Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
File:                     Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft (raw, json)
Hash identifier:          S6BfAh7sjKZy2t/74t/PVrjLUwsSjmavD6z2464IDA8=
Subject key identifier:   7C:87:F4:9F:4F:EE:B9:A0:0E:E6:17:CC:62:01:AA:3B:3F:72:16:77
Authority key identifier: 56:0B:BD:60:06:CE:CD:73:00:D1:52:4C:8A:27:43:9A:BB:F1:59:7E
Certificate issuer:       /CN=A9171172/serialNumber=560BBD6006CECD7300D1524C8A27439ABBF1597E
Certificate serial:       0794
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
Manifest number:          0794
Signing time:             Fri 22 Aug 2025 21:33:02 +0000
Manifest this update:     Fri 22 Aug 2025 21:33:01 +0000
Manifest next update:     Fri 29 Aug 2025 21:33:01 +0000
Files and hashes:         1: Vgu9YAbOzXMA0VJMiidDmrvxWX4.crl (hash: bqwV2wV6zqoBY+ZqfikaQiuk6at6NPQvP2VUGw4zmqM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.crl
                          rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1940 (0x794)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171172, serialNumber=560BBD6006CECD7300D1524C8A27439ABBF1597E
        Validity
            Not Before: Aug 22 21:33:01 2025 GMT
            Not After : Aug 29 21:33:01 2025 GMT
        Subject: CN=68a8e20d-7616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e1:d1:fc:a4:42:2f:96:32:d7:b9:f3:ef:2c:
                    13:f5:dd:09:44:ab:6b:eb:89:c7:9b:81:15:a6:ea:
                    5e:8c:87:a1:68:2f:a9:b2:36:c6:e4:b6:33:36:ca:
                    5a:fb:01:b9:4c:26:f3:86:e8:59:51:22:06:29:3c:
                    27:18:d8:b4:85:ec:8a:a2:34:e0:2f:23:bd:e1:23:
                    07:a0:bf:1c:a3:22:05:c2:26:fd:57:39:4f:ed:94:
                    86:58:39:a7:1a:70:0a:08:c4:62:07:f7:09:77:c4:
                    93:a1:fb:d0:c0:ee:9e:99:69:aa:92:dc:a9:64:97:
                    98:50:26:60:a9:33:d8:dc:95:84:3b:46:2e:20:91:
                    07:1b:32:96:b7:f0:10:6c:17:19:c2:83:4b:6e:3f:
                    80:a1:af:0b:5a:1f:24:e5:58:40:c8:29:3b:0d:81:
                    b4:30:9a:96:61:d9:2e:d7:37:4f:38:04:95:18:01:
                    68:4c:02:81:a1:4a:ce:ae:a9:f4:e6:cb:54:39:61:
                    86:8a:5d:a1:62:e3:2e:35:1c:c3:b5:6b:cc:5f:b0:
                    49:0a:5d:f2:9a:e3:00:b9:1e:90:ee:48:22:e9:b3:
                    e0:ed:1d:c9:90:cd:2d:00:ba:b8:4a:e2:ca:59:10:
                    86:af:ac:eb:e1:c4:ad:f5:a8:56:6c:2e:ea:59:3d:
                    84:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:87:F4:9F:4F:EE:B9:A0:0E:E6:17:CC:62:01:AA:3B:3F:72:16:77
            X509v3 Authority Key Identifier:
                keyid:56:0B:BD:60:06:CE:CD:73:00:D1:52:4C:8A:27:43:9A:BB:F1:59:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c2:0a:58:62:c6:f5:cb:79:e7:02:92:37:10:e4:8e:43:73:
         86:d0:6e:bb:98:45:b6:75:55:18:e8:a5:2b:6a:8a:2a:2e:e7:
         9f:ea:b0:9f:e8:e3:16:6d:39:7c:ae:81:6a:f8:e1:7a:a4:c5:
         a4:a1:71:13:5e:81:28:b4:19:36:98:1d:6c:2e:a3:aa:c8:10:
         66:74:f7:71:8f:79:ac:1e:79:55:22:68:b5:aa:b0:e1:95:93:
         f9:f2:d1:00:f1:1f:da:a9:e6:9b:83:cb:ff:55:e1:71:1a:06:
         68:29:e4:08:36:e3:64:a8:41:75:ff:d0:a6:85:59:58:38:56:
         37:21:4f:3f:cd:82:74:b2:43:c9:19:f0:53:56:d1:68:f2:65:
         65:a0:37:ef:5e:87:00:8d:2a:1b:d9:37:8c:a1:0d:73:f2:2c:
         e1:64:e5:1b:f7:9e:50:9a:1f:8e:25:7f:8d:68:4d:cc:b0:e5:
         b5:9a:b8:91:b7:cf:9d:e5:a7:ee:a0:61:3a:ed:e6:f8:fe:b9:
         d1:92:be:93:bc:0e:67:b1:2a:49:4f:14:c2:05:5b:cf:ae:8b:
         1d:78:d1:3d:1e:fd:ec:c9:91:93:19:da:8e:8e:35:97:ef:79:
         56:82:36:fa:ff:7e:57:78:1c:68:05:f3:80:2f:8b:6d:f0:ab:
         99:46:b1:ea
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzExNzIxMTAvBgNVBAUTKDU2MEJCRDYwMDZDRUNENzMwMEQxNTI0QzhBMjc0MzlB
QkJGMTU5N0UwHhcNMjUwODIyMjEzMzAxWhcNMjUwODI5MjEzMzAxWjAYMRYwFAYD
VQQDEw02OGE4ZTIwZC03NjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu+HR/KRCL5Yy17nz7ywT9d0JRKtr64nHm4EVpupejIehaC+psjbG5LYzNspa
+wG5TCbzhuhZUSIGKTwnGNi0heyKojTgLyO94SMHoL8coyIFwib9VzlP7ZSGWDmn
GnAKCMRiB/cJd8STofvQwO6emWmqktypZJeYUCZgqTPY3JWEO0YuIJEHGzKWt/AQ
bBcZwoNLbj+Aoa8LWh8k5VhAyCk7DYG0MJqWYdku1zdPOASVGAFoTAKBoUrOrqn0
5stUOWGGil2hYuMuNRzDtWvMX7BJCl3ymuMAuR6Q7kgi6bPg7R3JkM0tALq4SuLK
WRCGr6zr4cSt9ahWbC7qWT2EoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyH9J9P
7rmgDuYXzGIBqjs/chZ3MB8GA1UdIwQYMBaAFFYLvWAGzs1zANFSTIonQ5q78Vl+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTE3Mi84ODZCOUExQzE4
QkUxMUVCQUMxMERFNDZDNEY5QUUwMi9WZ3U5WUFiT3pYTUEwVkpNaWlkRG1ydnhX
WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZndTlZQWJPelhNQTBWSk1paWREbXJ2eFdYNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTE3Mi84ODZCOUExQzE4QkUxMUVCQUMxMERFNDZDNEY5QUUwMi9WZ3U5WUFiT3pY
TUEwVkpNaWlkRG1ydnhXWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBVwgpYYsb1y3nnApI3EOSOQ3OG0G67mEW2dVUY6KUraooqLuef6rCf
6OMWbTl8roFq+OF6pMWkoXETXoEotBk2mB1sLqOqyBBmdPdxj3msHnlVImi1qrDh
lZP58tEA8R/aqeabg8v/VeFxGgZoKeQINuNkqEF1/9CmhVlYOFY3IU8/zYJ0skPJ
GfBTVtFo8mVloDfvXocAjSob2TeMoQ1z8izhZOUb955Qmh+OJX+NaE3MsOW1mriR
t8+d5afuoGE67eb4/rnRkr6TvA5nsSpJTxTCBVvProsdeNE9Hv3syZGTGdqOjjWX
73lWgjb6/35XeBxoBfOAL4tt8KuZRrHq
-----END CERTIFICATE-----
Generated at Sun Aug 24 22:16:05 2025 by rpki-client