Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft
File:                     VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft (raw, json)
Hash identifier:          jH4sg/dAyE3G+VpwhFlfz0CKzLrJYYje+nXKWqcavA8=
Subject key identifier:   B9:A2:DC:91:9D:66:05:73:BF:76:D3:E6:6C:E9:22:22:AD:BF:A9:03
Authority key identifier: 57:07:41:62:7F:E7:CF:D5:94:EA:2F:7F:44:96:16:B7:7C:2A:C8:42
Certificate issuer:       /CN=A914597C/serialNumber=570741627FE7CFD594EA2F7F449616B77C2AC842
Certificate serial:       01CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwdBYn_nz9WU6i9_RJYWt3wqyEI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft
Manifest number:          01CB
Signing time:             Thu 21 Aug 2025 02:54:28 +0000
Manifest this update:     Thu 21 Aug 2025 02:54:28 +0000
Manifest next update:     Thu 28 Aug 2025 02:54:28 +0000
Files and hashes:         1: VwdBYn_nz9WU6i9_RJYWt3wqyEI.crl (hash: qIItgKtCTGB+rbnZk5yMwQaYTOCXJhrfV6JL8SFA/ww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.crl
                          rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwdBYn_nz9WU6i9_RJYWt3wqyEI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Aug 2025 02:54:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914597C, serialNumber=570741627FE7CFD594EA2F7F449616B77C2AC842
        Validity
            Not Before: Aug 21 02:54:28 2025 GMT
            Not After : Aug 28 02:54:28 2025 GMT
        Subject: CN=68a68a64-2f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fd:a8:3a:46:a0:b2:8b:e4:4b:af:98:7e:5f:
                    d9:88:f0:fd:2a:9a:60:01:15:20:20:27:78:f4:cf:
                    ed:ad:93:bb:b0:64:7e:c3:3d:7d:74:43:49:37:45:
                    85:47:86:52:3d:8f:34:1c:13:07:25:e1:d4:8e:ce:
                    fd:d4:8c:e3:6f:83:23:cd:1a:52:f9:fe:67:e3:cb:
                    0d:db:2c:58:8c:21:20:aa:5f:d6:2e:08:05:84:79:
                    0f:8c:7b:6f:8c:d5:d9:f7:32:a4:5a:1e:25:c6:26:
                    b7:55:a4:26:1c:90:b1:e8:25:90:e6:be:30:ba:f2:
                    06:33:7e:bc:07:c1:97:ad:da:42:b9:b4:57:77:22:
                    09:fc:ca:83:d5:7a:52:af:0c:7c:f8:09:78:85:8f:
                    bd:dc:c4:9f:eb:c0:78:38:25:90:c4:41:3d:04:7c:
                    c6:f6:7c:3e:bf:8d:73:b7:99:c7:a6:01:34:6b:e8:
                    4a:e3:d9:9f:45:cd:ca:01:cf:ff:81:41:40:7d:82:
                    27:74:63:08:a5:94:65:50:98:bf:7a:88:04:f1:84:
                    73:88:29:63:db:a0:06:f7:5d:9d:50:c0:07:90:c1:
                    49:5d:74:7e:15:a6:46:1e:35:35:a0:0b:c5:4d:2a:
                    cd:41:76:bf:b6:4f:92:bc:20:04:24:9c:b9:d5:64:
                    d8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A2:DC:91:9D:66:05:73:BF:76:D3:E6:6C:E9:22:22:AD:BF:A9:03
            X509v3 Authority Key Identifier:
                keyid:57:07:41:62:7F:E7:CF:D5:94:EA:2F:7F:44:96:16:B7:7C:2A:C8:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwdBYn_nz9WU6i9_RJYWt3wqyEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e4:3a:9b:da:1c:8e:ae:43:62:18:77:b9:1e:c2:f7:23:a6:
         03:d5:b2:48:50:59:3e:09:70:32:7c:a8:ba:27:1d:e9:f4:0f:
         b0:f6:b9:69:e1:8a:45:4e:08:d7:f2:b2:ff:a6:52:13:83:82:
         1c:2e:2f:e1:04:03:d3:27:d9:31:07:7b:e3:f7:67:6d:e2:36:
         c7:18:f1:b7:61:fb:76:33:95:0f:57:cc:56:d2:2a:90:57:4d:
         5c:3d:27:ea:36:5a:d2:48:fe:af:b4:e6:2f:4a:ec:65:96:25:
         88:6d:eb:e7:a4:a5:c4:ff:96:5b:f3:2e:5b:f9:26:c4:3c:0e:
         16:15:6b:ea:5c:93:7f:0c:11:73:74:d0:24:54:b0:5a:e5:78:
         d1:1b:3c:4a:e8:c1:a4:2b:f2:bf:6e:31:0c:84:f9:d7:9f:28:
         08:73:80:23:25:d2:3e:84:7b:c0:94:a2:37:73:b0:ec:7c:e4:
         b8:af:87:dc:66:24:97:54:34:0d:9c:8e:5b:76:79:91:9b:30:
         9a:97:62:91:a0:bd:fc:0e:5b:fd:cd:56:33:97:3e:82:8f:28:
         cd:ca:0f:c3:5e:36:ab:59:f3:d2:19:aa:68:77:d1:a5:f1:a8:
         45:63:28:ed:cf:25:d0:d8:48:b2:46:c2:f5:7b:c1:05:f9:96:
         b6:2a:6c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:34:37 2025 by rpki-client