Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft
File:                     VVmDGtzt7KX6kvxOtdLt5i43qM0.mft (raw, json)
Hash identifier:          2qxK4lXEzaGOFvUBPOdM7WLb0B6BCMEdL9LxGPvYgrI=
Subject key identifier:   C6:1B:B3:7C:48:23:61:0C:BB:81:66:3C:52:AE:C9:60:5E:AF:59:46
Authority key identifier: 55:59:83:1A:DC:ED:EC:A5:FA:92:FC:4E:B5:D2:ED:E6:2E:37:A8:CD
Certificate issuer:       /CN=A91AB2EB/serialNumber=5559831ADCEDECA5FA92FC4EB5D2EDE62E37A8CD
Certificate serial:       0110
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft
Manifest number:          010D
Signing time:             Thu 03 Jul 2025 05:10:46 +0000
Manifest this update:     Thu 03 Jul 2025 05:10:46 +0000
Manifest next update:     Thu 10 Jul 2025 05:10:46 +0000
Files and hashes:         1: VVmDGtzt7KX6kvxOtdLt5i43qM0.crl (hash: TGO60ril06S3KNd1oZslt7X8vROHrHk3oE81E3LiCbI=)
                          2: B96DD308BF4311EE844DDD58C4F9AE02.roa (hash: Qyo+y73YZI83wemHD69A6cWahcYB7AOwFIX0fbO5DQM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.crl
                          rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB2EB, serialNumber=5559831ADCEDECA5FA92FC4EB5D2EDE62E37A8CD
        Validity
            Not Before: Jul  3 05:10:46 2025 GMT
            Not After : Jul 10 05:10:46 2025 GMT
        Subject: CN=686610d6-7c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c6:e1:ef:17:de:7b:8f:72:d6:46:f9:5a:bd:
                    a5:e5:18:5d:22:74:b7:92:49:1a:20:05:5e:ed:85:
                    f2:a3:13:66:ab:62:24:02:1c:d1:9a:f6:ef:c4:46:
                    c8:b6:26:2f:8e:e8:e2:c5:32:29:fe:c0:fc:5a:f9:
                    94:71:a0:a5:73:c0:4f:eb:2a:1a:bd:85:3d:e0:60:
                    95:54:7d:35:bf:c7:1e:e1:96:13:dd:89:ef:b3:e1:
                    9b:ca:87:96:16:45:71:96:dc:e3:27:ad:ac:f1:56:
                    40:ed:65:c7:12:a4:ae:45:11:7c:4f:c2:48:b9:d4:
                    07:8e:6c:cb:68:61:6c:91:03:e8:1d:0f:5e:02:a7:
                    99:a8:70:27:cf:8c:bf:27:6f:b2:7f:84:11:6d:f1:
                    5a:48:6c:50:9b:f1:5c:19:7b:e0:75:fa:ea:4a:5d:
                    ac:26:bd:da:3d:fc:2f:e0:e9:bf:1d:6c:26:44:31:
                    96:58:a9:6f:74:e9:1b:e3:2e:ff:ac:74:ea:9c:bc:
                    85:57:03:55:bc:36:7b:09:ee:d1:c4:2b:7b:b2:69:
                    2a:25:97:ba:9c:f6:2c:82:2f:f8:09:df:4c:d1:61:
                    69:59:1b:dc:3b:b9:b7:5d:35:96:8d:f4:b9:93:91:
                    f5:46:58:02:3e:23:81:8a:53:6c:f2:ed:ff:8e:da:
                    0a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1B:B3:7C:48:23:61:0C:BB:81:66:3C:52:AE:C9:60:5E:AF:59:46
            X509v3 Authority Key Identifier:
                keyid:55:59:83:1A:DC:ED:EC:A5:FA:92:FC:4E:B5:D2:ED:E6:2E:37:A8:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVmDGtzt7KX6kvxOtdLt5i43qM0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB2EB/430B5A78BF4311EE8FD30758C4F9AE02/VVmDGtzt7KX6kvxOtdLt5i43qM0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:5f:80:75:95:7f:50:c9:7b:9a:8c:13:0d:0e:53:97:61:d6:
         a4:91:72:53:ac:6f:1c:e9:f2:28:35:56:bb:78:e2:41:fe:91:
         50:63:6d:30:76:b8:30:9b:e3:6f:9a:f3:d6:47:ba:13:4f:40:
         4f:d9:fe:d1:65:53:40:5a:9c:94:aa:8b:6a:37:88:fa:eb:32:
         c8:ee:39:04:87:f0:19:d6:1d:2f:67:e7:0f:0b:1d:2a:70:63:
         d2:6e:09:9a:53:3b:b4:df:ef:c4:3e:ab:70:c9:b8:bf:77:c7:
         67:f2:36:3e:55:1f:d9:7e:07:b1:70:f6:ac:a2:3c:8f:0a:9c:
         2f:29:e1:9b:8d:eb:15:f5:54:aa:6e:af:ce:92:87:80:94:45:
         e3:80:0d:82:0e:8c:c7:c6:5b:54:a3:3f:43:42:8f:68:1b:58:
         58:82:f2:55:53:e7:bf:89:f7:88:26:41:a2:a6:d2:09:40:c6:
         01:f5:f3:8c:fd:bf:d7:9f:fe:75:84:4a:75:1c:56:7c:41:45:
         a4:98:9f:d3:22:28:90:ad:66:93:e8:f1:fa:3b:49:78:cf:2f:
         16:7a:22:27:c6:77:c5:24:0a:a7:de:a2:32:1e:80:52:0c:77:
         f3:c4:5b:18:7e:bd:cd:cf:7a:7b:95:2a:8a:f0:5b:d4:fa:eb:
         44:a3:30:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 01:21:15 2025 by rpki-client