Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft
File:                     VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft (raw, json)
Hash identifier:          4BACc6SBMxnuxfk/uZ55/iKD8KIFm0kkIwtzzjoqAIc=
Subject key identifier:   2A:60:3E:5B:42:BD:15:AC:69:33:55:6B:B6:E0:53:16:12:50:72:E0
Authority key identifier: 54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD
Certificate issuer:       /CN=A91790C3/serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD
Certificate serial:       06AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft
Manifest number:          0699
Signing time:             Thu 04 Sep 2025 22:35:07 +0000
Manifest this update:     Thu 04 Sep 2025 22:35:06 +0000
Manifest next update:     Thu 11 Sep 2025 22:35:06 +0000
Files and hashes:         1: VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl (hash: YnOlmstdPvUZ56IO5e8KRy8fMiwe7abF6nvxglDZxzc=)
                          2: C437B01282C211EBBB08B280C4F9AE02.roa (hash: jFt3e40+ALQhrJp6OJZEoPNCJM/tKBFq4PlGOIsp684=)
                          3: C3AD861C82C211EBBB08B280C4F9AE02.roa (hash: ExeORiGRCNK8jvuw56sySZxqK+GOSBQ3JY3+3QQDiXc=)
                          4: 9EA2D73236D311EF89295180C4F9AE02.roa (hash: f2ke3ZBYV1Ribvo8r5rmx6HoUBDp7E1lgqZwRkmtN9g=)
                          5: C310545082C211EBBB08B280C4F9AE02.roa (hash: +qteBc7xk/iNE1OmAmAugB8Y+ErzQcUywqF9mnDTvtM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl
                          rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 22:35:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1708 (0x6ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91790C3, serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD
        Validity
            Not Before: Sep  4 22:35:06 2025 GMT
            Not After : Sep 11 22:35:06 2025 GMT
        Subject: CN=68ba141b-c454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:13:27:5d:4e:1a:72:62:59:07:e1:79:74:40:
                    f0:17:da:50:7b:c7:6d:2c:4f:1b:46:6e:51:62:b1:
                    e0:7c:ea:9e:1e:5e:f0:90:82:4e:c1:a4:a6:e0:f2:
                    00:78:34:3f:2d:89:7a:3f:83:1c:92:41:8f:59:29:
                    d6:b3:eb:cd:5f:86:1a:55:45:14:8d:d4:9e:11:65:
                    bf:4d:5a:27:06:dd:e0:df:94:1b:13:40:58:79:14:
                    13:21:68:8e:2e:ee:c3:77:66:0c:9c:18:22:07:f2:
                    18:08:93:85:82:77:4d:3f:12:6f:ba:b1:cf:9a:de:
                    83:dd:38:ff:ea:81:9c:ff:41:32:da:f6:e8:f0:d7:
                    15:06:68:82:8c:d8:02:62:03:db:8f:d6:bb:85:09:
                    31:dd:f7:04:03:0f:8b:e5:3d:fc:52:a8:bf:1c:83:
                    03:2b:c1:86:f0:23:b9:cf:bd:fc:92:4a:52:c3:d9:
                    1f:2d:da:7d:ec:fa:e0:a8:a6:a0:0f:6a:19:4e:fc:
                    33:be:2f:e2:c0:54:f8:ad:9c:50:5b:41:89:48:75:
                    b8:f0:af:2e:cc:22:9d:07:ee:bf:e2:e0:1a:52:02:
                    b1:7d:a3:6e:40:c6:4f:59:e5:f7:f5:38:39:92:d3:
                    b5:8c:b2:ad:c4:a2:66:21:8c:c8:86:45:1c:10:a1:
                    8d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:60:3E:5B:42:BD:15:AC:69:33:55:6B:B6:E0:53:16:12:50:72:E0
            X509v3 Authority Key Identifier:
                keyid:54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:5a:4e:e0:92:e3:4e:20:a1:e8:01:e8:08:a4:c3:0c:9a:69:
         64:cf:b8:8e:4b:77:f3:f7:8e:5a:40:ed:60:eb:fa:2b:c4:db:
         1d:a4:80:a7:66:96:26:f3:31:db:1b:e7:8b:56:20:bd:54:84:
         db:99:a4:7b:b3:09:e8:66:a1:96:b3:ed:53:28:ef:b5:f6:be:
         89:a1:71:ea:d4:0a:04:03:76:8a:65:4d:f3:39:da:9c:50:03:
         ec:54:6d:c8:27:a0:c4:e4:c0:4f:82:0c:0c:0c:ce:89:05:ec:
         4a:ec:7a:dd:32:50:75:40:e2:b9:dc:25:46:4b:55:75:99:d1:
         5f:1e:9f:46:db:1e:4d:c7:73:c5:e0:45:98:3f:11:61:7c:25:
         e4:a9:c7:21:e0:31:93:14:23:31:96:3f:a7:b8:eb:d4:e3:38:
         26:28:e6:68:37:06:4e:e3:8d:19:fc:76:cb:9a:5c:bb:57:ad:
         c6:48:64:76:97:95:ea:e6:de:50:18:90:8e:da:5a:86:75:2b:
         ff:b1:bf:86:95:55:18:3c:07:cb:3e:1c:5b:a0:cb:02:87:07:
         47:cc:24:56:a8:62:38:18:d6:4f:41:8e:97:93:2b:e5:99:69:
         0f:9f:de:a3:9a:b7:ea:fc:24:5d:23:3a:1d:44:25:ec:1d:0b:
         6d:60:d8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 13:32:04 2025 by rpki-client