Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft
File:                     vxurTPDVSTDgAbctJPMLPtaK4rM.mft (raw, json)
Hash identifier:          BV8uTDBVeylXwkUUzBotjFNaLKbwMGwqw3oRdeBbFWU=
Subject key identifier:   A0:66:C6:20:3F:75:4D:FB:0F:31:63:45:56:FA:4B:3F:C6:59:95:7D
Authority key identifier: BF:1B:AB:4C:F0:D5:49:30:E0:01:B7:2D:24:F3:0B:3E:D6:8A:E2:B3
Certificate issuer:       /CN=A916F95E/serialNumber=BF1BAB4CF0D54930E001B72D24F30B3ED68AE2B3
Certificate serial:       110A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft
Manifest number:          1101
Signing time:             Tue 04 Nov 2025 17:21:59 +0000
Manifest this update:     Tue 04 Nov 2025 17:21:59 +0000
Manifest next update:     Tue 11 Nov 2025 17:21:59 +0000
Files and hashes:         1: vxurTPDVSTDgAbctJPMLPtaK4rM.crl (hash: VAzB0n2rAE9RmQN8dHofLP0RdT1Dfn/9Rp5QXZgrhjQ=)
                          2: 1BB160C225EB11E9ADD6867FC4F9AE02.roa (hash: 8YN4HjFnFIcDaShQHDoigKa3LLkHGTw5fy+IJogcxeU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.crl
                          rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 17:21:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4362 (0x110a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916F95E, serialNumber=BF1BAB4CF0D54930E001B72D24F30B3ED68AE2B3
        Validity
            Not Before: Nov  4 17:21:59 2025 GMT
            Not After : Nov 11 17:21:59 2025 GMT
        Subject: CN=690a3637-8b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bf:9e:7f:55:8b:25:0c:54:12:9a:f7:c3:36:
                    b6:77:e9:27:60:64:ad:c9:c3:3b:e0:7a:c3:72:33:
                    5b:2a:4a:b6:a4:0f:70:e6:a2:c4:cc:23:a5:aa:76:
                    16:cb:41:7e:df:d2:c5:97:36:03:b5:3c:23:39:a1:
                    51:52:1e:5c:6d:16:53:54:16:5b:ff:12:c3:e3:09:
                    5e:f1:51:86:9b:aa:0e:75:29:73:0c:7d:d5:4f:24:
                    e2:50:0a:5d:d5:4c:fd:27:5c:93:b2:a9:69:24:b4:
                    62:33:ba:41:be:9e:9c:9e:cc:ed:79:f5:e0:0e:d8:
                    ca:e6:27:cf:76:de:ea:1d:3e:07:62:da:be:c3:f8:
                    82:69:3d:de:f7:54:b7:1d:88:5c:55:73:d7:7b:56:
                    4d:83:68:fc:04:5e:fd:1c:1a:d1:73:95:83:9d:c6:
                    ed:04:8f:55:7e:70:ae:be:54:8b:f8:44:a3:e3:11:
                    68:d4:cf:0f:23:99:d2:f2:6c:e8:5f:9b:d9:1a:a1:
                    19:87:f0:c5:ca:61:60:36:44:5c:b4:54:9e:b6:3c:
                    0f:2d:d9:79:3a:0e:83:d3:38:27:7f:30:16:d9:13:
                    a1:d8:45:57:13:ac:4c:68:9f:52:f4:1d:77:6d:32:
                    37:30:65:c9:a9:d2:b6:58:33:8f:66:34:7a:2f:7d:
                    4d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:66:C6:20:3F:75:4D:FB:0F:31:63:45:56:FA:4B:3F:C6:59:95:7D
            X509v3 Authority Key Identifier:
                keyid:BF:1B:AB:4C:F0:D5:49:30:E0:01:B7:2D:24:F3:0B:3E:D6:8A:E2:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxurTPDVSTDgAbctJPMLPtaK4rM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F95E/B708796825E911E9BE31D47DC4F9AE02/vxurTPDVSTDgAbctJPMLPtaK4rM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:6d:4c:e5:97:dc:75:42:66:ed:d4:09:e8:a4:47:da:53:d7:
         4e:a4:28:fe:de:8d:08:2a:dc:02:9a:e2:16:af:d0:66:48:1f:
         f0:ae:f3:02:fa:20:7f:a2:99:26:3c:41:04:60:57:8e:8a:e2:
         c9:b1:fc:dc:9d:e1:5d:ea:d4:d1:f6:02:bd:34:3d:43:16:18:
         4a:b6:46:4c:eb:43:ce:5a:31:fb:49:56:32:58:26:95:44:30:
         c9:29:63:a1:84:cf:9c:78:fc:2b:2b:8d:b4:03:54:54:d6:c4:
         07:a5:67:a4:f8:23:7e:3e:5a:dc:af:66:c9:32:e1:17:b0:2f:
         13:f1:4d:6e:93:21:4a:c3:5d:53:3a:e2:22:d7:bc:46:39:2f:
         e7:cf:f2:d7:7d:3b:11:b2:90:3b:aa:17:4f:89:31:ce:50:d6:
         42:fc:eb:a5:a1:d9:26:ca:fa:e1:55:23:8a:cc:46:60:33:9b:
         ee:ca:73:06:92:27:13:78:aa:38:6d:fc:0f:bc:aa:b9:d4:64:
         03:e3:38:9e:a5:63:ed:25:78:04:dc:27:5e:76:97:dd:2e:1c:
         b1:ce:cf:75:2b:d1:f5:58:8f:49:94:59:24:06:67:33:2b:fc:
         28:80:c6:6d:12:19:be:ca:88:54:7e:3c:5b:0b:51:4d:aa:07:
         9d:71:38:c9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkY5NUUxMTAvBgNVBAUTKEJGMUJBQjRDRjBENTQ5MzBFMDAxQjcyRDI0RjMwQjNF
RDY4QUUyQjMwHhcNMjUxMTA0MTcyMTU5WhcNMjUxMTExMTcyMTU5WjAYMRYwFAYD
VQQDEw02OTBhMzYzNy04YjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy7+ef1WLJQxUEpr3wza2d+knYGStycM74HrDcjNbKkq2pA9w5qLEzCOlqnYW
y0F+39LFlzYDtTwjOaFRUh5cbRZTVBZb/xLD4wle8VGGm6oOdSlzDH3VTyTiUApd
1Uz9J1yTsqlpJLRiM7pBvp6cnsztefXgDtjK5ifPdt7qHT4HYtq+w/iCaT3e91S3
HYhcVXPXe1ZNg2j8BF79HBrRc5WDncbtBI9VfnCuvlSL+ESj4xFo1M8PI5nS8mzo
X5vZGqEZh/DFymFgNkRctFSetjwPLdl5Og6D0zgnfzAW2ROh2EVXE6xMaJ9S9B13
bTI3MGXJqdK2WDOPZjR6L31NSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBmxiA/
dU37DzFjRVb6Sz/GWZV9MB8GA1UdIwQYMBaAFL8bq0zw1Ukw4AG3LSTzCz7WiuKz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Rjk1RS9CNzA4Nzk2ODI1
RTkxMUU5QkUzMUQ0N0RDNEY5QUUwMi92eHVyVFBEVlNURGdBYmN0SlBNTFB0YUs0
ck0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Z4dXJUUERWU1REZ0FiY3RKUE1MUHRhSzRyTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Rjk1RS9CNzA4Nzk2ODI1RTkxMUU5QkUzMUQ0N0RDNEY5QUUwMi92eHVyVFBEVlNU
RGdBYmN0SlBNTFB0YUs0ck0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA/bUzll9x1Qmbt1AnopEfaU9dOpCj+3o0IKtwCmuIWr9BmSB/wrvMC
+iB/opkmPEEEYFeOiuLJsfzcneFd6tTR9gK9ND1DFhhKtkZM60POWjH7SVYyWCaV
RDDJKWOhhM+cePwrK420A1RU1sQHpWek+CN+Plrcr2bJMuEXsC8T8U1ukyFKw11T
OuIi17xGOS/nz/LXfTsRspA7qhdPiTHOUNZC/OulodkmyvrhVSOKzEZgM5vuynMG
kicTeKo4bfwPvKq51GQD4ziepWPtJXgE3CdedpfdLhyxzs91K9H1WI9JlFkkBmcz
K/wogMZtEhm+yohUfjxbC1FNqgedcTjJ
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:27:47 2025 by rpki-client