Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft
File:                     V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft (raw, json)
Hash identifier:          7QZIcFa7kSE2bwAJLLU7WBFWMarRYRqPqvRYkSCSo+w=
Subject key identifier:   26:94:48:DA:BD:34:BD:E6:E0:AE:C3:F9:45:FA:0A:4E:4D:C5:6C:69
Authority key identifier: 57:99:72:E6:0E:A6:F4:63:84:89:1A:D0:E3:F4:17:90:C8:08:05:F1
Certificate issuer:       /CN=A919C1A2/serialNumber=579972E60EA6F46384891AD0E3F41790C80805F1
Certificate serial:       0222
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft
Manifest number:          021D
Signing time:             Sat 23 Aug 2025 02:12:05 +0000
Manifest this update:     Sat 23 Aug 2025 02:12:04 +0000
Manifest next update:     Sat 30 Aug 2025 02:12:04 +0000
Files and hashes:         1: V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl (hash: /BUn4tKurQjk4oMD3Q32YkrhxtBkyaqUcE/q2Vct5yE=)
                          2: 46B3DF5A46E111EDB39B8526C4F9AE02.roa (hash: qtQ5quSwMYsKVelHw8PoUcCRH9+p/SKKBVtmk8NHuxo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl
                          rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 02:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546 (0x222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C1A2, serialNumber=579972E60EA6F46384891AD0E3F41790C80805F1
        Validity
            Not Before: Aug 23 02:12:04 2025 GMT
            Not After : Aug 30 02:12:04 2025 GMT
        Subject: CN=68a92375-22cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:dd:a7:2d:36:e6:f7:bb:eb:34:9c:eb:32:9e:
                    cc:24:c0:79:c5:0e:ae:87:d8:fa:bd:70:9e:94:36:
                    e9:45:3d:44:1a:bf:bb:56:42:76:15:fd:45:b4:f1:
                    05:10:c8:fe:0c:e4:77:0d:26:81:70:27:74:ce:d9:
                    ae:8d:fe:fd:dd:96:20:cc:1d:36:8d:7e:bb:32:f5:
                    e9:d7:6b:da:0e:05:c5:cf:e4:ac:dd:15:00:b7:d5:
                    95:07:07:14:d9:7e:67:bf:4f:e7:41:82:e1:7e:73:
                    7d:d5:4a:ae:73:cb:84:ab:92:16:f8:07:37:13:22:
                    e6:fd:7b:dc:2b:d0:fa:72:ac:b0:30:35:dc:cf:ef:
                    5c:26:c5:2a:7e:ff:38:ed:22:fb:bd:af:49:eb:49:
                    c9:77:6b:ba:02:8e:0a:28:b1:24:26:4c:f2:cd:f8:
                    59:7a:68:45:7e:ef:35:23:e7:9a:60:3a:a8:e8:c6:
                    4c:92:66:1d:9e:57:d5:41:90:c0:67:c9:8f:1f:cd:
                    60:24:50:a7:61:cd:70:c1:12:f0:d8:ce:b3:d6:1e:
                    47:c7:8e:68:54:a1:3a:1a:74:95:8b:9f:02:68:cd:
                    b6:fc:6d:47:05:db:d3:d0:11:67:26:fb:7f:61:bf:
                    2d:d5:77:d2:ba:a7:41:94:b4:8e:e8:4b:03:96:95:
                    c7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:94:48:DA:BD:34:BD:E6:E0:AE:C3:F9:45:FA:0A:4E:4D:C5:6C:69
            X509v3 Authority Key Identifier:
                keyid:57:99:72:E6:0E:A6:F4:63:84:89:1A:D0:E3:F4:17:90:C8:08:05:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C1A2/474CD84446DD11ED92402320C4F9AE02/V5ly5g6m9GOEiRrQ4_QXkMgIBfE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:d0:89:57:78:05:19:7d:fd:2b:66:9f:83:7e:fe:d4:11:94:
         4b:7a:46:c4:4c:6f:88:e0:33:76:30:cb:29:83:78:16:11:f1:
         35:aa:73:20:10:e9:fd:a2:c9:d0:1b:ab:d3:1b:3b:2e:b0:29:
         e7:dc:e1:b0:19:a0:e0:31:8c:44:f8:45:bf:30:3d:3d:05:b0:
         95:c0:09:85:13:99:e8:16:7f:ff:f3:cb:94:e6:6a:a1:d0:10:
         04:58:20:6a:0a:d2:93:3a:89:9e:1c:e1:c7:fc:ec:0a:61:f5:
         3d:b0:7d:42:ee:58:b9:f0:4c:d0:93:a6:db:7e:9d:26:da:76:
         c2:ae:91:2b:a7:39:83:66:c3:3c:f9:bd:a8:de:4b:dd:65:7c:
         73:c7:8e:44:be:b2:4a:db:40:23:ea:1f:f3:2d:3d:a8:2b:ca:
         27:eb:09:fe:0a:9a:e2:9b:cc:e6:21:4c:d1:ca:98:a0:75:99:
         3d:30:65:8f:8a:1f:d2:94:60:5c:91:f8:f9:9f:8e:c7:d1:4f:
         1e:c8:5c:54:65:9a:e4:77:2e:de:b8:09:15:1c:75:6e:b0:9e:
         3c:44:ac:1b:72:7e:fc:0b:ae:04:61:cb:83:f9:a9:0e:dd:31:
         0f:87:99:f6:a8:56:ea:45:73:a5:05:c7:db:09:e0:df:50:d4:
         77:3f:b0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:51:38 2025 by rpki-client