Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft
File:                     0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft (raw, json)
Hash identifier:          JpZIP4Ms3MMbPVUhcvZPZToFrZQseBdmRPicOhL3Uqk=
Subject key identifier:   21:EE:9E:D8:D2:E7:3D:CC:8A:0F:39:E6:1A:B0:4E:10:BA:07:DB:1E
Authority key identifier: D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11
Certificate issuer:       /CN=A91A20A3/serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511
Certificate serial:       34E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft
Manifest number:          34D8
Signing time:             Sat 18 Oct 2025 15:09:09 +0000
Manifest this update:     Sat 18 Oct 2025 15:09:08 +0000
Manifest next update:     Sat 25 Oct 2025 15:09:08 +0000
Files and hashes:         1: 0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl (hash: YBW8rJ0oYXkmXIxqe3Y9qwyZWjKuF6IJotgXZBzvpuQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl
                          rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:09:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13544 (0x34e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A20A3, serialNumber=D15A5AF9AF8D99DFE5E44D35EE550105FED94511
        Validity
            Not Before: Oct 18 15:09:08 2025 GMT
            Not After : Oct 25 15:09:08 2025 GMT
        Subject: CN=68f3ad94-bd2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:63:c8:ea:52:21:2f:b6:5a:0a:b6:a8:77:74:
                    4b:83:97:4f:7f:4a:b0:14:eb:f9:9f:24:5d:62:7e:
                    01:9a:cc:85:84:1f:0b:38:37:49:16:ff:7a:4a:37:
                    92:82:5c:15:de:47:37:bd:bf:96:e0:41:8f:9b:d7:
                    01:cb:99:5b:c2:0a:92:ff:63:f9:86:bf:9b:09:62:
                    70:83:67:b5:fb:f1:2e:01:4f:4a:f3:21:02:fd:0e:
                    71:67:31:d2:37:2c:24:4d:d6:1c:79:de:62:1d:89:
                    b2:f2:42:21:e4:aa:11:26:da:86:a8:d3:ff:cf:6d:
                    c5:85:af:7d:3a:8d:f6:75:6f:9d:9b:a5:99:8d:08:
                    c6:b8:e8:06:93:c2:59:63:fe:4b:fb:8d:b4:c5:08:
                    1a:51:8d:33:c3:83:42:03:68:d9:f9:0a:e3:af:01:
                    e5:10:d8:9a:23:fc:fd:3e:6b:62:1e:ec:57:81:63:
                    5c:d0:a3:97:fd:ac:80:57:d8:bc:60:ca:6a:80:8d:
                    67:8b:7e:16:51:9c:68:76:b7:c1:47:97:a2:12:5a:
                    3e:64:d9:d9:70:f3:31:5c:75:7d:93:82:21:eb:73:
                    18:97:c7:78:f5:55:21:bc:d1:e9:54:23:11:0e:fe:
                    51:01:51:68:61:75:e6:73:6d:c5:28:53:e0:0f:d6:
                    b6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:EE:9E:D8:D2:E7:3D:CC:8A:0F:39:E6:1A:B0:4E:10:BA:07:DB:1E
            X509v3 Authority Key Identifier:
                keyid:D1:5A:5A:F9:AF:8D:99:DF:E5:E4:4D:35:EE:55:01:05:FE:D9:45:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A20A3/AF4B8A621D9E11E28E53C08E08B02CD2/0Vpa-a-Nmd_l5E017lUBBf7ZRRE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:2e:ea:f3:04:be:f5:48:d2:9e:23:e6:7e:55:45:39:d8:1b:
         c9:8d:51:bd:7f:4c:59:82:ee:4b:3f:41:78:66:fe:3a:df:1e:
         73:fc:cc:be:76:31:69:eb:14:1f:18:a9:f0:09:1c:c2:83:0e:
         c2:f2:e5:76:b2:7f:68:d4:d8:b7:bf:55:96:e3:6d:0f:a8:ca:
         68:eb:f5:05:67:54:5f:b3:76:c7:aa:74:98:ee:cc:06:78:45:
         67:68:28:17:15:81:e7:02:cf:52:1b:e2:22:c4:8f:1e:ba:36:
         39:27:b0:d9:a2:ef:06:48:0b:54:d1:30:a4:52:b3:49:73:92:
         9b:08:7c:80:a8:d4:49:0d:4a:56:25:5a:33:bd:2b:5e:bc:a1:
         99:87:f4:8c:6f:e9:6b:69:0e:de:43:c2:bd:86:b2:42:88:da:
         67:22:19:bb:db:c0:ee:78:02:b5:85:42:21:f6:13:a3:27:ea:
         13:15:81:12:0b:4b:19:ea:1e:d3:00:e1:7c:bd:2b:36:8d:01:
         ee:53:a2:0c:ba:c9:48:00:49:df:f1:73:cd:59:8c:20:5c:81:
         f8:69:a2:da:46:bd:77:2a:38:e0:4a:11:78:76:83:23:79:4d:
         93:c1:7b:17:32:52:9b:e7:51:89:75:e0:f9:35:4a:46:72:e0:
         ac:80:ce:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:42:41 2025 by rpki-client