Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
File:                     vKs-dvhO1DdC8qCBJCcI55nOG18.mft (raw, json)
Hash identifier:          iWcYrfgw94jQZC0ILyQjX3q7+Fd4tlBgx4+D8vpx9JE=
Subject key identifier:   A4:38:6D:7F:37:18:F9:64:EA:58:69:F2:55:A8:5F:EB:5F:4F:88:B8
Authority key identifier: BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
Certificate issuer:       /CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
Certificate serial:       010F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
Manifest number:          FA
Signing time:             Wed 23 Jul 2025 05:40:38 +0000
Manifest this update:     Wed 23 Jul 2025 05:40:38 +0000
Manifest next update:     Wed 30 Jul 2025 05:40:38 +0000
Files and hashes:         1: vKs-dvhO1DdC8qCBJCcI55nOG18.crl (hash: A58DFCFpYkiYzVJAPyXsYSn82r8qZXWhGCiFbRhSvXk=)
                          2: A2EBCE92083011EF82AFFD44C4F9AE02.roa (hash: lXTjS6CJ65+GSXDHPnNs6WKGp+QMD+laNZ7PWnUDq4w=)
                          3: 222F2952038511EFAF036327C4F9AE02.roa (hash: 0POds3yRjM0RD6yJRDt5kjZrzEVN1RcsA2tdedecI4c=)
                          4: A0AD48EA083011EF82AFFD44C4F9AE02.roa (hash: E2oXK+nP7XuyH0hDSL1uq1DEWcq+1W48Rez3w3+1ppw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl
                          rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 05:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC532, serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
        Validity
            Not Before: Jul 23 05:40:38 2025 GMT
            Not After : Jul 30 05:40:38 2025 GMT
        Subject: CN=688075d6-e43a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a1:52:51:c0:91:4b:bb:c4:40:a3:f9:42:0d:
                    b8:11:51:a2:77:6c:9a:5b:33:f7:7a:e0:62:12:7d:
                    d7:d7:81:b0:92:90:63:b6:43:01:23:0c:c7:dc:8d:
                    11:2b:ab:c6:a8:70:b8:e4:37:4f:61:24:e6:e4:92:
                    40:97:77:57:7d:6a:2e:14:5e:8a:b4:11:c3:3d:95:
                    53:89:29:dd:c5:69:d2:fa:53:a8:12:e0:54:b4:53:
                    5c:5e:71:a1:ea:94:e7:0a:d9:fe:72:cf:23:9f:4a:
                    1a:d8:3d:4f:5e:83:31:68:f1:c5:38:bb:04:c7:4d:
                    0e:f4:01:4d:74:79:08:5d:fb:60:50:5f:f9:80:62:
                    68:67:91:48:22:cf:00:2b:dd:27:47:f0:0f:65:f4:
                    98:57:22:26:c8:83:69:af:b2:76:a1:8b:57:0c:68:
                    69:87:68:63:31:81:c5:18:7a:3d:fa:8f:84:ab:cc:
                    ad:1c:4e:e5:46:31:74:5f:a7:e8:2f:d5:ed:cb:2e:
                    1a:1a:3b:cb:29:a5:3f:3b:5a:3a:35:b7:5b:7a:0e:
                    af:87:f3:3e:98:8b:27:1a:4a:d1:11:8c:b4:64:2d:
                    22:ed:f0:f0:53:de:d9:40:87:91:ea:d9:d0:b5:43:
                    ef:c1:5c:f8:10:93:9e:f9:d5:54:01:f6:77:05:28:
                    8b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:38:6D:7F:37:18:F9:64:EA:58:69:F2:55:A8:5F:EB:5F:4F:88:B8
            X509v3 Authority Key Identifier:
                keyid:BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:b1:38:fa:59:b0:93:af:ae:9d:cc:d2:36:aa:ab:8f:c0:58:
         3c:7d:24:e5:43:99:6e:14:e9:0f:ab:4c:be:2f:ad:a8:9f:75:
         9f:40:06:cd:80:fe:1b:d8:91:40:10:5d:a0:37:98:98:75:07:
         b7:80:38:51:be:1e:9b:9f:1e:70:74:f9:12:c5:9d:45:d7:7f:
         28:0a:43:f8:62:24:c4:b8:60:e4:3f:65:15:3e:69:f5:45:27:
         46:a8:7c:65:9b:a9:b7:77:98:9d:3c:de:ff:dc:89:60:08:d2:
         97:45:7f:19:6e:8e:84:e9:a9:66:60:a9:c1:43:47:e2:19:3c:
         ed:42:59:1b:02:b3:f6:ba:c3:0b:2f:42:33:8c:b3:88:60:ef:
         c4:04:05:c4:69:50:bc:bb:f4:7b:52:76:4d:05:62:ba:55:40:
         cf:28:34:89:49:b4:88:88:cf:5f:e4:f1:53:ee:fe:50:51:7a:
         d0:c0:cc:39:44:cd:b6:17:5c:9c:ae:f6:bf:70:ef:e3:85:41:
         cc:0a:df:9c:bf:44:2a:4e:72:49:4d:3f:78:44:c8:a8:f6:3f:
         96:d4:13:00:25:eb:21:17:52:7a:3b:84:78:94:73:c8:a3:01:
         3d:36:70:c2:27:50:8f:3b:70:e8:13:8f:50:b0:7b:66:41:df:
         38:22:f2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:25:34 2025 by rpki-client