Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.mft
File:                     VV50iV-5CWGfKZw_nQuwhV_YFug.mft (raw, json)
Hash identifier:          hgs05vj9rwW6Z70aF4tM0/TtQLW/98uVsYGw1U3nBxo=
Subject key identifier:   21:6B:79:FE:50:D8:F0:45:1F:CD:AB:0C:BE:3C:03:33:88:49:95:FC
Authority key identifier: 55:5E:74:89:5F:B9:09:61:9F:29:9C:3F:9D:0B:B0:85:5F:D8:16:E8
Certificate issuer:       /CN=A9143684/serialNumber=555E74895FB909619F299C3F9D0BB0855FD816E8
Certificate serial:       34B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VV50iV-5CWGfKZw_nQuwhV_YFug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.mft
Manifest number:          34B7
Signing time:             Sun 24 Aug 2025 15:11:07 +0000
Manifest this update:     Sun 24 Aug 2025 15:11:07 +0000
Manifest next update:     Sun 31 Aug 2025 15:11:07 +0000
Files and hashes:         1: VV50iV-5CWGfKZw_nQuwhV_YFug.crl (hash: HfL26XwfaJ7BSUBP+zONJ3Aa7a/pyJC1k6gVCfJN9D8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.crl
                          rsync://rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VV50iV-5CWGfKZw_nQuwhV_YFug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Aug 2025 15:11:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13495 (0x34b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143684, serialNumber=555E74895FB909619F299C3F9D0BB0855FD816E8
        Validity
            Not Before: Aug 24 15:11:07 2025 GMT
            Not After : Aug 31 15:11:07 2025 GMT
        Subject: CN=68ab2b8b-601e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a2:27:bc:ea:db:49:5e:45:d4:bc:0f:a8:e5:
                    90:9d:15:65:e3:91:4f:59:ee:1b:79:1c:1e:9c:13:
                    08:01:5e:1a:97:18:7a:07:ba:c3:d3:81:61:bc:a7:
                    fe:a7:2f:e2:4c:b5:11:c4:ab:17:cf:1a:e4:e8:f7:
                    79:61:0f:53:73:51:f0:02:01:8e:2a:6c:0c:cc:ad:
                    ab:af:2a:17:83:9a:57:42:f5:5a:e9:c5:26:bb:65:
                    1f:14:e1:f5:e0:a2:78:9c:71:4c:9c:e7:e4:80:5f:
                    98:fe:ae:7c:a8:84:bc:d1:3c:ff:eb:93:a9:b2:a3:
                    35:bc:a0:8d:2c:49:99:9f:35:4f:fd:22:2a:ad:0d:
                    bb:58:d7:03:64:cf:3a:e6:68:8e:b8:5b:33:b6:99:
                    85:52:cb:a2:31:fd:1f:25:21:c3:aa:fb:3f:f3:92:
                    8d:6a:59:6c:7d:cb:69:84:ba:8b:23:19:34:91:5f:
                    96:a7:ac:98:b0:f7:43:2f:c7:5d:13:04:df:95:d8:
                    4c:2e:cf:79:fe:75:c7:cc:6b:d2:53:f6:07:8c:3c:
                    a7:e5:ae:12:29:c2:cf:94:b1:77:77:e7:9a:9b:77:
                    8a:72:c0:cf:2a:d4:c9:53:ec:59:6a:1b:09:27:da:
                    a2:d4:72:5f:28:c3:bf:1e:1a:63:89:20:dc:f0:1e:
                    80:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6B:79:FE:50:D8:F0:45:1F:CD:AB:0C:BE:3C:03:33:88:49:95:FC
            X509v3 Authority Key Identifier:
                keyid:55:5E:74:89:5F:B9:09:61:9F:29:9C:3F:9D:0B:B0:85:5F:D8:16:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VV50iV-5CWGfKZw_nQuwhV_YFug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143684/712FC2C21DA611E2B529A99D08B02CD2/VV50iV-5CWGfKZw_nQuwhV_YFug.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:8a:e5:99:ee:dc:fe:36:ed:43:01:77:e0:96:61:23:58:3b:
         29:8f:43:da:99:db:9d:ae:8e:a1:c2:70:99:33:7c:2a:1a:5d:
         b7:de:35:12:1e:df:c7:77:14:08:5f:31:b5:32:f7:9c:8a:ae:
         26:4b:78:ea:4c:7a:a0:5d:87:cc:00:2f:ee:c6:f3:23:8a:0d:
         b8:f2:9a:6d:00:5a:af:87:d7:35:2e:03:d5:22:5e:72:07:1d:
         38:be:29:dc:f1:1c:da:2a:93:d5:22:59:b4:8a:29:59:a1:5e:
         83:cd:8a:cb:57:4e:ab:ac:74:e8:bf:e6:f3:84:26:e6:a2:1b:
         85:bf:f2:0a:c5:59:f4:ad:39:6f:92:7b:32:05:54:93:5f:bc:
         ee:6d:ce:8c:50:6c:5a:a1:dc:ec:dd:d1:40:4a:34:7c:04:aa:
         8d:40:0f:30:c1:7f:e0:0d:71:be:73:4d:13:fb:80:ad:b5:09:
         3e:2b:94:2f:c4:8f:f4:b6:67:3b:da:b4:f0:3e:42:84:f2:25:
         04:80:c7:05:8b:f4:74:f9:fd:ea:83:f5:36:80:19:22:b8:c7:
         cd:50:e7:ea:85:45:15:35:f0:30:6f:3c:d2:37:53:b7:9c:b0:
         c0:f4:4d:9c:02:1a:f4:10:bc:f2:9f:59:12:53:4d:15:7e:9d:
         06:cf:c6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 21:40:40 2025 by rpki-client