Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
File:                     vkY_wZGbQUKyOCgTgn-3FtbukoM.mft (raw, json)
Hash identifier:          QfL9oYJO0+mJrNpDcY2G4dVVs0f9qB6aohhr3MIF4d0=
Subject key identifier:   E0:6E:6E:76:0F:78:A9:3D:2A:BE:83:EC:BC:97:90:E8:E2:E3:4A:BD
Authority key identifier: BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83
Certificate issuer:       /CN=A91D40BF/serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283
Certificate serial:       0778
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
Manifest number:          0769
Signing time:             Fri 18 Jul 2025 21:50:23 +0000
Manifest this update:     Fri 18 Jul 2025 21:50:22 +0000
Manifest next update:     Fri 25 Jul 2025 21:50:22 +0000
Files and hashes:         1: vkY_wZGbQUKyOCgTgn-3FtbukoM.crl (hash: qUunp8qPM4QNeeXooVuua+sDssbxqt+VULUFniyBOSg=)
                          2: 28543AA0BABA11EB8A51C234C4F9AE02.roa (hash: tLbuywK1hQsCi3a1AqRQB3esx6wP54LrqFgdAXcaBdM=)
                          3: ACEBC29CC5B911EBB41FAF2DC4F9AE02.roa (hash: XOt7bB+UgZTY8Thh+DvUt1JxAIDEDKn5j8X2t+ws97c=)
                          4: 2798B9A6BABA11EB8A51C234C4F9AE02.roa (hash: +zcjX2imATb1GbMG2fycsIcaiWvdU6/+K/wkiamqX6U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl
                          rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 21:50:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1912 (0x778)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D40BF, serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283
        Validity
            Not Before: Jul 18 21:50:22 2025 GMT
            Not After : Jul 25 21:50:22 2025 GMT
        Subject: CN=687ac19f-b5fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7b:f8:74:0d:74:69:df:a2:11:6d:57:45:f0:
                    cd:1a:b2:97:9f:cc:d9:b6:48:d4:2f:54:77:a1:83:
                    8f:a1:fc:82:4a:40:21:ba:24:6d:c5:4b:e7:ca:86:
                    b5:53:d9:ef:ec:0a:9e:98:25:ee:1e:02:30:e2:c9:
                    59:5e:0a:e2:bd:60:6a:bd:3a:01:bc:bc:d8:6b:8d:
                    0c:18:81:d6:ef:70:a9:c9:69:b5:e3:3f:09:18:08:
                    68:e6:18:ec:83:d9:38:c4:8d:11:64:23:cf:dc:6d:
                    f8:71:09:bd:44:37:9f:bb:d2:1f:be:9c:cf:58:6c:
                    5d:c9:51:3d:a6:b5:a8:13:13:75:b4:75:bc:39:f3:
                    ad:6d:77:00:85:ef:0c:34:99:ea:cc:c3:f4:d3:db:
                    44:55:19:04:21:c4:3f:49:d5:4c:fc:b1:b5:e2:bd:
                    5a:81:6e:9e:1c:47:7b:0b:b7:48:fd:23:29:a5:0b:
                    e1:4b:1b:7b:62:a9:f1:ef:93:d7:7c:cc:be:10:e9:
                    2b:53:4e:af:33:db:0c:be:94:84:fd:24:b4:66:cd:
                    15:2b:f9:ae:da:a1:22:86:ff:62:b3:f8:3f:31:a3:
                    25:22:05:27:c4:80:33:ff:ff:b5:35:5b:e6:8e:06:
                    32:0b:87:25:96:7f:37:78:55:ca:3b:cf:ae:a4:1c:
                    e2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6E:6E:76:0F:78:A9:3D:2A:BE:83:EC:BC:97:90:E8:E2:E3:4A:BD
            X509v3 Authority Key Identifier:
                keyid:BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:56:97:eb:bd:06:88:36:65:0f:61:04:ab:01:58:ea:ef:3c:
         d6:f7:60:b2:08:93:8d:a4:1c:f4:0f:c6:72:4c:ad:3d:c4:03:
         66:9d:f5:81:6a:53:a6:ef:d0:f5:d7:db:b9:41:6b:2a:dc:da:
         1d:72:58:88:28:6c:8a:b7:c1:c0:cd:9a:a5:09:1a:3d:34:69:
         a6:89:92:44:7c:e0:60:dd:5c:2f:09:8c:bd:18:bc:21:26:94:
         8f:20:2b:10:2a:08:07:3a:ea:92:c7:5a:23:d6:5e:8f:8b:d4:
         88:38:78:13:70:cc:d0:27:61:3d:c6:91:59:47:3c:ad:7f:9f:
         c1:c0:48:4a:f4:1c:83:27:57:71:2d:ae:62:3b:aa:77:b2:42:
         49:b4:ea:00:8f:d0:10:d7:cf:95:42:b9:25:9e:18:5d:e5:36:
         31:6e:2e:0a:8c:28:23:1f:38:90:01:32:af:02:39:31:8e:95:
         95:8f:97:76:25:73:ea:96:27:dd:85:f8:9f:12:14:14:26:c9:
         d2:9d:27:f1:e9:84:68:2f:6d:72:cb:3d:cf:f0:3e:e4:c0:ca:
         f4:1c:14:8c:e4:78:f1:19:08:cf:6a:a9:d6:0e:5e:d5:f0:06:
         64:1f:14:39:07:4c:f8:3b:5a:d8:4f:91:5f:b0:d6:71:2c:d6:
         a5:51:dc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:54:22 2025 by rpki-client