Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft
File:                     VFxHwOQxMzjcm0QCwSuty06YV8E.mft (raw, json)
Hash identifier:          aPHXu2AETIi0/b5kOmRpCg5rsFrtIgk9HFeYRX7epKk=
Subject key identifier:   28:49:37:44:EA:32:8A:09:45:CD:A7:AB:B7:46:F2:A1:2A:8F:5D:BD
Authority key identifier: 54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1
Certificate issuer:       /CN=A91FB103/serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1
Certificate serial:       0143
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft
Manifest number:          0139
Signing time:             Mon 21 Jul 2025 04:39:52 +0000
Manifest this update:     Mon 21 Jul 2025 04:39:52 +0000
Manifest next update:     Mon 28 Jul 2025 04:39:52 +0000
Files and hashes:         1: VFxHwOQxMzjcm0QCwSuty06YV8E.crl (hash: R1DKVlcnNOaZ6W1rJsK6HgvLHxp5STmiy2UO2qtXeYc=)
                          2: 77F8EAD29CF811EFA2E0CD6AC4F9AE02.roa (hash: Ain3qdd9woinL4inH/8nG99VHakyMNpv4v8rmQWJ1Bs=)
                          3: 0F440AB26E7711EFAA4A1C1AC4F9AE02.roa (hash: O1np95hbIM7tMbwqTYjzC3DrWBrLxkB/hTITnk5MJww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.crl
                          rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 04:39:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB103, serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1
        Validity
            Not Before: Jul 21 04:39:52 2025 GMT
            Not After : Jul 28 04:39:52 2025 GMT
        Subject: CN=687dc498-39d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:16:5a:f5:f3:b0:f9:df:55:4f:9b:88:40:6e:
                    39:0c:2a:3d:02:c3:52:8e:c2:ef:34:2d:da:6f:11:
                    09:f1:74:3f:74:38:02:2e:ee:e3:6b:da:ec:f5:90:
                    0d:c9:42:5c:da:ea:b0:45:9a:fd:80:99:3a:9b:8c:
                    e7:ca:7d:09:70:92:ef:28:cc:36:9e:5f:b8:4c:e8:
                    a2:c7:94:32:7b:17:89:d6:4f:4b:a9:21:9a:a4:d6:
                    75:34:2f:5f:fd:e2:b7:86:4c:3a:16:59:ed:f1:e4:
                    e9:26:62:5b:21:b7:99:da:2f:3f:75:aa:1b:2f:84:
                    dc:b5:c4:92:5a:fc:c9:05:85:ae:ed:cb:d1:d1:c7:
                    01:c7:de:12:0c:d2:67:5a:83:c3:90:3d:c0:ab:17:
                    45:b9:2b:af:fc:2e:a8:29:1a:15:05:31:6b:37:83:
                    8f:fc:1b:0b:fd:fb:ff:bc:37:2c:71:7f:f8:b8:81:
                    bb:4c:25:dc:a3:77:09:f3:21:9b:f7:49:83:7d:b8:
                    d5:76:98:df:7e:77:07:fe:4e:bc:63:40:b5:20:81:
                    84:1a:e1:39:c1:ff:13:56:fe:50:03:82:7c:f0:4e:
                    42:97:a6:8e:b1:7d:dc:a1:66:a1:dd:ec:f2:d9:05:
                    ba:2e:e0:a6:81:6b:e8:b0:91:21:fe:bc:fd:42:eb:
                    3e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:49:37:44:EA:32:8A:09:45:CD:A7:AB:B7:46:F2:A1:2A:8F:5D:BD
            X509v3 Authority Key Identifier:
                keyid:54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:ec:ee:9a:f9:a0:c0:9f:40:e2:a7:ea:f7:8c:2c:4a:63:4a:
         24:96:9d:26:c5:f5:67:f1:98:1a:5f:6c:80:d8:1c:64:15:5d:
         95:51:3a:e7:0d:64:f4:fd:73:7e:ba:0a:a6:df:a5:a9:4e:e9:
         be:b1:9c:e8:29:85:e5:d3:27:50:71:22:ff:07:9c:7b:6e:ec:
         4c:3f:42:16:93:e3:52:df:55:d6:77:be:fd:f5:32:9e:b5:32:
         12:b0:9a:93:41:3e:7d:9c:c5:22:51:8d:4d:0c:1a:a3:f5:40:
         ad:43:63:c1:53:eb:8f:80:82:d7:44:03:d0:c1:f9:8c:85:58:
         80:a1:32:35:18:83:a3:cf:a7:d6:97:f4:6f:6c:3c:5a:99:0e:
         38:4f:07:eb:f3:42:b7:67:2c:0c:fa:12:6b:67:db:91:d3:2d:
         86:3f:97:6f:a6:b9:77:fe:e4:78:2a:7f:9c:bb:68:77:65:f3:
         77:a8:6e:0b:65:9d:55:05:89:f5:df:dc:ac:6b:01:63:43:56:
         18:e3:7a:5d:ff:0a:59:08:29:b9:91:d4:8e:cb:98:f2:32:6f:
         cb:f6:c1:a9:2c:a8:38:25:41:fa:51:e2:33:4e:bd:3f:4d:1f:
         e8:0d:8f:62:a9:03:a2:cb:25:ac:08:96:d4:36:32:36:87:94:
         d1:34:70:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:09:15 2025 by rpki-client