Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft
File:                     VyN5TNgiazMfp2TbnkH16ZS9FJU.mft (raw, json)
Hash identifier:          3i0cD3yWZrV0Q1zXnwRo1uY5cfVcGgPW9Cyiv6fs214=
Subject key identifier:   11:63:FA:FC:0E:A5:53:6B:A2:10:78:4F:0D:AD:FA:82:CE:94:DE:E2
Authority key identifier: 57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95
Certificate issuer:       /CN=A919CAB5/serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495
Certificate serial:       0644
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft
Manifest number:          0636
Signing time:             Fri 22 Aug 2025 22:55:12 +0000
Manifest this update:     Fri 22 Aug 2025 22:55:12 +0000
Manifest next update:     Fri 29 Aug 2025 22:55:12 +0000
Files and hashes:         1: VyN5TNgiazMfp2TbnkH16ZS9FJU.crl (hash: HlyN8ZJ7rJQhV+u4M1bbeElfwmyKB1Lbsfc9K/4lheM=)
                          2: BA9447BCA7D111EB8F85BA22C4F9AE02.roa (hash: LDTK3THfkcofklf28PHpcjhBI5d6rvSRQj+7koBIk+g=)
                          3: 5533E6AEBD3711EB8D76EF31C4F9AE02.roa (hash: 9QKmGnaF4XUr0K4IROOwqH5Q5TLExL2Xqyv7L8jbI74=)
                          4: CE84D1823BFF11EE80C18D54C4F9AE02.roa (hash: MmtTAS7ZMmZ1RYiMAdwwJKtp9Uk2wHFLM2D5jciPiKY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl
                          rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1604 (0x644)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CAB5, serialNumber=5723794CD8226B331FA764DB9E41F5E994BD1495
        Validity
            Not Before: Aug 22 22:55:12 2025 GMT
            Not After : Aug 29 22:55:12 2025 GMT
        Subject: CN=68a8f550-51ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7c:f8:8c:ae:6a:f6:49:9b:8b:be:76:dd:33:
                    7f:9a:93:b5:83:22:f5:16:ba:7f:a3:02:6e:00:2c:
                    a3:7b:ac:d6:64:d2:05:73:25:1b:93:1f:00:27:2c:
                    d3:73:3e:35:31:63:8c:c1:45:d5:e3:e4:de:d0:15:
                    88:c3:b8:c3:29:2c:84:97:e9:c9:1e:81:9c:a8:3b:
                    43:e6:0a:d2:be:b6:2f:c3:dc:31:98:09:70:0f:b0:
                    fb:48:1d:9a:95:4c:f9:39:4f:fd:a0:2f:56:1d:dc:
                    d3:aa:9a:5a:9f:ee:d3:a3:1f:52:d7:fb:a1:8d:77:
                    93:bb:b9:9b:b3:94:80:a7:2a:4b:ee:64:aa:77:6c:
                    aa:e9:d2:d6:5f:84:f1:ea:ec:9d:eb:75:a0:b8:6f:
                    a8:58:19:9b:35:34:b8:9c:71:c5:23:b3:5f:fc:53:
                    c0:86:13:68:2e:13:57:ea:53:97:66:0d:05:0b:65:
                    c8:d9:b0:13:d5:60:37:91:5f:37:a5:a5:5d:45:51:
                    40:41:4d:ba:ef:3b:2e:b5:14:49:c6:b9:7b:31:b9:
                    37:ff:91:f8:16:96:67:fe:09:73:af:a9:45:60:db:
                    e5:94:f2:1b:77:ee:05:8c:42:95:f7:26:de:96:9c:
                    a2:ff:35:57:25:6b:a0:91:02:27:73:51:76:0c:e2:
                    f7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:63:FA:FC:0E:A5:53:6B:A2:10:78:4F:0D:AD:FA:82:CE:94:DE:E2
            X509v3 Authority Key Identifier:
                keyid:57:23:79:4C:D8:22:6B:33:1F:A7:64:DB:9E:41:F5:E9:94:BD:14:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VyN5TNgiazMfp2TbnkH16ZS9FJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB5/72FBAD88A7D011EBBA511522C4F9AE02/VyN5TNgiazMfp2TbnkH16ZS9FJU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:dd:00:7b:ad:39:53:fe:90:ca:ba:e2:fa:2e:4a:1e:a8:ab:
         da:a3:46:15:a3:c4:5c:c2:60:c3:06:f8:8c:83:a1:9e:b1:f7:
         a1:e7:3a:d5:93:50:a9:94:95:8d:81:e9:74:c0:1f:3c:d1:6e:
         c5:e6:04:d7:fe:e6:18:4e:ba:29:00:84:24:2c:6b:69:c3:01:
         fb:06:76:32:bf:7a:d6:6a:fb:4b:07:f2:15:dd:ef:89:40:f6:
         63:e4:e0:ca:3a:a8:5a:0b:db:40:88:e2:a6:c1:8b:77:7a:04:
         b1:df:4a:56:c6:89:ff:13:a6:7d:69:3f:14:cd:c7:e9:10:10:
         25:a6:0e:c5:66:62:e4:4e:2e:14:49:1c:59:91:52:24:7a:0c:
         04:2b:f7:48:5f:4c:5a:1b:2f:4d:bb:0f:9c:db:68:f0:bf:3e:
         96:bd:2c:02:5d:15:8b:c4:2a:94:b6:bd:a0:c3:8e:bc:45:e4:
         04:7f:40:61:e9:30:46:ac:fd:c0:93:09:ec:91:aa:b3:65:b0:
         40:64:e9:91:26:15:fe:ab:4c:42:d4:53:6b:b3:c3:ab:a6:68:
         4e:23:4b:bc:c4:43:ba:9c:a4:8d:b1:3e:32:6d:fd:e3:58:58:
         34:a1:8f:b6:40:67:1b:bc:dd:af:60:29:ae:c1:de:b2:0b:d5:
         bb:0e:76:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:23:30 2025 by rpki-client