Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
File:                     vpKrpKAUQxnubUWrkJDYjV2vN_4.mft (raw, json)
Hash identifier:          KD0yydk+bQ1nJPHoh3h4ADM8i+tjUClNuNWz2Z/6m0A=
Subject key identifier:   4E:5A:2D:F6:47:07:A4:B8:FD:F8:63:BF:E9:75:51:9E:89:4D:CD:C4
Authority key identifier: BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE
Certificate issuer:       /CN=A9151F3B/serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE
Certificate serial:       062C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
Manifest number:          0618
Signing time:             Thu 04 Sep 2025 23:07:13 +0000
Manifest this update:     Thu 04 Sep 2025 23:07:12 +0000
Manifest next update:     Thu 11 Sep 2025 23:07:12 +0000
Files and hashes:         1: vpKrpKAUQxnubUWrkJDYjV2vN_4.crl (hash: p5tpeVcASG0Y6KIVFJcCY8ocoVtDtvpb7fn/fr0voII=)
                          2: 21F42C4EFE5511EC9A3F6F31C4F9AE02.roa (hash: xc/k3wBL9PbMVeZ6NnzVVYqpCqcpVpMHNoEeu9dWgdo=)
                          3: 76DDA85AFE5211EC8F4A4F16C4F9AE02.roa (hash: 3m2SQFBv5Jj9U4DJ7yaxwWUfUobTKq/igN4z5bbj3Hc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl
                          rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 23:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1580 (0x62c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151F3B, serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE
        Validity
            Not Before: Sep  4 23:07:12 2025 GMT
            Not After : Sep 11 23:07:12 2025 GMT
        Subject: CN=68ba1ba0-0df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bb:ca:33:fd:bd:22:5d:73:f8:9f:df:dd:34:
                    02:dd:e4:f4:3b:fd:cc:4e:22:21:53:25:e6:f1:b5:
                    8b:ed:b4:b9:31:d2:41:24:2d:c0:c2:e0:60:16:bd:
                    5c:f3:bc:ae:fc:1f:73:24:8a:55:39:87:0e:f6:85:
                    04:89:fd:72:b2:fa:aa:73:c3:11:89:15:02:9e:dc:
                    91:87:9b:4d:16:d5:ae:11:f5:59:8f:f0:4c:a2:28:
                    25:9d:7b:a9:9c:7c:6f:80:6a:5b:0a:8f:76:87:cc:
                    64:83:3f:53:4b:79:e5:8e:99:98:dc:24:55:41:73:
                    6f:a3:68:a7:ea:19:ee:c5:4a:e5:ad:c4:b5:76:72:
                    2c:ed:aa:ab:3d:99:8a:17:e9:4e:37:f8:28:19:6a:
                    44:40:61:68:d8:22:da:b0:89:12:10:ac:71:61:1b:
                    7a:64:48:14:3c:4e:d9:87:94:8b:4c:22:63:45:f0:
                    47:cc:3a:66:2a:73:db:94:10:38:d4:78:98:e8:c7:
                    1d:f2:f2:38:48:55:f7:78:9c:b3:a8:bc:b9:9c:c0:
                    07:ca:f5:42:2f:12:de:73:4a:29:30:e0:7e:12:fe:
                    25:7d:f9:32:a3:86:57:62:00:b3:40:18:07:9a:98:
                    aa:a3:81:63:ef:b0:16:c2:c0:04:d7:8d:7b:19:db:
                    bc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5A:2D:F6:47:07:A4:B8:FD:F8:63:BF:E9:75:51:9E:89:4D:CD:C4
            X509v3 Authority Key Identifier:
                keyid:BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:cc:3f:4d:2f:48:ce:02:bb:36:c4:6c:35:4a:cf:46:15:6d:
         d9:37:c5:ad:53:87:96:7e:00:55:f8:2f:b2:26:27:e0:8e:cf:
         c7:df:42:cb:23:8e:e0:85:bd:2c:70:b9:5f:4e:1a:79:56:4e:
         25:57:00:3f:79:1e:0a:d2:02:e1:c5:1e:8d:89:30:84:87:d3:
         2c:14:88:d5:84:73:8c:3b:35:32:3a:fa:6c:28:8f:b1:8c:c9:
         45:8b:11:f8:36:ac:43:51:29:e8:bc:31:ef:a1:40:ff:73:65:
         26:18:6a:d8:f3:6d:da:f9:5f:2e:3a:5f:a8:a6:53:9b:df:b1:
         8a:c4:7b:0b:2f:fc:37:a3:ab:90:fc:27:1c:7e:5a:8b:f3:83:
         87:31:c8:0b:ad:6a:65:7a:94:3a:a9:96:e8:0d:c0:fa:9b:6d:
         81:07:63:c4:af:44:8c:4a:d5:a2:ad:57:7a:93:f6:ce:80:df:
         c2:a7:5b:59:c1:9e:df:bd:7a:62:48:e4:a5:ec:d7:55:d1:57:
         3e:20:38:f3:58:70:80:8e:ba:93:e3:af:03:8d:ab:ba:dc:28:
         81:ae:a9:b8:9a:15:63:26:d0:59:f6:93:e3:46:2c:75:79:9b:
         0c:e8:5e:77:74:76:31:cd:7d:74:de:10:d6:d6:67:7b:38:5c:
         13:db:82:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 11:31:44 2025 by rpki-client