Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
File:                     vRTPGp8I9oE3_oEWzXdq29sv77Q.mft (raw, json)
Hash identifier:          2+XWck/kzlAbhlhBqImwZhOLvf8A/oqTB2/F0rBt+Io=
Subject key identifier:   CD:B8:10:01:E1:88:4D:D3:23:EE:93:A9:9A:B9:75:1B:C9:28:21:B6
Authority key identifier: BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4
Certificate issuer:       /CN=A9119A40/serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
Certificate serial:       040B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
Manifest number:          1096
Signing time:             Wed 10 Sep 2025 18:25:56 +0000
Manifest this update:     Wed 10 Sep 2025 18:25:56 +0000
Manifest next update:     Wed 17 Sep 2025 18:25:56 +0000
Files and hashes:         1: vRTPGp8I9oE3_oEWzXdq29sv77Q.crl (hash: dnktBwwLmBEcisSNU+HLBHjghd9iCXQtYjunKIM1DFY=)
                          2: D5DBA6BC63ED11ED851C647DC4F9AE02.roa (hash: Cu7mP4ScFcEgh99akamYEaBRClwxLE+oM+a0PvnQM0M=)
                          3: 5277F6368D2411EC816B4C70C4F9AE02.roa (hash: jmM2MyWVgkGoSl8m7eT/QohnLLhAgCt5V5ifbC8tFnE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl
                          rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Sep 2025 18:25:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1035 (0x40b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119A40, serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
        Validity
            Not Before: Sep 10 18:25:56 2025 GMT
            Not After : Sep 17 18:25:56 2025 GMT
        Subject: CN=68c1c2b4-b412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:00:99:6e:05:b2:a3:b2:8f:8b:7e:37:d0:92:
                    2a:cb:88:ee:9d:0d:bf:0d:cc:ab:de:19:87:bd:7c:
                    9b:39:47:0f:58:4b:2e:ae:1f:88:36:83:42:02:91:
                    b7:94:1f:0a:cd:20:b6:15:f8:f5:0e:fa:6e:fa:bb:
                    0e:ff:e4:b2:3b:a0:ec:e6:cd:a5:47:91:bc:3d:c8:
                    a7:d4:1b:00:98:55:cf:c2:8a:2d:8e:dd:9d:4a:c6:
                    23:c2:c5:d1:df:7d:69:31:29:1e:b8:47:05:0c:6a:
                    1d:84:42:b4:96:66:a6:bb:d2:ff:d9:5d:31:0f:e5:
                    24:f3:22:53:9b:68:bd:53:54:33:7e:4a:10:54:42:
                    dc:52:b7:fe:26:83:fe:d5:a4:5d:8a:23:bb:db:be:
                    e5:27:b8:50:5b:74:cb:b2:73:6f:b0:85:50:9d:96:
                    d8:f9:b2:b6:34:64:17:3e:be:f7:2e:c6:94:36:db:
                    dc:aa:60:21:91:50:db:d3:89:00:6c:28:81:3d:3b:
                    f7:90:ba:c4:de:b1:32:9e:63:ca:a9:db:13:de:7c:
                    ec:1f:88:6a:12:e4:d5:e5:b9:8a:f3:84:29:d9:40:
                    1d:2c:5c:40:cf:e2:49:94:d0:8a:b9:3b:ee:3f:c7:
                    86:12:3a:16:06:22:50:5c:bc:28:f7:0e:30:2e:5b:
                    72:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B8:10:01:E1:88:4D:D3:23:EE:93:A9:9A:B9:75:1B:C9:28:21:B6
            X509v3 Authority Key Identifier:
                keyid:BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b4:56:ba:1f:75:54:f7:9f:ad:06:83:1a:d8:2b:0b:8f:b8:
         73:f0:8d:fe:64:82:93:50:be:71:b8:72:aa:92:16:77:29:99:
         c2:eb:a5:90:da:67:72:e8:be:d7:51:93:a4:0c:57:9a:b9:92:
         7d:4b:ce:05:e8:78:fe:1d:c7:13:e3:76:e8:c9:1f:65:43:ed:
         2c:df:f4:8d:de:72:6c:1c:b9:79:23:6d:1a:db:4b:dd:8e:a0:
         a5:c9:a4:5c:b5:4c:10:09:50:17:97:4f:38:f7:98:41:1c:c0:
         33:f6:c5:ee:54:61:22:de:07:5d:ad:f2:0f:76:e3:e1:b6:b6:
         80:a9:9c:5f:98:13:8e:60:56:f9:42:da:92:bc:c3:74:dc:2a:
         0f:79:53:57:44:fc:62:35:05:c1:68:6b:9f:ad:6f:88:60:48:
         1f:89:90:44:23:bb:57:9a:40:a8:00:b4:18:14:83:ab:52:51:
         19:cb:49:07:1c:e7:00:56:18:59:ad:e6:62:be:cc:ad:5b:c1:
         29:0a:c0:cf:e2:36:e2:7e:db:37:a6:47:05:83:ea:6f:89:87:
         20:c4:94:cb:8c:1d:15:ba:df:35:1b:d6:24:73:a6:e2:a0:33:
         20:c7:2c:65:e5:5f:1d:fe:07:70:75:7c:8a:f2:13:4d:8b:fb:
         46:fa:ce:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 02:39:51 2025 by rpki-client