Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
File:                     VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft (raw, json)
Hash identifier:          TqjV7MNft71zHch2iJGQkKLlO5s8Y6w7olNn62jG3Hw=
Subject key identifier:   70:52:7B:91:B5:4C:79:EA:1D:12:7E:49:D7:22:0C:E2:00:DC:CA:3F
Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E
Certificate issuer:       /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E
Certificate serial:       0443
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
Manifest number:          042A
Signing time:             Sun 29 Jun 2025 22:45:08 +0000
Manifest this update:     Sun 29 Jun 2025 22:45:08 +0000
Manifest next update:     Sun 06 Jul 2025 22:45:08 +0000
Files and hashes:         1: VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl (hash: dROURcRXCLD1Z6Z/824k8xyAZaB3LsGMJLmloUNTqWU=)
                          2: 616435103F3E11EE81024074C4F9AE02.roa (hash: BV7IOs58jkocun9KOxJEZWid0CjNqRr4h3oLm+oM9XA=)
                          3: 168BE8747EEE11ECAB036C59C4F9AE02.roa (hash: wF1Z2aa2PTEiRRPCp23vYrxyf7/d64gIm78PkkwoFEI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl
                          rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 22:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1091 (0x443)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDAD4, serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E
        Validity
            Not Before: Jun 29 22:45:08 2025 GMT
            Not After : Jul  6 22:45:08 2025 GMT
        Subject: CN=6861c1f4-638e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d5:09:2c:87:e7:cc:cc:04:25:fc:db:60:23:
                    90:2f:1f:9e:d1:f5:e1:3f:90:bc:e8:30:83:08:61:
                    a2:ac:fe:62:e9:df:8c:80:e8:31:39:1d:ac:38:f7:
                    58:ef:8f:73:5d:14:8d:15:f7:34:9b:9e:14:01:ea:
                    43:79:c8:fe:d0:2c:bc:5c:d2:ce:aa:79:c6:f6:d7:
                    aa:e6:03:df:f5:6b:1f:1f:06:ec:c0:ee:da:83:a8:
                    b2:2c:34:18:4f:0e:6a:af:b3:e3:43:ab:92:84:4f:
                    1a:95:08:58:67:47:31:4e:48:d1:1c:ca:6d:c8:e4:
                    a1:be:66:0f:8b:c3:4f:32:b5:4a:5a:69:ec:83:e9:
                    48:c5:05:73:ab:b9:b7:79:26:b9:ea:18:9d:e0:b6:
                    03:bb:36:40:a2:ca:d8:44:09:f6:0e:08:cb:44:49:
                    5c:42:4c:97:4c:bc:2a:9e:bd:64:0c:eb:b3:86:3c:
                    80:c0:5c:0a:fb:7a:9c:13:37:58:1d:f9:fa:c9:42:
                    da:d4:f6:5d:94:f8:2a:55:b1:1d:eb:e5:9e:29:1d:
                    01:ed:2c:30:bc:1a:97:73:52:38:8d:1e:c4:43:33:
                    83:bd:ce:78:20:89:d8:eb:9a:3c:20:c2:54:99:d3:
                    67:46:c3:13:31:3f:fc:c5:23:37:41:09:d0:b2:ad:
                    17:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:52:7B:91:B5:4C:79:EA:1D:12:7E:49:D7:22:0C:E2:00:DC:CA:3F
            X509v3 Authority Key Identifier:
                keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ef:a2:67:76:90:47:56:25:da:36:68:54:39:23:83:4f:d2:
         50:7f:e3:35:df:50:ca:ff:f9:25:c5:2b:e4:fa:32:9f:0b:6f:
         07:a7:c3:dc:59:b5:f2:46:ad:97:8e:10:ad:5f:ed:a0:65:25:
         2f:05:28:d9:bc:15:83:24:18:7f:bf:00:9e:aa:da:b2:24:b6:
         e3:50:cd:fe:8f:7c:a4:1d:04:b9:73:31:3d:61:a6:6d:6e:50:
         81:7d:32:9d:5e:26:48:5b:71:e8:49:68:8c:87:ae:6c:e5:76:
         44:d8:d1:2f:19:cd:d5:4c:c7:34:d4:b3:95:33:3d:a0:f9:10:
         2a:3a:0c:26:fc:bd:ea:76:86:d9:a2:f0:99:5a:f2:f7:02:f2:
         a8:33:82:e7:58:f9:b8:bf:c8:47:1b:94:41:52:69:11:5a:cc:
         d7:c9:3b:c4:6c:7b:4a:ce:6c:92:47:ee:be:12:c5:b0:a3:a7:
         60:69:7a:a2:f5:3f:0c:99:a3:c9:ac:f0:02:b3:8c:d1:eb:a1:
         4c:69:00:ef:50:df:f7:37:96:b6:7c:d5:cc:96:ee:e3:3e:48:
         03:7b:2b:c3:ab:1d:31:ab:bc:78:be:76:bf:22:58:45:2c:09:
         76:42:a9:00:be:02:0d:51:8a:66:25:df:ec:07:8c:60:12:67:
         a4:40:09:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:27:34 2025 by rpki-client