Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
File:                     ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft (raw, json)
Hash identifier:          aXluDujECpwv9oh428ucUykATN6qko3sxDIrotDr21c=
Subject key identifier:   DF:06:ED:99:58:98:7D:AC:EF:80:1B:5E:59:60:92:5A:CD:F9:54:C4
Authority key identifier: 6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32
Certificate issuer:       /CN=A91D4E45/serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332
Certificate serial:       069F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
Manifest number:          0697
Signing time:             Fri 22 Aug 2025 22:26:08 +0000
Manifest this update:     Fri 22 Aug 2025 22:26:07 +0000
Manifest next update:     Fri 29 Aug 2025 22:26:07 +0000
Files and hashes:         1: ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl (hash: tVqDcXPD2cvR/7wG3TLzbd0ub17MCLMPPzKa0V6PrXM=)
                          2: 1B25BF167FE111EBB6C0941AC4F9AE02.roa (hash: UCps9/WJGo9HkezcUcRKvCp07t2PRwHy6+kCIMyeCTk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl
                          rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:26:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1695 (0x69f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4E45, serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332
        Validity
            Not Before: Aug 22 22:26:07 2025 GMT
            Not After : Aug 29 22:26:07 2025 GMT
        Subject: CN=68a8ee80-d3f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:94:14:d7:84:29:5f:25:63:ea:f8:43:e4:a2:
                    08:8b:a7:69:11:0a:c4:16:99:94:99:12:b4:2d:52:
                    fc:5a:2a:f9:07:96:0c:80:0a:f5:8c:f6:31:34:10:
                    3d:3a:9e:15:10:2a:53:3f:9c:09:ea:76:a2:1c:67:
                    f7:4f:99:d8:1a:e7:15:4b:46:95:08:f6:2b:fd:5f:
                    b4:bc:c9:6a:57:82:85:33:e4:a1:c1:2a:58:2a:08:
                    45:c3:26:7c:2e:85:62:91:f9:96:15:a6:3a:51:f5:
                    ff:c3:ed:01:ca:96:2e:5d:0c:72:a0:48:14:d2:28:
                    91:18:2d:3c:47:7a:b1:c3:ff:37:85:1d:97:b9:e4:
                    9e:49:31:cb:ee:3f:89:32:5e:3d:ce:f1:ed:27:84:
                    d1:ef:51:a7:8e:61:1d:e7:f3:13:8f:b7:1d:65:44:
                    33:cc:cc:68:ac:02:1b:d3:ac:cc:6a:91:e4:12:17:
                    15:16:0a:fe:60:df:4a:74:6f:aa:c8:ca:c7:80:3e:
                    8f:92:66:ed:4e:e7:b1:17:40:59:39:7c:67:9e:6e:
                    4d:0a:ce:7b:59:a0:b3:36:60:69:44:f5:f0:25:eb:
                    79:cd:05:a9:64:f6:30:8c:65:8f:36:45:04:9d:0f:
                    40:01:f6:87:8f:5e:2d:88:e5:b9:49:3b:91:6e:9a:
                    1f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:06:ED:99:58:98:7D:AC:EF:80:1B:5E:59:60:92:5A:CD:F9:54:C4
            X509v3 Authority Key Identifier:
                keyid:6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:35:9d:79:7e:e0:61:52:6f:c7:e9:58:f9:50:70:66:d7:06:
         c4:29:4f:b5:3e:80:03:01:f1:eb:5a:f8:e9:4c:ae:aa:d6:fd:
         f1:87:48:e9:56:2e:b3:5e:51:c3:a6:23:05:22:75:96:cc:9b:
         bd:5d:cc:32:c5:b4:f5:b5:6b:b7:a3:96:c9:d3:49:b4:92:ae:
         f6:0d:2a:b7:2d:b9:12:fd:5e:dd:d8:41:e2:6d:07:c7:15:d6:
         0e:ee:67:a8:2c:01:5f:36:da:5d:76:17:37:3d:90:20:46:ae:
         a2:4c:f9:22:a9:36:6a:c1:34:75:af:1c:37:6d:d8:ad:3b:16:
         bf:a3:72:29:e2:9f:5a:6d:d2:6e:cf:d8:c6:01:69:d3:41:2e:
         cb:a3:ef:d3:10:bb:7f:15:e2:ca:20:55:7c:1c:32:e7:68:a5:
         fc:fc:16:80:59:df:02:1a:90:72:e8:2d:ce:81:01:26:2f:b1:
         fd:b1:62:de:60:63:c1:ee:31:7b:a9:1f:a1:ea:4d:c0:a3:0c:
         8a:28:71:88:67:95:61:b6:07:af:ce:5d:82:5b:5c:0d:cd:73:
         0c:d3:60:ac:39:9d:39:ea:1e:8f:40:b7:e8:a4:5f:3b:05:30:
         30:6f:10:19:a9:91:bd:4e:19:60:5c:c2:25:f6:48:60:38:ec:
         98:94:27:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:42:08 2025 by rpki-client