Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft
File:                     vpuQTrdssFxgw-LDeeL6SJoOF3I.mft (raw, json)
Hash identifier:          +Le6OGUOL66bWjfZpWqMEkIXuc3y71GwULhK+gokI0k=
Subject key identifier:   AF:B0:93:76:5A:18:7F:9F:C1:B8:63:BD:D8:C1:24:DF:BA:FE:E0:41
Authority key identifier: BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72
Certificate issuer:       /CN=A91E5832/serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772
Certificate serial:       74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft
Manifest number:          73
Signing time:             Sat 23 Aug 2025 07:04:34 +0000
Manifest this update:     Sat 23 Aug 2025 07:04:33 +0000
Manifest next update:     Sat 30 Aug 2025 07:04:33 +0000
Files and hashes:         1: vpuQTrdssFxgw-LDeeL6SJoOF3I.crl (hash: tXyfJ7ee0DEA/Mavswl50pREzPaN6Meapq/vF0YyVrU=)
                          2: A9C0AECED0BA11EFB7A6B027C4F9AE02.roa (hash: vwuRFoQ8j2nxDneRxv7aNdc+Cd7umBY/3NvhL9KJqC0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl
                          rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 07:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5832, serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772
        Validity
            Not Before: Aug 23 07:04:33 2025 GMT
            Not After : Aug 30 07:04:33 2025 GMT
        Subject: CN=68a96801-54ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:95:dd:5a:00:9f:38:ce:45:97:66:4d:a7:43:
                    86:2a:50:08:b3:3c:b4:11:39:39:a0:ef:b8:07:12:
                    04:d5:db:9d:df:c9:66:aa:2b:32:4a:09:29:ea:86:
                    0c:f3:38:eb:85:e0:79:b0:8e:18:b3:a6:98:33:9f:
                    94:51:87:94:f2:ea:27:40:02:68:16:52:d5:2e:9d:
                    95:16:d4:73:b4:8e:de:56:86:da:65:6d:8f:de:b5:
                    9c:fb:cf:04:4e:75:56:00:cd:38:8b:f9:2a:4d:9a:
                    23:69:f5:19:b2:b4:5d:62:52:49:f8:7a:bc:72:a3:
                    3a:e4:68:bb:84:cb:ba:62:03:99:25:62:be:08:08:
                    47:e0:38:6f:d8:ee:b8:ec:32:4d:f4:61:a0:96:63:
                    6e:41:46:bd:f0:2f:e4:64:34:75:ef:e3:f2:f1:2d:
                    41:e1:8d:09:6a:1e:69:dd:37:71:61:8b:67:70:07:
                    2a:2e:ad:19:93:2c:3a:38:08:35:e5:8f:7e:0c:c9:
                    0c:83:ce:18:18:83:c0:fc:58:48:8a:04:e7:ca:a3:
                    c6:37:0b:d3:72:76:66:12:ca:fa:83:12:23:1c:d5:
                    1e:26:fa:f3:40:62:5c:07:6d:da:c2:e4:22:fc:30:
                    2f:1c:95:c6:94:e6:d4:91:c7:07:10:1a:70:2b:f0:
                    69:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B0:93:76:5A:18:7F:9F:C1:B8:63:BD:D8:C1:24:DF:BA:FE:E0:41
            X509v3 Authority Key Identifier:
                keyid:BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:01:40:4c:e0:df:dd:9d:2d:d6:10:f2:06:4c:d8:22:4a:ed:
         46:fa:65:9e:aa:7a:f7:b7:b3:42:eb:de:18:ca:17:8f:d1:52:
         56:1b:20:26:db:e4:7f:bf:4c:f9:f1:df:c3:0b:70:5e:76:75:
         55:90:b7:66:66:12:ce:ee:c4:61:32:b2:5d:e5:2a:fc:e1:0e:
         15:4f:d2:c7:fc:ad:ce:26:d2:77:66:87:0a:c7:92:64:6f:74:
         9f:e2:8e:42:d8:c4:6e:22:66:67:54:c4:63:83:5f:dd:86:d2:
         5a:a5:5e:70:82:26:12:95:3e:b2:97:e0:30:2b:fb:dc:f1:e1:
         bb:4f:92:a0:ef:af:a1:4e:d8:13:77:ba:21:80:f7:46:d4:17:
         44:43:9e:a2:a1:8f:dd:ca:42:6e:e1:5d:78:a4:d9:7d:80:43:
         cd:23:d3:9c:57:54:50:9b:44:99:6b:c7:ae:c8:db:13:6b:26:
         55:67:e8:a3:06:3f:4c:44:a1:8e:a2:11:ec:87:36:95:09:1b:
         05:b6:51:6e:18:53:84:93:a9:3f:1a:4f:bd:c8:32:3a:60:2d:
         6f:a0:b3:b6:bb:ef:d6:70:43:85:30:69:f5:f8:c1:08:2d:4e:
         a8:7a:b0:ac:0d:ee:dd:a7:b0:f9:88:b5:97:13:d2:38:aa:e0:
         1e:35:19:47
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
NTgzMjExMC8GA1UEBRMoQkU5QjkwNEVCNzZDQjA1QzYwQzNFMkMzNzlFMkZBNDg5
QTBFMTc3MjAeFw0yNTA4MjMwNzA0MzNaFw0yNTA4MzAwNzA0MzNaMBgxFjAUBgNV
BAMTDTY4YTk2ODAxLTU0ZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxld1aAJ84zkWXZk2nQ4YqUAizPLQROTmg77gHEgTV253fyWaqKzJKCSnqhgzz
OOuF4Hmwjhizppgzn5RRh5Ty6idAAmgWUtUunZUW1HO0jt5WhtplbY/etZz7zwRO
dVYAzTiL+SpNmiNp9RmytF1iUkn4erxyozrkaLuEy7piA5klYr4ICEfgOG/Y7rjs
Mk30YaCWY25BRr3wL+RkNHXv4/LxLUHhjQlqHmndN3Fhi2dwByourRmTLDo4CDXl
j34MyQyDzhgYg8D8WEiKBOfKo8Y3C9NydmYSyvqDEiMc1R4m+vNAYlwHbdrC5CL8
MC8clcaU5tSRxwcQGnAr8GnxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUr7CTdloY
f5/BuGO92MEk37r+4EEwHwYDVR0jBBgwFoAUvpuQTrdssFxgw+LDeeL6SJoOF3Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1ODMyLzI2RTU4MjU0RDBC
QTExRUY4OTZDRDAyNkM0RjlBRTAyL3ZwdVFUcmRzc0Z4Z3ctTERlZUw2U0pvT0Yz
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdnB1UVRyZHNzRnhndy1MRGVlTDZTSm9PRjNJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1
ODMyLzI2RTU4MjU0RDBCQTExRUY4OTZDRDAyNkM0RjlBRTAyL3ZwdVFUcmRzc0Z4
Z3ctTERlZUw2U0pvT0YzSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBALMBQEzg392dLdYQ8gZM2CJK7Ub6ZZ6qeve3s0Lr3hjKF4/RUlYbICbb
5H+/TPnx38MLcF52dVWQt2ZmEs7uxGEysl3lKvzhDhVP0sf8rc4m0ndmhwrHkmRv
dJ/ijkLYxG4iZmdUxGODX92G0lqlXnCCJhKVPrKX4DAr+9zx4btPkqDvr6FO2BN3
uiGA90bUF0RDnqKhj93KQm7hXXik2X2AQ80j05xXVFCbRJlrx67I2xNrJlVn6KMG
P0xEoY6iEeyHNpUJGwW2UW4YU4STqT8aT73IMjpgLW+gs7a779ZwQ4UwafX4wQgt
Tqh6sKwN7t2nsPmItZcT0jiq4B41GUc=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:57:04 2025 by rpki-client