Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
File:                     voUqizt-pcWsWlKqy4UqAaTN0II.mft (raw, json)
Hash identifier:          9kNZCzTWftMIZU0fD3pyzzFhiU1evWtSWXeHMrPRft0=
Subject key identifier:   C4:AE:F2:66:38:5B:B2:25:22:F5:69:18:BE:33:1C:43:80:4B:05:DF
Authority key identifier: BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
Certificate issuer:       /CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Certificate serial:       048B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
Manifest number:          0475
Signing time:             Sat 23 Aug 2025 00:24:35 +0000
Manifest this update:     Sat 23 Aug 2025 00:24:34 +0000
Manifest next update:     Sat 30 Aug 2025 00:24:34 +0000
Files and hashes:         1: voUqizt-pcWsWlKqy4UqAaTN0II.crl (hash: Pmn8Toh6PAuYAgPVUTqKEW5koFbrGnVASnP4Tsmi3vE=)
                          2: D717B9F0B7E511EFB5F63E6DC4F9AE02.roa (hash: R/nnjeAR+tZePhFeIgEDIZOhg5pi4qQT+4iwQfx8ekU=)
                          3: D254B444679111EF8A2C9062C4F9AE02.roa (hash: KIM/sEwaQaYFPC8qF/5+qRUkUFtySui4RoXzgpLXzmc=)
                          4: 14F55DEAB7E611EF9B9D9F6DC4F9AE02.roa (hash: BIPMm9ibDgvfx7NU935+UV2sEA5f17RgI+qcbtg58kw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
                          rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 00:24:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1163 (0x48b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF428, serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
        Validity
            Not Before: Aug 23 00:24:34 2025 GMT
            Not After : Aug 30 00:24:34 2025 GMT
        Subject: CN=68a90a42-6fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:35:03:c3:99:87:44:24:94:1a:54:7d:3f:b3:
                    43:2b:bf:ba:2b:04:f8:b8:51:5a:77:42:6c:f8:72:
                    09:76:42:eb:bd:9e:d5:be:40:73:e0:57:03:39:09:
                    41:66:b9:6a:11:53:44:d7:9e:b7:11:ac:25:dd:e8:
                    73:43:df:c5:26:aa:33:d3:76:fa:f0:fd:ba:d0:6c:
                    25:a6:51:a0:6e:bb:83:e2:c5:f7:15:fd:c3:25:ff:
                    2c:2e:3f:35:c8:27:be:b0:33:ce:76:b3:83:42:2f:
                    50:4d:dd:8a:ba:fa:11:24:01:5e:15:ad:5a:92:a2:
                    59:15:a1:02:35:a5:6a:47:b5:f1:4e:1d:27:be:dd:
                    27:e2:a5:11:bd:24:77:43:82:29:09:a4:a7:fe:19:
                    cf:a6:a9:e4:eb:b5:4f:43:57:88:04:2f:f1:f0:f7:
                    d0:99:a4:a1:79:2d:d7:db:26:cb:c4:56:d3:65:bf:
                    08:6d:f0:19:58:c9:e9:96:1b:b9:22:c3:7f:2a:7b:
                    c2:ad:3c:e7:04:d5:e4:c0:57:ae:78:22:60:37:23:
                    42:3a:e0:15:71:54:7f:69:75:9c:a6:19:bc:05:8a:
                    9d:3d:c1:81:5b:d7:b9:4e:b0:3f:3b:2b:46:a6:f4:
                    f6:70:66:82:8a:ac:0a:1c:66:65:97:ef:1d:65:ff:
                    26:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:AE:F2:66:38:5B:B2:25:22:F5:69:18:BE:33:1C:43:80:4B:05:DF
            X509v3 Authority Key Identifier:
                keyid:BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:87:23:67:c6:94:57:c5:46:2f:00:a4:40:c6:33:a5:ae:71:
         1e:05:87:40:75:78:44:57:77:07:f4:f3:bb:b2:d7:81:0a:97:
         99:85:49:79:9a:eb:0b:70:dd:e8:77:1f:8e:db:8e:6b:70:b3:
         35:3a:80:71:fb:e4:33:9b:1e:7d:ce:9a:80:af:c2:ff:3a:39:
         8a:f4:2d:58:ce:07:26:4c:11:27:b5:b6:6d:08:dc:1e:05:d8:
         63:70:e2:90:d2:7d:82:c5:fa:d8:18:9a:93:08:a1:40:95:89:
         64:5d:e2:4e:84:60:ed:f8:84:0a:66:90:1c:76:84:7d:85:70:
         ef:28:00:db:f4:3a:16:21:f5:aa:39:e1:51:df:b1:2c:8c:f8:
         64:b0:8d:74:9d:ac:54:b1:c4:a1:e5:b2:3c:d1:ad:5b:c7:a6:
         39:08:ed:01:7e:9b:60:ac:d1:0d:a6:b0:2c:13:9b:2e:c3:ed:
         34:6d:4a:2f:cc:1f:14:92:b8:e4:7a:9e:94:bf:34:d0:93:f2:
         35:c1:01:f3:58:2f:16:3b:3f:8e:87:fa:a9:2c:5c:38:71:2f:
         0a:b9:d6:5b:a5:8b:5f:42:87:ed:6b:62:9e:62:06:ae:dc:61:
         e4:9c:b0:84:ec:23:45:c5:db:c0:ba:df:4d:50:23:a5:2a:b9:
         0c:cf:75:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:20:01 2025 by rpki-client