Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft
File:                     V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft (raw, json)
Hash identifier:          gRDR8K0TjZOvWTWZ9XzhiOFgZj9S50SYf14gQ0r0gUI=
Subject key identifier:   0C:09:57:8A:DD:3A:1E:60:52:31:0F:06:0B:FE:12:F8:3F:BD:60:F9
Authority key identifier: 57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33
Certificate issuer:       /CN=A91B7A3F/serialNumber=576C5447C09B597107B770C101C89327F105BD33
Certificate serial:       03D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft
Manifest number:          03CE
Signing time:             Wed 23 Jul 2025 01:03:15 +0000
Manifest this update:     Wed 23 Jul 2025 01:03:14 +0000
Manifest next update:     Wed 30 Jul 2025 01:03:14 +0000
Files and hashes:         1: V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl (hash: CKfxhQH6hBjB7E+3DRl/jfmy7z7gZq/IZaK+smPBKRE=)
                          2: 821CAFEE923811EC955B7A3AC4F9AE02.roa (hash: 9KQWUlz6QNm+2IJYVtG7dsHf8uD3C5dcvLfvCk8SVA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl
                          rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 00:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 980 (0x3d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7A3F, serialNumber=576C5447C09B597107B770C101C89327F105BD33
        Validity
            Not Before: Jul 23 01:03:14 2025 GMT
            Not After : Jul 30 01:03:14 2025 GMT
        Subject: CN=688034d2-9074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ba:5b:a6:34:53:82:04:17:c7:9d:70:ad:41:
                    6b:3b:20:a9:33:a2:17:24:a2:74:91:f8:49:c9:0d:
                    a0:2c:8a:dd:31:86:4e:2e:37:6a:80:e3:e4:92:fe:
                    d1:a0:d2:4c:02:ae:2f:2d:59:6a:1b:cd:d8:39:66:
                    50:70:cf:6d:09:b8:dd:24:40:53:60:66:2b:a1:f3:
                    9a:24:5f:bf:47:b7:8d:41:fa:98:b6:b4:dd:a0:fb:
                    13:8d:e9:1f:73:8e:c2:42:fd:aa:d4:16:e3:bd:75:
                    52:8e:7d:76:90:b2:8f:c6:07:a4:b1:04:f6:dd:f0:
                    a2:f9:e7:68:0d:fc:10:c8:a2:d8:57:47:37:4d:3c:
                    a9:97:e3:51:4d:df:f7:64:08:76:7d:9f:53:06:6d:
                    a1:33:aa:1e:af:7f:d7:53:9c:ac:6a:f2:80:a0:93:
                    cc:02:c5:b8:f2:f9:fd:81:81:5b:6b:01:14:78:19:
                    45:70:ca:48:82:66:30:a2:3e:39:8d:67:4c:f0:aa:
                    0e:6e:04:f7:0b:10:b1:e5:0e:99:d0:d4:80:0d:c7:
                    a3:f2:fd:03:75:4e:20:27:4e:1d:f7:fa:2b:8e:00:
                    1a:0d:da:50:e0:0e:a1:17:c3:27:ec:d4:90:66:d1:
                    cc:f1:c3:15:f7:15:6f:4b:d5:be:d3:e9:a9:13:bb:
                    20:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:09:57:8A:DD:3A:1E:60:52:31:0F:06:0B:FE:12:F8:3F:BD:60:F9
            X509v3 Authority Key Identifier:
                keyid:57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:1e:f3:a3:63:a3:c0:3b:24:15:39:2c:e3:e5:67:a2:80:d9:
         cf:cf:25:71:3d:97:89:0d:90:f5:77:8e:83:c7:de:59:c5:d3:
         52:45:15:5b:de:8e:fb:70:59:06:97:d0:b2:46:22:90:24:cd:
         f3:0e:b8:3d:d6:44:cb:01:f2:08:1c:49:02:0c:4d:7b:ed:eb:
         f5:5a:4b:c6:66:5e:ae:d1:5e:a2:bc:61:80:ba:6a:75:b3:45:
         62:20:b4:2b:00:99:06:b1:38:40:66:44:cf:77:31:c6:69:ce:
         45:f7:d6:2d:97:b4:b1:92:7e:d5:0c:ae:41:67:70:46:58:7c:
         5c:17:7c:00:49:da:63:18:01:32:86:c5:05:12:be:0e:2e:97:
         77:df:72:8f:db:83:ad:cb:3b:2a:72:f3:9e:f9:ba:f6:04:a7:
         a3:8d:37:a1:1b:cb:fb:78:a1:6e:7b:7b:a0:35:d2:88:0c:c0:
         02:06:04:ef:59:54:62:53:b9:f6:ce:08:bf:b0:25:ef:9c:8b:
         5f:a5:55:49:9d:bd:24:2b:7e:7a:ef:f1:50:08:c8:c5:48:05:
         55:4e:b4:bb:eb:97:5e:44:e3:29:d3:79:0a:07:ce:c8:e6:cb:
         70:9c:c3:94:0f:04:ea:5c:87:1f:5d:01:4e:56:f0:60:26:6b:
         63:39:46:37
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjdBM0YxMTAvBgNVBAUTKDU3NkM1NDQ3QzA5QjU5NzEwN0I3NzBDMTAxQzg5MzI3
RjEwNUJEMzMwHhcNMjUwNzIzMDEwMzE0WhcNMjUwNzMwMDEwMzE0WjAYMRYwFAYD
VQQDEw02ODgwMzRkMi05MDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7bpbpjRTggQXx51wrUFrOyCpM6IXJKJ0kfhJyQ2gLIrdMYZOLjdqgOPkkv7R
oNJMAq4vLVlqG83YOWZQcM9tCbjdJEBTYGYrofOaJF+/R7eNQfqYtrTdoPsTjekf
c47CQv2q1BbjvXVSjn12kLKPxgeksQT23fCi+edoDfwQyKLYV0c3TTypl+NRTd/3
ZAh2fZ9TBm2hM6oer3/XU5ysavKAoJPMAsW48vn9gYFbawEUeBlFcMpIgmYwoj45
jWdM8KoObgT3CxCx5Q6Z0NSADcej8v0DdU4gJ04d9/orjgAaDdpQ4A6hF8Mn7NSQ
ZtHM8cMV9xVvS9W+0+mpE7sgTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwJV4rd
Oh5gUjEPBgv+Evg/vWD5MB8GA1UdIwQYMBaAFFdsVEfAm1lxB7dwwQHIkyfxBb0z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0EzRi82NEMzMzk0ODky
MzUxMUVDOTYwNDc1MTFDNEY5QUUwMi9WMnhVUjhDYldYRUh0M0RCQWNpVEpfRUZ2
VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1YyeFVSOENiV1hFSHQzREJBY2lUSl9FRnZUTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
N0EzRi82NEMzMzk0ODkyMzUxMUVDOTYwNDc1MTFDNEY5QUUwMi9WMnhVUjhDYldY
RUh0M0RCQWNpVEpfRUZ2VE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAHHvOjY6PAOyQVOSzj5WeigNnPzyVxPZeJDZD1d46Dx95ZxdNSRRVb
3o77cFkGl9CyRiKQJM3zDrg91kTLAfIIHEkCDE177ev1WkvGZl6u0V6ivGGAump1
s0ViILQrAJkGsThAZkTPdzHGac5F99Ytl7Sxkn7VDK5BZ3BGWHxcF3wASdpjGAEy
hsUFEr4OLpd333KP24OtyzsqcvOe+br2BKejjTehG8v7eKFue3ugNdKIDMACBgTv
WVRiU7n2zgi/sCXvnItfpVVJnb0kK3567/FQCMjFSAVVTrS765deROMp03kKB87I
5stwnMOUDwTqXIcfXQFOVvBgJmtjOUY3
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:11:00 2025 by rpki-client