f:cd:f0:4e:f6:b7:79:
         e4:d3:e5:bb:32:1a:5f:61:25:41:2e:02:83:ad:a2:a8:25:fb:
         7c:19:0d:25:7a:dd:ff:5b:ba:05:27:b3:97:85:b8:95:98:63:
         2f:c6:20:77:3d:2a:29:7b:9c:a4:1c:e4:c6:52:5f:08:85:d4:
         2f:c0:34:8b:3b:e5:ba:46:35:bb:e5:41:d8:fd:b1:cd:45:6b:
         d7:19:ce:1e:0f:5d:2f:04:81:2a:0d:db:38:4f:be:1e:02:72:
         54:54:a8:9a:cb:9a:c0:d8:37:e4:e7:3a:2e:51:dc:d1:d2:bc:
         b6:2b:45:bd:c4:fa:ca:bd:09:8e:09:4a:37:a7:94:91:38:ef:
         c0:9c:6b:14:d1:01:95:ac:97:1a:5f:eb:d5:e8:a8:1f:50:2a:
         07:f7:79:29:bf:57:8a:6a:bc:38:98:eb:29:80:c4:0e:17:09:
         dc:fa:56:c7:6b:29:4b:2f:9b:c8:a8:25:cb:ae:04:ef:89:fb:
         c7:f2:de:3f:2a:e4:cf:5f:a4:c2:d3:40:53:f9:90:cd:10:1e:
         19:96:08:08:7b:2c:52:b3:bf:ce:93:9b:12:7a:87:55:74:f0:
         5e:87:a1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:44:49 2025 by rpki-client