Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft
File:                     vtASVxhUXB5QgDHT_1-26Chqf9g.mft (raw, json)
Hash identifier:          LUB4g1fT0aSHTBkcGteotXMtUmWVtwzY+CZL3T03Kxc=
Subject key identifier:   01:53:C8:1B:82:CA:14:F3:2C:5E:36:12:62:90:50:BE:66:46:7E:FA
Authority key identifier: BE:D0:12:57:18:54:5C:1E:50:80:31:D3:FF:5F:B6:E8:28:6A:7F:D8
Certificate issuer:       /CN=A91E72DE/serialNumber=BED0125718545C1E508031D3FF5FB6E8286A7FD8
Certificate serial:       0231
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft
Manifest number:          022E
Signing time:             Sat 23 Aug 2025 02:08:36 +0000
Manifest this update:     Sat 23 Aug 2025 02:08:35 +0000
Manifest next update:     Sat 30 Aug 2025 02:08:35 +0000
Files and hashes:         1: vtASVxhUXB5QgDHT_1-26Chqf9g.crl (hash: z20QptFFcTiyL5rt8yfc7TfI6Ke3yFgxdK9uaHpoC2E=)
                          2: DBA023303B6F11ED903B484FC4F9AE02.roa (hash: wuoqyYVDiG/sRQZo+9RPf+TSJtEdkwDtdHHUSy4QKA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.crl
                          rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 02:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 561 (0x231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E72DE, serialNumber=BED0125718545C1E508031D3FF5FB6E8286A7FD8
        Validity
            Not Before: Aug 23 02:08:35 2025 GMT
            Not After : Aug 30 02:08:35 2025 GMT
        Subject: CN=68a922a3-c476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0e:32:6d:50:45:7c:26:13:37:c7:3e:9b:b1:
                    46:1e:19:58:64:bf:23:60:96:e2:f5:40:f6:46:a6:
                    42:e1:11:a0:9a:54:ab:7b:ec:1c:68:76:25:5f:72:
                    ac:4a:60:e2:3e:ea:b8:a8:fe:0f:5a:01:06:c8:64:
                    fa:48:0d:ef:a4:ae:b9:ed:3b:2b:09:f3:92:9c:83:
                    07:43:7e:0c:08:38:51:68:af:59:71:d9:6c:08:3d:
                    b1:5a:16:32:13:39:09:5f:d6:93:6f:fc:92:35:c1:
                    e1:5f:f1:0d:ec:21:8d:df:10:52:0e:73:f5:78:b0:
                    1a:e0:ec:3d:0f:d3:48:23:50:21:4a:f3:af:73:84:
                    c5:c5:5b:35:f5:db:d5:a0:da:7e:53:97:87:b5:61:
                    a3:99:e3:ca:f6:bb:39:fe:0a:61:e8:0b:e8:9b:e8:
                    14:20:e9:87:21:d0:07:ff:eb:c5:57:f7:4e:8d:10:
                    1a:fd:83:c5:b7:ae:6c:d3:05:da:92:2d:67:fd:d3:
                    09:2f:11:a0:da:fe:8d:c9:8f:fb:64:02:18:35:73:
                    ee:31:d0:3a:8e:0e:1a:28:75:8e:2e:02:a4:14:81:
                    7c:15:32:65:4e:ca:9c:98:9c:4c:fa:86:59:5e:08:
                    c6:82:91:1b:0d:8f:ba:fd:9c:dd:df:6d:1e:37:0e:
                    0a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:53:C8:1B:82:CA:14:F3:2C:5E:36:12:62:90:50:BE:66:46:7E:FA
            X509v3 Authority Key Identifier:
                keyid:BE:D0:12:57:18:54:5C:1E:50:80:31:D3:FF:5F:B6:E8:28:6A:7F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vtASVxhUXB5QgDHT_1-26Chqf9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E72DE/8DE4E4C03B6D11EDB2B3B34EC4F9AE02/vtASVxhUXB5QgDHT_1-26Chqf9g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:dc:c0:d8:7c:bc:6f:68:8c:a5:a2:23:e7:24:f1:80:b2:1a:
         f3:eb:c9:1c:3f:7d:a6:86:d6:ec:75:28:1e:25:75:1a:67:31:
         08:88:b0:60:1f:bf:65:07:c8:e4:1d:49:fc:dd:c8:2c:e9:99:
         39:df:83:21:ac:2a:d5:c2:b2:df:e1:bf:5e:8e:13:bc:dc:bd:
         3b:71:42:fd:33:d1:02:56:56:e8:4c:61:a5:c0:15:8a:4e:da:
         53:d9:d1:32:09:99:ae:8b:aa:53:11:29:c0:eb:d8:d1:ee:17:
         cf:da:f4:ab:63:0b:1e:73:91:4f:71:3e:d9:5d:2e:bd:ea:c4:
         8c:af:89:09:2a:bf:b5:72:f7:4a:7e:6b:72:a2:50:0b:29:bf:
         e3:eb:51:bb:37:94:69:98:fc:51:a8:34:f3:a2:93:b4:9b:51:
         48:85:df:e9:c2:0c:0b:20:9f:58:bf:86:d5:53:75:13:66:45:
         86:f8:fc:7a:70:0b:f8:92:7e:88:b1:cc:f5:80:d2:2f:a2:0c:
         c4:49:d3:8f:ba:b4:60:b5:37:81:6b:41:39:eb:16:f6:22:ed:
         d1:a4:24:08:71:1d:fa:5c:72:69:f9:13:37:e2:42:94:7b:fc:
         c1:6a:c4:3a:30:93:76:dc:d9:24:6c:cb:9c:bc:c8:18:a1:55:
         ea:d4:b7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:05:50 2025 by rpki-client