Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.mft
File:                     VU0O_yINZrbppAkPDcy6milc3bU.mft (raw, json)
Hash identifier:          1x48oe8IC1rrUHyE/4IarjrXkXmF5foL+i70DXXX8y8=
Subject key identifier:   AD:8F:F1:AD:4A:81:A0:F8:52:CB:FC:1C:58:65:21:36:F6:0C:D3:49
Authority key identifier: 55:4D:0E:FF:22:0D:66:B6:E9:A4:09:0F:0D:CC:BA:9A:29:5C:DD:B5
Certificate issuer:       /CN=A914A514/serialNumber=554D0EFF220D66B6E9A4090F0DCCBA9A295CDDB5
Certificate serial:       45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU0O_yINZrbppAkPDcy6milc3bU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.mft
Manifest number:          42
Signing time:             Sat 23 Aug 2025 07:43:22 +0000
Manifest this update:     Sat 23 Aug 2025 07:43:22 +0000
Manifest next update:     Sat 30 Aug 2025 07:43:22 +0000
Files and hashes:         1: VU0O_yINZrbppAkPDcy6milc3bU.crl (hash: 5xdvZS6f5F2q7X9K26cbzzEY41fpnxRHR2NQbO4A0gQ=)
                          2: 4499D9921F4A11F0AF06577CC4F9AE02.roa (hash: 22OD3LRGDCNECXd/CFSHge2YqhsRF1PsexljEXFJrwU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.crl
                          rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU0O_yINZrbppAkPDcy6milc3bU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 07:43:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A514, serialNumber=554D0EFF220D66B6E9A4090F0DCCBA9A295CDDB5
        Validity
            Not Before: Aug 23 07:43:22 2025 GMT
            Not After : Aug 30 07:43:22 2025 GMT
        Subject: CN=68a9711a-eb1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ae:5c:6a:6c:58:02:63:e7:a1:e4:fe:39:bd:
                    9b:4c:19:0e:ab:b0:0c:91:db:61:25:d4:01:2c:09:
                    26:76:a3:84:a5:1b:a2:c4:26:64:9c:50:05:76:89:
                    85:4a:49:7e:05:84:1f:14:3a:99:13:b9:6c:3c:57:
                    07:61:17:c3:16:87:ac:a2:ae:d2:3d:a5:60:a2:f0:
                    b8:01:7a:a2:23:9c:db:0e:f7:ac:fb:7d:31:cb:a6:
                    9e:d0:fb:55:68:dd:b2:e1:ae:45:c6:19:18:75:31:
                    30:20:95:43:f7:70:4d:da:9f:24:0b:fd:55:a7:a5:
                    6b:9f:a6:66:24:2f:eb:01:5d:ee:71:29:63:50:a7:
                    5f:be:6d:77:c9:a1:d6:66:d9:0b:b4:cf:1b:1a:97:
                    e3:e1:72:98:72:79:b0:71:25:c4:bc:3c:88:5c:4c:
                    40:30:a4:d2:8f:04:5c:15:06:c6:0f:0d:36:65:09:
                    2d:5e:08:99:d8:d4:85:26:06:60:09:c7:8c:50:6e:
                    5f:51:db:d3:45:7e:42:e6:a5:ce:96:0a:33:fa:a2:
                    df:38:27:05:18:2f:de:5c:0a:4c:b6:ee:74:33:44:
                    87:82:b5:47:4f:53:72:e7:4a:3d:85:86:20:de:2f:
                    f8:c9:ff:a8:82:7a:f1:aa:50:3b:0c:1c:99:66:8f:
                    3f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8F:F1:AD:4A:81:A0:F8:52:CB:FC:1C:58:65:21:36:F6:0C:D3:49
            X509v3 Authority Key Identifier:
                keyid:55:4D:0E:FF:22:0D:66:B6:E9:A4:09:0F:0D:CC:BA:9A:29:5C:DD:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU0O_yINZrbppAkPDcy6milc3bU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A514/3FF25AFA1F4911F096F7AE7AC4F9AE02/VU0O_yINZrbppAkPDcy6milc3bU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:50:e6:ac:10:59:3e:0a:1d:46:4f:ea:c5:18:c1:d0:15:b0:
         df:a1:8f:be:f8:01:e3:90:04:16:cf:f7:44:d6:16:f1:2b:8a:
         0c:97:bb:40:ee:9d:42:07:84:ea:1d:72:b0:cb:b1:93:03:a0:
         36:97:34:2e:93:ec:bc:d1:42:66:98:2b:7b:24:36:37:b0:6f:
         c5:67:13:ed:ef:04:28:52:ba:f3:92:24:bd:38:a0:77:6e:10:
         be:d4:60:63:7a:1f:04:a0:42:80:50:63:5e:2b:bd:68:ea:69:
         c5:9f:a1:22:63:83:28:b1:88:f9:ef:63:6f:a1:b7:55:d3:da:
         2e:c4:27:44:3e:b9:72:aa:52:d4:a3:f3:e3:cf:90:f7:0f:53:
         3f:a6:62:dd:4a:a1:a2:14:0b:ee:ed:9f:27:96:d4:f3:1f:45:
         5b:d3:e5:19:5b:8a:c5:32:20:69:0a:33:8d:d6:71:c4:6d:16:
         6f:d6:ce:70:8a:28:29:f4:1c:2a:88:7d:93:42:15:6c:66:2e:
         07:20:01:2c:fd:2a:ef:1c:fb:fa:da:0c:73:b3:9e:99:fd:77:
         bd:bd:1d:4b:04:cf:bf:c7:bb:68:aa:a7:b9:f8:ba:37:a4:95:
         fb:b2:a7:8c:6b:49:0b:a8:59:3b:27:e6:c2:c0:a3:a0:69:d5:
         2e:99:e5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 22:11:24 2025 by rpki-client