Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft
File:                     vjv7J425oD3qOFbX_iKSGDdNj8A.mft (raw, json)
Hash identifier:          ZilZ3n9kpPZ5aNZmcWhoU6J/e6/YTwqFdmslY4U5vPk=
Subject key identifier:   2B:30:62:36:86:73:9C:7A:F1:90:FD:A9:D9:A4:94:FB:F6:D9:F0:5E
Authority key identifier: BE:3B:FB:27:8D:B9:A0:3D:EA:38:56:D7:FE:22:92:18:37:4D:8F:C0
Certificate issuer:       /CN=A9145884/serialNumber=BE3BFB278DB9A03DEA3856D7FE229218374D8FC0
Certificate serial:       81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjv7J425oD3qOFbX_iKSGDdNj8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft
Manifest number:          7F
Signing time:             Tue 09 Sep 2025 06:49:45 +0000
Manifest this update:     Tue 09 Sep 2025 06:49:45 +0000
Manifest next update:     Tue 16 Sep 2025 06:49:45 +0000
Files and hashes:         1: vjv7J425oD3qOFbX_iKSGDdNj8A.crl (hash: 245CmGqRHUY2uZ66Xh3rtoPExpsk5iHHDVIY3WrJRBs=)
                          2: FB1BCFB4CDEB11EF8115D720C4F9AE02.roa (hash: xoOr7mcziDhALfamVuTQnWFaiiFOCUXOClhl7nV0wbk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.crl
                          rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjv7J425oD3qOFbX_iKSGDdNj8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 06:49:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145884, serialNumber=BE3BFB278DB9A03DEA3856D7FE229218374D8FC0
        Validity
            Not Before: Sep  9 06:49:45 2025 GMT
            Not After : Sep 16 06:49:45 2025 GMT
        Subject: CN=68bfce09-23cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d5:33:8b:00:e6:ad:2a:24:b6:b1:03:1d:00:
                    99:82:cb:73:86:0f:b9:66:87:cb:32:13:cd:98:d5:
                    eb:72:d6:07:6f:df:85:38:f8:e4:ad:c9:e2:62:da:
                    2d:46:e3:32:4b:5f:45:5a:12:a5:04:c0:06:14:7c:
                    94:a2:78:1e:a8:97:a4:86:79:44:3f:0d:08:db:a5:
                    b9:95:4f:cc:e0:4c:df:f9:44:1c:1c:da:7a:a5:9b:
                    ae:41:2c:7a:73:cd:37:54:c0:08:f9:b9:0c:ec:9c:
                    0b:c9:07:87:74:4b:e3:ab:2b:4d:ea:27:8b:77:58:
                    8e:b4:68:2c:97:6e:aa:79:55:94:0d:c1:8b:8f:00:
                    9e:41:0a:9b:91:26:42:ad:fa:ab:2f:61:30:90:f3:
                    78:41:a4:d8:b2:c3:14:50:aa:62:f6:a2:16:5d:97:
                    b6:a0:eb:9f:43:5a:76:2e:1d:a1:e9:03:44:f6:04:
                    20:f3:c4:af:95:83:c6:2d:0e:2b:1b:dc:dc:c8:23:
                    3a:12:10:1d:0d:1a:c1:3b:c2:d3:e9:a2:a9:be:1a:
                    cc:2b:63:ae:ef:de:5c:3a:f3:8f:e0:f4:ee:1e:83:
                    cd:eb:3b:77:0a:80:ac:8f:31:af:3e:d9:63:a4:80:
                    17:54:f3:f8:6f:97:9d:03:32:c8:31:26:4a:12:34:
                    5b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:30:62:36:86:73:9C:7A:F1:90:FD:A9:D9:A4:94:FB:F6:D9:F0:5E
            X509v3 Authority Key Identifier:
                keyid:BE:3B:FB:27:8D:B9:A0:3D:EA:38:56:D7:FE:22:92:18:37:4D:8F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjv7J425oD3qOFbX_iKSGDdNj8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145884/61B0705ACDEB11EF8B5B301FC4F9AE02/vjv7J425oD3qOFbX_iKSGDdNj8A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:cf:b3:a0:cf:e8:71:34:78:b9:6c:02:1c:ae:a2:2e:b9:6b:
         6c:21:39:98:6d:db:8c:0e:8f:d1:3c:44:12:a7:99:b3:8f:2e:
         ca:bd:da:96:21:74:32:f5:5c:e7:da:f1:6c:09:bd:30:ed:b5:
         9d:52:81:c0:4c:50:65:f0:2e:65:ad:11:50:d0:49:31:52:fa:
         b1:0c:49:2f:09:56:98:bb:a5:2e:f4:8f:41:94:82:2a:ea:51:
         93:ac:27:2e:a5:34:61:81:af:22:a6:04:64:32:bd:16:95:63:
         17:48:0b:3a:a6:99:79:9e:b8:88:c3:3a:99:5c:71:86:a6:82:
         0c:82:77:bb:6d:08:c0:58:b1:68:86:ff:4e:9d:92:c9:71:66:
         c9:4b:49:63:9f:58:9d:55:61:37:9d:6a:2f:3d:16:f4:6d:b8:
         38:a4:ee:b5:87:f6:06:c1:fd:23:60:fa:e1:3d:e0:70:c9:e2:
         29:46:87:a2:01:44:99:8a:d8:49:18:42:71:ef:33:4f:eb:40:
         3a:d6:72:f1:d5:04:eb:71:90:0a:3d:39:cc:06:dc:84:50:a2:
         5b:92:18:f8:a0:ff:46:73:c1:b0:ae:b7:48:6c:78:e2:49:de:
         e5:d4:ef:3a:4e:68:3b:06:37:7f:2c:44:47:b8:4f:52:d2:20:
         9a:12:e4:75
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU4ODQxMTAvBgNVBAUTKEJFM0JGQjI3OERCOUEwM0RFQTM4NTZEN0ZFMjI5MjE4
Mzc0RDhGQzAwHhcNMjUwOTA5MDY0OTQ1WhcNMjUwOTE2MDY0OTQ1WjAYMRYwFAYD
VQQDEw02OGJmY2UwOS0yM2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy9UziwDmrSoktrEDHQCZgstzhg+5ZofLMhPNmNXrctYHb9+FOPjkrcniYtot
RuMyS19FWhKlBMAGFHyUongeqJekhnlEPw0I26W5lU/M4Ezf+UQcHNp6pZuuQSx6
c803VMAI+bkM7JwLyQeHdEvjqytN6ieLd1iOtGgsl26qeVWUDcGLjwCeQQqbkSZC
rfqrL2EwkPN4QaTYssMUUKpi9qIWXZe2oOufQ1p2Lh2h6QNE9gQg88SvlYPGLQ4r
G9zcyCM6EhAdDRrBO8LT6aKpvhrMK2Ou795cOvOP4PTuHoPN6zt3CoCsjzGvPtlj
pIAXVPP4b5edAzLIMSZKEjRb3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCswYjaG
c5x68ZD9qdmklPv22fBeMB8GA1UdIwQYMBaAFL47+yeNuaA96jhW1/4ikhg3TY/A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTg4NC82MUIwNzA1QUNE
RUIxMUVGOEI1QjMwMUZDNEY5QUUwMi92anY3SjQyNW9EM3FPRmJYX2lLU0dEZE5q
OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZqdjdKNDI1b0QzcU9GYlhfaUtTR0RkTmo4QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTg4NC82MUIwNzA1QUNERUIxMUVGOEI1QjMwMUZDNEY5QUUwMi92anY3SjQyNW9E
M3FPRmJYX2lLU0dEZE5qOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBLz7Ogz+hxNHi5bAIcrqIuuWtsITmYbduMDo/RPEQSp5mzjy7KvdqW
IXQy9Vzn2vFsCb0w7bWdUoHATFBl8C5lrRFQ0EkxUvqxDEkvCVaYu6Uu9I9BlIIq
6lGTrCcupTRhga8ipgRkMr0WlWMXSAs6ppl5nriIwzqZXHGGpoIMgne7bQjAWLFo
hv9OnZLJcWbJS0ljn1idVWE3nWovPRb0bbg4pO61h/YGwf0jYPrhPeBwyeIpRoei
AUSZithJGEJx7zNP60A61nLx1QTrcZAKPTnMBtyEUKJbkhj4oP9Gc8GwrrdIbHji
Sd7l1O86Tmg7Bjd/LERHuE9S0iCaEuR1
-----END CERTIFICATE-----
Generated at Tue Sep 9 12:29:32 2025 by rpki-client