Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft
File:                     vgp-rCoKt52-BO5kAC1UgnWkzKY.mft (raw, json)
Hash identifier:          77r/+tBk5WJ6wiiroZdQw/3Tfgn/KRiZb6YDCU9V/64=
Subject key identifier:   8A:A0:A4:CA:53:E6:05:32:65:FE:F7:0C:20:CD:4D:0C:8A:4B:9C:30
Authority key identifier: BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6
Certificate issuer:       /CN=A91C769F/serialNumber=BE0A7EAC2A0AB79DBE04EE64002D548275A4CCA6
Certificate serial:       01BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft
Manifest number:          01B9
Signing time:             Sun 19 Oct 2025 05:32:35 +0000
Manifest this update:     Sun 19 Oct 2025 05:32:35 +0000
Manifest next update:     Sun 26 Oct 2025 05:32:35 +0000
Files and hashes:         1: vgp-rCoKt52-BO5kAC1UgnWkzKY.crl (hash: 0x79mYydYP5rGXO8trEdh701qgfZeW+B6NlDg9zSMV8=)
                          2: 0A469648099611EEB1AA195CC4F9AE02.roa (hash: Zi6/ctlIHdRI7KN6Yh7e6rA5XoPEKo7FY3oH88+Pz2k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.crl
                          rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C769F, serialNumber=BE0A7EAC2A0AB79DBE04EE64002D548275A4CCA6
        Validity
            Not Before: Oct 19 05:32:35 2025 GMT
            Not After : Oct 26 05:32:35 2025 GMT
        Subject: CN=68f477f3-f8ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0b:26:3e:3a:a3:96:71:1e:c4:34:e8:98:0e:
                    dd:db:21:98:33:03:ac:85:ec:86:88:9f:78:63:5a:
                    d5:6a:aa:da:29:49:5f:69:a8:31:b7:85:3f:98:84:
                    a6:95:5a:e5:f1:d5:84:83:e6:e0:ae:8c:51:f8:aa:
                    98:d0:25:7b:cb:d4:bd:82:63:47:65:95:1f:f6:9a:
                    3b:55:58:ff:f1:2a:d5:82:f5:5f:bd:44:b2:2f:42:
                    5d:94:a3:b1:42:23:74:b0:00:ee:e0:fe:44:66:41:
                    0b:89:03:09:c1:93:2c:59:c5:d5:d6:17:56:d0:ea:
                    bb:24:42:be:42:59:42:01:50:78:6b:00:6b:cb:5a:
                    ea:97:42:cd:dd:65:42:95:6d:30:ec:cf:48:79:83:
                    71:1d:a1:c0:ee:3e:18:85:23:10:ad:f7:5c:ee:16:
                    63:05:23:59:c1:fe:84:13:f0:61:a2:93:31:e1:a8:
                    77:93:ae:59:2d:70:83:e9:55:9d:fa:7e:9b:b6:87:
                    0e:3e:a2:e3:88:9d:46:be:6f:e7:f6:73:c2:c5:71:
                    7b:d8:ea:87:23:0f:3d:f2:b6:54:81:6f:97:28:14:
                    c1:8a:93:76:3b:ba:53:fd:b6:03:89:4d:9b:91:c6:
                    df:9e:2f:55:e3:11:cf:24:0f:90:c2:26:40:2b:33:
                    3e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A0:A4:CA:53:E6:05:32:65:FE:F7:0C:20:CD:4D:0C:8A:4B:9C:30
            X509v3 Authority Key Identifier:
                keyid:BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:e3:e6:e0:e2:00:cb:47:c3:e6:11:d8:5e:8f:85:2f:30:84:
         5e:aa:50:ce:ff:50:b7:fe:df:b4:a4:38:f7:52:58:79:a1:eb:
         e3:b0:36:f0:05:68:56:0a:94:09:69:ec:f3:82:bc:2f:93:25:
         7f:e5:00:8b:16:f1:69:d4:54:b2:cc:87:0c:ac:45:e9:cd:4f:
         cb:95:b1:91:b8:db:67:15:39:5f:18:0d:73:4e:ed:27:90:7d:
         0c:11:a0:f2:9d:96:c0:a4:44:35:5b:d9:1c:b1:46:97:2c:64:
         a2:0b:0a:41:e6:97:fc:b3:c7:9b:b0:c3:33:38:65:62:6f:e3:
         e9:e2:5b:cf:f1:bc:05:56:60:9e:8f:5b:65:87:67:0b:0d:87:
         3c:10:51:b3:0b:67:42:14:8d:1f:26:f5:57:3f:62:29:0f:67:
         24:6a:d8:45:04:fc:49:48:d1:f1:d1:08:98:38:de:a5:77:6e:
         af:03:54:db:22:17:dc:4a:87:92:46:67:86:b0:1f:6b:8c:93:
         77:6e:58:c3:35:20:b6:3d:2d:f4:d7:1b:29:9c:dc:19:cf:47:
         ba:69:3c:62:92:cc:98:bf:ce:b7:91:a5:40:fd:c8:70:de:82:
         56:65:39:c3:64:0f:7d:37:60:43:69:d9:b3:cf:ee:5e:3a:c0:
         8a:13:f6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:42:40 2025 by rpki-client