Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
File:                     vttNMcgBx4se-jSHY50DVayRNUs.mft (raw, json)
Hash identifier:          7Mc8lIloDMsNhXol8mLwh3qTwLRUyCIFcIbhE/FhmYE=
Subject key identifier:   15:BE:D3:82:38:DA:8D:71:AA:F2:3D:8A:22:F5:50:42:19:5F:F4:1D
Authority key identifier: BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B
Certificate issuer:       /CN=A91CB063/serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B
Certificate serial:       9B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
Manifest number:          94
Signing time:             Sun 19 Oct 2025 09:49:10 +0000
Manifest this update:     Sun 19 Oct 2025 09:49:09 +0000
Manifest next update:     Sun 26 Oct 2025 09:49:09 +0000
Files and hashes:         1: vttNMcgBx4se-jSHY50DVayRNUs.crl (hash: Jo149RR8Zyy//m+BXk7shm7pIOwcCjEjbCy9GZS35SY=)
                          2: D99266FE4F7911F095AB2D46C4F9AE02.roa (hash: zM2x4PpXDO/09IRoY9uPWWkCUNv9rLsNP/d1xRjR15g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl
                          rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB063, serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B
        Validity
            Not Before: Oct 19 09:49:09 2025 GMT
            Not After : Oct 26 09:49:09 2025 GMT
        Subject: CN=68f4b416-6f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:25:d0:1b:28:73:39:67:2b:49:fd:21:0c:ca:
                    fb:6f:6c:29:17:5b:78:ec:03:63:ea:2a:cb:c0:6f:
                    c5:14:c7:6e:9e:32:b7:f9:85:4c:1e:92:32:ed:d7:
                    f2:f7:34:cb:3a:9c:9b:75:51:09:b6:c9:c9:72:45:
                    52:fd:92:06:bc:2e:5e:48:f0:ee:c2:2c:65:26:32:
                    3c:80:c2:20:eb:52:6b:a8:fc:03:e3:b8:72:50:10:
                    59:ed:b5:3f:ab:c2:88:a0:db:ae:8c:f5:36:65:46:
                    99:b1:bb:00:d4:3c:f2:31:89:76:69:47:33:db:56:
                    c1:4f:f0:bc:f5:1d:92:63:bf:23:b6:7b:ed:22:ce:
                    98:7a:93:2d:a9:ba:4d:ef:a8:e7:9b:89:ab:aa:64:
                    c6:00:7b:d3:cc:40:21:c6:28:d8:e9:3a:73:57:a4:
                    57:48:87:ec:29:f8:bc:26:63:1b:f4:39:21:6b:1e:
                    b9:9e:cc:67:1f:aa:21:9e:df:52:c2:f1:55:e3:e2:
                    84:66:90:a6:1c:68:6f:02:66:8b:12:5a:2e:0e:96:
                    dd:f5:1c:68:07:25:56:e8:90:25:8e:a5:67:e7:23:
                    fc:a4:8d:dc:60:c2:77:03:50:7c:ca:39:24:bb:cd:
                    10:72:f3:aa:3d:10:c7:c8:ae:e0:dd:29:33:2e:20:
                    fe:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BE:D3:82:38:DA:8D:71:AA:F2:3D:8A:22:F5:50:42:19:5F:F4:1D
            X509v3 Authority Key Identifier:
                keyid:BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:f3:ba:57:39:2e:7e:60:f8:c3:23:03:82:41:23:ce:1d:5a:
         da:0f:01:c4:6d:22:35:f9:7b:eb:51:03:71:2a:69:28:0e:bc:
         7c:c1:ec:92:1d:8d:4a:b2:98:74:40:da:b4:e5:42:12:86:94:
         0d:79:82:ac:66:95:14:9f:77:7f:3a:9a:16:6c:8a:0e:99:78:
         74:9d:ef:9d:74:c7:69:e6:9a:66:bc:15:61:fa:00:29:dd:7a:
         bd:ca:8d:69:6d:01:44:a4:be:fe:6e:9f:24:9b:64:7d:45:be:
         70:15:59:61:8e:67:9d:1b:7c:dc:c6:2a:3f:fa:c1:7f:1d:be:
         45:ba:bc:c3:ef:55:7b:47:81:4d:23:f1:63:ac:2a:b8:7d:0a:
         5b:72:b2:cc:a8:8a:3c:96:38:97:b2:57:a7:81:27:a0:ba:84:
         96:f0:5f:16:97:a8:4a:4a:bb:b0:ce:4d:22:50:b6:bb:1b:3b:
         d0:47:74:58:91:11:35:ad:ef:d3:f2:52:6f:c3:c3:27:dd:44:
         f3:4d:a5:ab:79:28:a9:50:0c:2f:1c:3d:b6:06:96:e3:56:3a:
         7e:fa:05:17:6c:53:53:93:c3:26:6c:f9:95:e8:11:2c:7c:c3:
         25:2f:31:b3:59:79:ba:38:59:ec:d3:6e:83:0c:f4:12:ae:9a:
         9b:96:55:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 08:08:54 2025 by rpki-client