Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
File:                     vKs-dvhO1DdC8qCBJCcI55nOG18.mft (raw, json)
Hash identifier:          Kv8G0tqAggdvLMemS3P8qbPUOcTau7iDHpkMQBzGTsU=
Subject key identifier:   E6:A3:52:D7:46:92:2A:79:96:FD:72:F9:9A:59:EB:81:CE:4C:5D:56
Authority key identifier: BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
Certificate issuer:       /CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
Certificate serial:       010E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
Manifest number:          F9
Signing time:             Mon 21 Jul 2025 05:32:20 +0000
Manifest this update:     Mon 21 Jul 2025 05:32:19 +0000
Manifest next update:     Mon 28 Jul 2025 05:32:19 +0000
Files and hashes:         1: vKs-dvhO1DdC8qCBJCcI55nOG18.crl (hash: n3izyoz+ZVSZ43wgKQuGEZjbyJRXa3s1dRSQP7EBED8=)
                          2: A2EBCE92083011EF82AFFD44C4F9AE02.roa (hash: lXTjS6CJ65+GSXDHPnNs6WKGp+QMD+laNZ7PWnUDq4w=)
                          3: 222F2952038511EFAF036327C4F9AE02.roa (hash: 0POds3yRjM0RD6yJRDt5kjZrzEVN1RcsA2tdedecI4c=)
                          4: A0AD48EA083011EF82AFFD44C4F9AE02.roa (hash: E2oXK+nP7XuyH0hDSL1uq1DEWcq+1W48Rez3w3+1ppw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl
                          rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 05:32:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC532, serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
        Validity
            Not Before: Jul 21 05:32:19 2025 GMT
            Not After : Jul 28 05:32:19 2025 GMT
        Subject: CN=687dd0e4-233d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:af:6c:4e:b9:45:2f:fb:98:ba:63:9b:04:5b:
                    1f:02:c2:76:ac:cc:07:3e:b7:59:6b:1b:63:72:b1:
                    90:88:8d:85:40:89:1b:46:81:5c:1f:6f:53:e0:25:
                    6e:b3:50:ca:95:ee:ea:0e:90:08:45:27:b1:27:58:
                    91:fb:dd:0e:ed:d0:d8:b9:58:ec:4e:43:9d:f6:84:
                    91:6d:d7:6a:4c:c8:e7:cd:d5:39:c9:37:2f:d5:3e:
                    08:5b:bb:3b:f7:34:d9:8c:39:df:92:96:fb:34:55:
                    31:33:0a:c0:da:ea:3e:31:54:1f:d8:ec:11:bf:0e:
                    2b:48:a9:f7:43:f5:99:ba:15:16:43:af:1f:30:52:
                    16:94:68:a9:0e:ee:db:cd:e9:22:a8:c9:94:72:86:
                    95:97:be:85:50:7b:e2:c0:b7:cc:4b:d6:6e:e1:91:
                    85:65:32:f9:a4:f6:bc:75:12:3b:f3:a6:a9:7d:da:
                    43:84:f2:9e:8c:75:df:6a:45:a9:17:11:70:8d:8f:
                    99:33:1b:06:10:3d:ec:df:bf:a8:42:55:75:36:64:
                    48:50:c2:39:f1:a0:cc:98:4b:bb:f1:b5:6c:5b:3e:
                    46:26:9c:0f:46:ed:f3:33:ae:97:14:09:c2:64:82:
                    0c:1b:f4:12:cb:60:f6:25:ec:4a:ab:21:33:85:22:
                    d5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A3:52:D7:46:92:2A:79:96:FD:72:F9:9A:59:EB:81:CE:4C:5D:56
            X509v3 Authority Key Identifier:
                keyid:BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:77:34:65:94:74:1f:73:50:10:a0:3e:e4:aa:67:a9:f8:3d:
         31:ef:43:60:1a:9b:cc:8b:35:66:95:f2:77:1a:a4:e6:5a:8d:
         c6:95:08:07:02:5f:6e:62:87:c4:ca:bd:73:cf:72:f2:5f:5b:
         19:a8:1a:8e:de:4f:d3:d4:99:26:cf:6d:e8:a3:92:a1:04:94:
         a4:2c:c0:ea:ca:c4:a9:79:7b:08:0c:2d:29:b7:47:0c:b8:b9:
         6f:0d:8c:54:8a:34:6e:f2:03:81:1c:4d:78:d7:95:c9:bf:0b:
         76:3c:93:39:5e:89:2c:48:b5:8a:64:3a:9d:ca:63:fe:79:31:
         53:d8:21:a3:80:d8:32:8e:e0:6b:79:95:cd:b2:95:fd:7d:e9:
         f5:0c:59:8d:3f:3f:52:35:25:76:cf:d3:80:80:91:77:c4:13:
         14:31:df:71:2d:bf:b8:c3:bb:ea:9c:e8:cb:19:13:fe:9a:c6:
         b6:f9:a3:35:26:20:8f:33:e9:a7:16:0d:c3:01:8e:25:b2:29:
         d8:58:bc:e5:39:1a:d6:e9:9e:46:89:2a:15:11:6e:47:4c:6b:
         e9:c2:2f:22:5a:60:ce:2b:c5:8b:52:2c:01:cd:62:37:93:5f:
         1f:ae:ee:a8:0c:07:a1:9d:86:25:da:f5:ff:47:f0:df:9b:78:
         cc:a8:ee:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:26:59 2025 by rpki-client