Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft
File:                     VlIPoddulfCBm23dSWe0VQRphp0.mft (raw, json)
Hash identifier:          5qSxXcb7ag+vfwix/7UKlGcx6Kvdr9NhfwfEKbE1Hb0=
Subject key identifier:   B0:A8:FF:1F:55:DC:30:8D:CF:38:E8:98:F8:77:42:9C:15:3F:AB:CF
Authority key identifier: 56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D
Certificate issuer:       /CN=A91A91CB/serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft
Manifest number:          7F
Signing time:             Sun 19 Oct 2025 09:59:35 +0000
Manifest this update:     Sun 19 Oct 2025 09:59:35 +0000
Manifest next update:     Sun 26 Oct 2025 09:59:35 +0000
Files and hashes:         1: VlIPoddulfCBm23dSWe0VQRphp0.crl (hash: Lwla5R8PT4UHXW/LWlriavVJm6gl3s1dtCxIQapF6hI=)
                          2: EE8CD88EEA5A11EF922B276DC4F9AE02.roa (hash: NgoL1gjr88ZdEn/6hgZXntqKOlCBVmw0eMD59yFjWlQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl
                          rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:59:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A91CB, serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D
        Validity
            Not Before: Oct 19 09:59:35 2025 GMT
            Not After : Oct 26 09:59:35 2025 GMT
        Subject: CN=68f4b687-22a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b9:03:71:0d:b1:34:9d:89:bf:09:5a:0c:d2:
                    f9:25:ff:1e:c4:4f:a3:c9:b6:9a:73:e4:bd:5c:63:
                    a2:5c:54:d9:38:04:f5:58:5a:35:04:e2:cd:84:83:
                    65:15:a6:fc:28:2a:9f:8a:1b:9f:ea:2e:ce:ae:e1:
                    e5:fb:d8:4b:ef:3c:9c:df:46:26:2e:87:fd:88:52:
                    11:70:1a:f6:1e:2a:d3:e8:de:ce:68:92:67:e3:9c:
                    b3:3c:07:67:12:d9:62:f4:4e:46:ba:c6:87:17:37:
                    d6:31:45:c1:a1:e6:33:a8:8a:6e:91:83:05:cc:be:
                    a7:1c:e7:93:36:79:c9:a8:fd:a7:d3:6b:6d:c5:ed:
                    88:94:dd:9f:28:56:e1:4d:29:b9:ba:69:94:76:4f:
                    ae:5e:61:b5:8f:88:b5:b1:17:15:97:31:4f:5f:1f:
                    fb:9f:41:43:90:3c:e1:19:a7:a3:3b:09:3f:09:ff:
                    34:10:1d:b3:dd:64:0d:7a:4f:17:35:f2:06:b6:9a:
                    ef:79:2d:a8:c8:57:70:76:a5:c1:a5:bb:7f:b8:9c:
                    d4:af:63:3c:aa:f7:60:39:f2:fd:29:64:a7:22:20:
                    ea:39:6e:5d:9c:40:25:2b:b8:60:32:ea:b5:d7:17:
                    15:57:70:b3:1e:bb:ea:a5:45:e2:34:08:9b:67:9f:
                    c5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A8:FF:1F:55:DC:30:8D:CF:38:E8:98:F8:77:42:9C:15:3F:AB:CF
            X509v3 Authority Key Identifier:
                keyid:56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ab:66:da:7a:4e:24:f0:16:f5:28:1e:99:e3:95:27:a8:dd:
         75:0d:45:92:fc:bf:48:ee:db:df:ed:37:dd:2a:d6:24:f8:7b:
         37:4c:92:a6:28:5d:eb:a9:2a:b9:fc:3e:14:7c:b8:ed:bb:6d:
         7b:97:a6:7d:be:11:57:62:15:06:a3:86:1d:7c:d4:a4:9a:1f:
         91:a9:fc:09:1f:b5:27:a1:99:cc:86:93:cd:47:7d:6e:e1:68:
         ca:d8:94:68:87:03:f5:d8:c9:69:06:b8:42:db:d3:67:50:4f:
         b6:67:e9:aa:3e:ed:60:16:a0:a9:c4:2f:f3:85:4d:4d:b6:be:
         3f:2b:54:aa:a9:13:62:87:a0:47:36:46:59:8c:0c:06:ef:5a:
         be:2a:c3:41:eb:22:85:09:85:2e:4a:c7:9f:f2:ee:82:5b:50:
         7b:09:76:1f:f1:52:00:31:59:b0:38:b8:7a:cf:f7:35:16:14:
         71:06:fd:b8:43:f2:8c:5a:61:2a:66:3f:b8:8b:b8:ae:c0:3f:
         f2:8d:bb:24:ae:a7:b6:02:2b:9c:30:1a:ed:51:77:a5:fd:3f:
         49:cf:17:c3:60:1f:29:8e:2b:0c:32:cc:2e:40:eb:4e:4b:dd:
         7b:75:60:96:8e:38:b1:01:74:c1:e7:02:be:f1:a8:22:8d:24:
         4a:da:d1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:00:51 2025 by rpki-client