Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
File:                     VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft (raw, json)
Hash identifier:          ppwzy4kmAY4seAgQATWIRCitXB6EXpsrcbOKxsczQjs=
Subject key identifier:   09:D2:71:A6:99:58:AD:48:7D:05:47:FF:E8:98:4F:24:63:9D:83:5A
Authority key identifier: 55:F2:E9:DB:28:3C:B4:59:E2:66:68:F9:22:4F:26:B3:A2:A4:46:4E
Certificate issuer:       /CN=A915B878/serialNumber=55F2E9DB283CB459E26668F9224F26B3A2A4464E
Certificate serial:       05EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
Manifest number:          05EC
Signing time:             Sun 02 Nov 2025 22:55:57 +0000
Manifest this update:     Sun 02 Nov 2025 22:55:56 +0000
Manifest next update:     Sun 09 Nov 2025 22:55:56 +0000
Files and hashes:         1: VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl (hash: AXJdxo0ekC9ckLfBxVsIPRVFYJ2AaGOn2CpO4p3Mg5o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl
                          rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 22:55:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1518 (0x5ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B878, serialNumber=55F2E9DB283CB459E26668F9224F26B3A2A4464E
        Validity
            Not Before: Nov  2 22:55:56 2025 GMT
            Not After : Nov  9 22:55:56 2025 GMT
        Subject: CN=6907e17c-4d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:81:d0:1d:7b:ee:37:09:af:bf:96:80:eb:ab:
                    41:9a:1a:d4:fe:8d:5d:25:f1:ab:7c:f6:f3:5d:18:
                    95:d1:0a:b9:da:35:4d:b7:1c:68:be:b2:46:4a:d1:
                    ef:da:92:3b:47:d5:05:c2:dc:cb:08:92:c5:92:81:
                    66:30:7b:44:ad:af:fd:b7:d5:dc:80:b6:de:0a:9d:
                    48:d9:9b:85:88:73:ac:1c:c1:9d:4f:e1:33:4f:bd:
                    62:b0:53:45:1b:64:fc:03:40:3b:e4:8e:19:5c:9f:
                    bb:f2:70:9c:bf:6b:a4:99:0e:e5:ad:62:5c:1f:ae:
                    53:aa:e4:90:2f:20:3e:1b:06:f1:3c:28:57:6e:d2:
                    95:aa:41:15:f3:48:b7:71:0a:0c:35:4f:a1:5f:3b:
                    3f:f6:72:4d:19:c2:f8:3d:8b:9c:25:5a:c4:7e:d1:
                    ea:7d:bf:ff:82:68:d0:cd:3c:a6:0e:9f:9f:92:59:
                    c9:6c:3f:24:39:1f:50:9f:bd:ba:0c:77:c7:53:50:
                    8e:5a:77:1b:77:c0:ec:53:9f:10:fa:9a:6c:2c:a0:
                    be:8d:af:ad:cd:f2:2d:5c:68:05:e5:be:57:8e:30:
                    ae:01:82:24:2f:11:b0:27:9e:e4:99:01:25:76:12:
                    8f:fa:c0:0e:13:92:cb:50:fc:5f:23:74:d9:10:eb:
                    3e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D2:71:A6:99:58:AD:48:7D:05:47:FF:E8:98:4F:24:63:9D:83:5A
            X509v3 Authority Key Identifier:
                keyid:55:F2:E9:DB:28:3C:B4:59:E2:66:68:F9:22:4F:26:B3:A2:A4:46:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:34:6e:75:c1:b0:4f:87:43:3e:20:17:8c:0c:4c:78:81:ad:
         ac:d1:7e:e8:b9:96:88:e7:f2:a2:4a:a6:36:ec:32:0a:5b:31:
         c0:4e:12:e4:ac:4b:79:e1:5d:83:16:0e:cc:33:a8:02:cc:48:
         45:81:1d:8e:5e:45:8e:7d:af:3a:51:62:d2:57:4d:88:8c:ea:
         ec:b8:3d:62:8b:28:cc:6e:ce:3d:72:9a:a8:70:77:f5:4b:2e:
         73:11:fb:dd:67:34:52:87:be:f1:34:f7:22:9f:c6:1d:28:99:
         73:05:70:eb:50:21:db:e1:4f:df:12:e9:a3:e8:98:2d:72:86:
         14:d9:93:0d:b4:1d:be:f9:c5:74:81:b0:7c:96:65:e6:1b:d6:
         bb:cb:5c:24:35:25:a0:d8:82:cd:3b:a6:9a:04:a1:a7:1b:00:
         99:1c:2d:c2:52:18:5b:e4:12:6e:40:4a:b4:ac:fc:34:af:d9:
         83:9e:0b:27:61:90:04:5d:b1:ab:7d:e1:d5:59:28:da:ad:e9:
         7b:1b:9a:e7:d0:2e:4d:0a:52:29:c6:ac:14:7f:cd:f3:23:83:
         83:39:63:d0:9e:a9:27:5b:ee:9e:18:f4:b3:17:40:77:a1:9a:
         0f:af:04:ef:f1:5d:cd:0f:32:f5:20:a8:3f:6e:d9:02:61:cf:
         8b:ff:23:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 18:08:06 2025 by rpki-client