Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft
File:                     V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft (raw, json)
Hash identifier:          oS0wBsShA8diLLkUn7lUzqp2qcWe5IbfbSFJoZz+Ehs=
Subject key identifier:   3D:EE:A1:C9:28:22:9E:77:DE:91:3C:E7:43:97:84:E3:8D:C9:D3:E8
Authority key identifier: 57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33
Certificate issuer:       /CN=A91B7A3F/serialNumber=576C5447C09B597107B770C101C89327F105BD33
Certificate serial:       03E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft
Manifest number:          03DE
Signing time:             Sat 23 Aug 2025 00:48:01 +0000
Manifest this update:     Sat 23 Aug 2025 00:48:01 +0000
Manifest next update:     Sat 30 Aug 2025 00:48:01 +0000
Files and hashes:         1: V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl (hash: JpD5kBanf4IOz4fudjRjYPJrNtK5kv1SFhsT9RJPHvc=)
                          2: 821CAFEE923811EC955B7A3AC4F9AE02.roa (hash: 9KQWUlz6QNm+2IJYVtG7dsHf8uD3C5dcvLfvCk8SVA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl
                          rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 00:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 996 (0x3e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7A3F, serialNumber=576C5447C09B597107B770C101C89327F105BD33
        Validity
            Not Before: Aug 23 00:48:01 2025 GMT
            Not After : Aug 30 00:48:01 2025 GMT
        Subject: CN=68a90fc1-460b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:73:e5:3d:c5:38:0c:36:33:7e:21:67:37:21:
                    0c:a7:ba:4a:4a:b1:a4:0b:b4:6a:2c:ad:bd:46:85:
                    35:4e:f5:c6:b8:9f:8c:44:f3:c5:36:e2:f0:dc:41:
                    ef:35:49:4a:08:a0:72:b6:3a:35:83:45:94:03:9c:
                    dd:07:86:d5:2e:f0:0e:ba:23:f6:d7:e4:78:af:3d:
                    9e:ef:94:8a:0a:1d:19:53:41:0f:50:74:83:c2:07:
                    84:53:3c:02:29:c9:e6:0d:b4:14:b4:d6:9b:72:3e:
                    a5:46:e8:97:b1:24:cb:26:ce:af:97:a9:53:20:7a:
                    74:f6:2f:ba:28:24:6f:6c:16:68:5c:11:71:1d:a3:
                    36:f5:c5:f5:3b:d9:63:54:3b:50:8c:ef:23:d5:8b:
                    17:1d:27:d9:fb:70:1d:f5:0a:59:09:cd:e7:47:39:
                    95:f2:1b:8e:d6:c5:df:d2:70:eb:10:78:b6:85:3c:
                    d2:26:e2:ab:d2:81:0d:4c:26:76:89:03:67:ee:03:
                    6c:c6:10:26:6e:8a:46:2d:72:06:c8:f2:56:d0:9e:
                    b4:72:b8:5e:f2:ad:fa:ea:f3:53:82:44:00:5c:84:
                    3f:99:2c:17:20:8d:6c:11:6b:c4:51:d2:f9:c0:50:
                    37:f7:91:51:b8:78:13:cc:97:e3:b7:75:ec:9c:c1:
                    fd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EE:A1:C9:28:22:9E:77:DE:91:3C:E7:43:97:84:E3:8D:C9:D3:E8
            X509v3 Authority Key Identifier:
                keyid:57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:03:7f:1d:9f:33:e5:58:bc:27:5b:ce:b2:b6:dd:09:d2:8c:
         ed:1f:fa:2b:0b:07:99:c7:d6:42:11:d1:92:ef:ca:a4:94:0e:
         0e:33:f7:bf:a2:67:d1:a0:e0:b5:e5:c9:ea:7c:8b:03:bc:ff:
         dd:7c:1e:3b:0e:c0:9c:c9:71:78:5d:9c:83:bf:ae:90:48:ac:
         da:02:91:b4:16:b8:49:c3:be:4e:76:e2:ae:8a:f9:e6:c9:91:
         02:51:bb:21:9d:d6:9d:5c:e2:58:aa:52:cd:a2:3e:2c:a1:cf:
         08:ad:e6:45:0d:a6:79:1c:62:38:24:86:8a:eb:ad:63:fe:e5:
         e2:18:1d:fd:26:fc:f4:89:97:d1:81:50:c4:dc:b2:c1:14:a4:
         1b:34:31:30:be:2a:69:57:ce:01:e2:6e:aa:7a:6a:69:15:d5:
         c7:89:bf:36:15:b3:c8:18:77:1e:70:eb:04:0d:e6:77:7a:d3:
         68:0c:c2:d9:46:1a:12:4a:b0:1a:78:5d:e8:bd:a0:27:02:3b:
         bb:8d:12:64:ab:58:fa:4b:b9:f9:a1:d6:e0:bf:e8:19:f7:e3:
         9a:61:a9:e1:86:93:41:89:5a:36:f1:17:e5:ab:8b:bd:db:f1:
         ad:26:9b:05:25:0f:2f:cf:7e:14:31:39:ab:f1:e2:8c:2a:ce:
         8a:97:d8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:59:41 2025 by rpki-client