Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
File:                     vKs-dvhO1DdC8qCBJCcI55nOG18.mft (raw, json)
Hash identifier:          yeOn+0EBOZ+EEXdKZpcaQaRkRdg7PGNeDBb2zTyi5VU=
Subject key identifier:   AE:99:64:EF:D2:85:E3:9F:39:1A:A4:1A:0D:4C:91:85:05:56:49:97
Authority key identifier: BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
Certificate issuer:       /CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
Manifest number:          F0
Signing time:             Thu 03 Jul 2025 05:40:47 +0000
Manifest this update:     Thu 03 Jul 2025 05:40:47 +0000
Manifest next update:     Thu 10 Jul 2025 05:40:47 +0000
Files and hashes:         1: vKs-dvhO1DdC8qCBJCcI55nOG18.crl (hash: k6mDrahCBUwUubofLFE1VI7KR+PpquorV7n8qgJLMas=)
                          2: A2EBCE92083011EF82AFFD44C4F9AE02.roa (hash: lXTjS6CJ65+GSXDHPnNs6WKGp+QMD+laNZ7PWnUDq4w=)
                          3: 222F2952038511EFAF036327C4F9AE02.roa (hash: 0POds3yRjM0RD6yJRDt5kjZrzEVN1RcsA2tdedecI4c=)
                          4: A0AD48EA083011EF82AFFD44C4F9AE02.roa (hash: E2oXK+nP7XuyH0hDSL1uq1DEWcq+1W48Rez3w3+1ppw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl
                          rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC532, serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
        Validity
            Not Before: Jul  3 05:40:47 2025 GMT
            Not After : Jul 10 05:40:47 2025 GMT
        Subject: CN=686617df-3145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d1:f1:2a:97:b3:8d:c5:ce:5e:f7:69:46:d5:
                    6d:74:a7:1b:96:4c:b3:d9:98:e9:19:46:3a:33:c6:
                    b8:d2:a5:5d:72:50:25:62:87:39:75:cd:4e:d2:c0:
                    79:f3:d1:21:ea:16:aa:0e:c3:99:95:39:9b:f1:fb:
                    7d:22:49:78:12:2f:1e:1f:f4:8e:24:d0:84:a8:f7:
                    4f:21:f8:db:cb:ad:64:98:10:a5:a1:47:de:13:6d:
                    37:6b:d5:81:95:a7:fc:63:55:38:3f:df:19:d3:6e:
                    93:0d:6b:cc:33:57:9b:62:a4:ee:db:eb:f0:c5:58:
                    6a:94:ee:b3:a6:1a:63:47:00:88:05:29:7a:57:14:
                    36:e6:e1:fa:88:64:6b:f7:dd:97:34:05:76:66:aa:
                    7d:b3:51:fb:ce:ff:9e:f5:cf:fc:1f:28:96:8f:19:
                    48:87:d1:f1:6c:3b:ac:ad:44:f7:83:2a:c6:62:4d:
                    05:83:20:62:9d:3e:b4:50:16:a3:de:42:4e:03:46:
                    db:4a:ce:09:e2:e1:f2:d5:92:9d:be:2e:34:0c:c4:
                    08:8c:fa:78:56:d1:4a:96:c5:fa:2c:6d:bb:ed:36:
                    be:2f:cc:3e:16:bd:79:07:6a:89:8a:49:43:1e:97:
                    52:ac:29:f7:1a:eb:49:e7:48:3a:0b:07:d8:cd:da:
                    52:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:99:64:EF:D2:85:E3:9F:39:1A:A4:1A:0D:4C:91:85:05:56:49:97
            X509v3 Authority Key Identifier:
                keyid:BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:81:0b:6a:c5:a0:32:b0:b3:2e:56:c2:3c:95:97:82:4a:c4:
         f0:d8:95:44:0d:10:df:c4:bf:5d:79:19:bd:b8:a9:5b:e5:2d:
         1c:05:20:17:02:92:8a:ee:83:07:f0:fd:f9:9c:a8:24:2b:ba:
         b3:5b:ec:46:2a:82:15:5e:5d:68:9e:49:63:7e:e0:08:8a:6b:
         4a:40:d0:fc:83:70:3d:e7:ad:fe:c1:65:cc:89:94:9a:7b:f7:
         09:ec:d4:c1:45:f3:f9:b1:60:75:1f:e3:9a:a6:a5:a9:dc:c0:
         6a:d5:32:45:47:e9:49:80:5d:a7:ef:59:b9:50:e0:32:a4:93:
         70:42:f5:da:03:15:40:93:18:ba:ee:94:aa:48:29:d1:8a:5f:
         a2:f4:66:ab:d1:69:30:59:96:af:86:42:e4:77:2d:74:85:99:
         5a:14:2e:21:9c:28:99:7c:02:d8:b1:37:b0:44:bc:a2:5f:ed:
         2e:1c:dd:69:c7:55:cc:c7:26:52:4b:91:fa:14:61:c6:e8:3a:
         15:ce:df:f3:c4:b0:9d:5e:28:19:24:5d:39:a4:76:87:95:ec:
         05:3c:7f:ed:0a:17:a5:67:45:35:9e:37:83:a6:5d:c6:1b:be:
         9e:62:84:d6:6a:20:55:b3:0e:31:a0:0a:23:7f:55:ea:73:fb:
         98:19:ca:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 07:33:08 2025 by rpki-client