Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
File:                     VIY3awW4olUjKeNhvXJcd-H40Mk.mft (raw, json)
Hash identifier:          bXuTxSaPc5Izo/XO3MGC1rsNYJgSmTbIzb1gu7nwTnY=
Subject key identifier:   90:D7:83:E1:6D:2B:62:60:4A:2F:5A:95:1A:17:98:CD:49:C4:8C:8B
Authority key identifier: 54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9
Certificate issuer:       /CN=A91D17F2/serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9
Certificate serial:       0D65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
Manifest number:          0D08
Signing time:             Fri 22 Aug 2025 18:20:01 +0000
Manifest this update:     Fri 22 Aug 2025 18:20:00 +0000
Manifest next update:     Fri 29 Aug 2025 18:20:00 +0000
Files and hashes:         1: VIY3awW4olUjKeNhvXJcd-H40Mk.crl (hash: vqqwq+lWoquoddYUWCCSHPUc5WgV7Ci2NfgCb6Y4B3k=)
                          2: 56B11920B64911EFBDB0DF37C4F9AE02.roa (hash: XCT7tuDg7rRdggBIsYIkP0xUcz1gGkq6RdReIlG+HqU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl
                          rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 18:19:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3429 (0xd65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D17F2, serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9
        Validity
            Not Before: Aug 22 18:20:00 2025 GMT
            Not After : Aug 29 18:20:00 2025 GMT
        Subject: CN=68a8b4d0-7a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:62:a4:a1:39:5a:69:18:87:a9:21:d6:f7:e0:
                    a9:f2:eb:8a:d3:92:7e:b0:e2:4c:11:b0:d5:b3:f0:
                    1b:a5:77:96:96:ba:94:8d:9a:28:94:e8:cb:da:80:
                    01:c9:25:aa:42:42:8e:09:4c:53:0a:bc:b3:06:5d:
                    fa:f6:f7:33:79:41:df:ce:4a:85:b6:3a:01:ee:53:
                    ac:ab:a8:4e:d6:51:6f:f3:24:1d:d1:a3:e7:b0:03:
                    0a:49:8d:c6:d1:0a:11:b2:da:99:48:15:85:3b:46:
                    59:8d:40:70:e1:8d:51:90:e2:30:93:6a:d3:4b:29:
                    aa:6d:03:3d:b5:77:06:7a:80:67:de:f1:5d:9f:91:
                    8a:bc:4d:fd:ae:b2:0b:b5:ea:ff:5c:5f:91:a1:fc:
                    21:e0:0d:3f:74:ab:42:6b:1f:3b:c6:b0:f7:d8:13:
                    84:50:22:9d:f0:5d:3d:53:8d:c2:fe:4a:f1:54:6d:
                    c1:22:96:d7:9b:06:c3:e4:3e:d6:64:4b:fc:75:ba:
                    29:37:e2:f5:7d:a5:fd:3a:97:ce:b2:82:7c:98:0e:
                    e7:a9:e0:6c:7b:a3:ce:9e:0b:e7:50:a2:aa:b5:cb:
                    4c:00:ef:3b:31:2f:89:ee:81:54:b6:15:ea:87:2f:
                    2b:1d:1c:3b:c4:2c:e0:a3:e2:c4:a6:f4:54:2f:d0:
                    5c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D7:83:E1:6D:2B:62:60:4A:2F:5A:95:1A:17:98:CD:49:C4:8C:8B
            X509v3 Authority Key Identifier:
                keyid:54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:59:00:f3:aa:45:96:c2:fe:03:38:4d:91:44:e6:5e:cd:a7:
         ec:a9:c2:9a:74:64:fb:3f:83:95:f6:ea:20:f6:35:01:6a:5f:
         74:eb:2e:5f:e0:53:9f:86:09:e9:b5:b0:be:d7:91:64:cf:49:
         0e:c9:27:9a:3a:2f:e4:0c:48:7d:23:6b:71:74:fc:9a:d8:9b:
         e0:55:98:e0:71:c2:ed:cd:1c:15:47:d6:83:9b:dc:79:69:d9:
         2e:3f:67:d5:da:aa:78:48:d8:47:9c:18:39:21:96:de:b9:47:
         80:c1:87:56:69:04:d6:05:18:e6:a0:27:a4:38:f2:b4:8a:ca:
         7d:93:86:be:3c:fc:76:a6:08:2c:e5:d7:de:a1:0f:00:1b:03:
         71:93:a0:f3:34:65:df:52:6d:f1:b9:04:ed:79:a4:e5:cd:52:
         c6:b9:1b:88:2f:56:b9:9e:60:f1:fa:1c:65:f1:24:0c:23:6a:
         ab:34:6d:b6:cb:3b:42:30:87:2e:66:29:bc:e3:a1:68:f3:f4:
         a9:9d:61:69:9f:47:c4:a3:61:7b:9b:dd:74:7b:07:a7:86:09:
         71:81:d5:e7:ac:d7:0a:86:8e:a9:f9:25:21:0c:87:0e:31:76:
         60:a5:af:3f:51:b9:f4:da:43:ca:89:a0:89:6f:f1:7b:0e:04:
         6f:f7:f9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:14:15 2025 by rpki-client