Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft
File:                     VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft (raw, json)
Hash identifier:          zHmFa9jrlBXpVTsBd/Zi2Z5nFc9C16fMn9G8FMxphQQ=
Subject key identifier:   37:AA:D2:67:1F:D1:D2:ED:2D:4D:93:53:32:C8:0F:87:E4:E7:2D:B1
Authority key identifier: 54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD
Certificate issuer:       /CN=A91790C3/serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD
Certificate serial:       06CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft
Manifest number:          06B8
Signing time:             Sun 02 Nov 2025 22:42:03 +0000
Manifest this update:     Sun 02 Nov 2025 22:42:03 +0000
Manifest next update:     Sun 09 Nov 2025 22:42:03 +0000
Files and hashes:         1: VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl (hash: Wc7BMdwaXctQNJuEVkUWs4XYxZXwdnSDz9Xg+0s4pDA=)
                          2: C437B01282C211EBBB08B280C4F9AE02.roa (hash: LDI+BxI6yWXikOHlYdiFwqiUYfCU5mn6/crB9AgbNkw=)
                          3: C3AD861C82C211EBBB08B280C4F9AE02.roa (hash: ppuSVqb5ak+lKAoy3v74h5n7285gGl/XWCpfoBLQk4c=)
                          4: 9EA2D73236D311EF89295180C4F9AE02.roa (hash: +9/yAjbYtByxr02PsszdU6WoEOBanUxI3XJ58Y32rUg=)
                          5: C310545082C211EBBB08B280C4F9AE02.roa (hash: 0laeAZbe0gy37miOPDx6Hc3w0hPowOHvIhox87nHsFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl
                          rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 22:42:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1743 (0x6cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91790C3, serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD
        Validity
            Not Before: Nov  2 22:42:03 2025 GMT
            Not After : Nov  9 22:42:03 2025 GMT
        Subject: CN=6907de3b-459b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:48:66:50:04:2b:48:14:5a:fd:b9:8b:fe:4e:
                    d6:c2:a2:48:f4:79:26:71:42:80:ad:b0:66:e5:1f:
                    ff:7a:5b:90:1f:d5:23:46:4c:66:f0:ef:5b:f9:a6:
                    73:c4:3d:9f:e8:21:d3:0a:e3:3c:df:00:29:14:bb:
                    9f:1d:62:8b:c5:6d:73:b0:7d:a4:73:57:07:e4:41:
                    d5:17:a0:19:bc:60:61:24:a9:7e:e0:fd:3b:8e:96:
                    0c:f5:40:ef:3b:e8:b3:25:30:09:0b:e6:3f:ad:50:
                    9f:96:b0:36:3f:96:5d:28:f0:1e:e8:7e:32:b7:07:
                    5b:de:dc:b7:74:8f:fa:7d:44:6a:8e:19:96:8a:aa:
                    d2:41:7a:2f:2c:55:4d:43:97:73:b7:69:5e:ac:91:
                    ef:8f:1c:69:01:99:41:71:34:84:f1:eb:09:b4:53:
                    54:30:73:aa:42:b9:47:10:21:c7:98:d0:4c:8b:4e:
                    65:ee:8e:fe:71:b2:cd:5d:b3:44:04:d6:b7:8f:22:
                    53:ae:81:94:d8:9d:27:e8:28:54:33:13:85:56:1f:
                    f3:f3:36:32:14:5c:17:44:ae:bf:b1:c6:85:58:75:
                    5f:f0:1b:21:d7:c3:d3:58:e9:dc:5e:2d:f0:76:28:
                    45:ac:11:da:f8:24:36:18:32:a4:73:95:f9:06:40:
                    13:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AA:D2:67:1F:D1:D2:ED:2D:4D:93:53:32:C8:0F:87:E4:E7:2D:B1
            X509v3 Authority Key Identifier:
                keyid:54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:3a:f5:a3:ec:d1:01:ef:aa:51:6b:6c:f9:d4:fb:20:7b:29:
         00:b9:41:9d:d4:f4:3e:b1:e7:c0:45:b6:fc:46:76:da:fc:da:
         08:db:d6:e5:b5:d9:dc:fb:2d:80:cd:9c:c4:3f:68:d2:cd:b5:
         ec:ed:a7:63:8c:f2:52:1a:03:cf:ed:78:4a:0a:0a:cd:df:65:
         e6:4e:c9:8b:f3:45:c9:0e:7a:46:42:bf:90:5c:ea:58:2d:f1:
         20:ae:55:98:44:ba:37:c9:01:2c:c1:73:2e:36:e8:bc:1e:6e:
         61:78:6d:03:39:2f:8a:48:96:5b:be:33:4a:fe:c8:e3:f1:7d:
         ea:a5:c9:47:4d:6d:55:f8:08:1d:1d:96:6b:24:70:a4:ff:95:
         bd:d3:8e:cd:cc:73:f5:d7:59:c7:12:79:6c:b8:c0:1b:4d:52:
         2c:b5:5c:3b:94:54:b0:c4:2b:c1:29:af:e3:12:ac:71:d3:03:
         5d:c0:9e:47:df:6c:f7:ed:28:41:32:b8:47:31:83:fd:0e:9e:
         8a:98:b3:3a:9b:f7:c4:87:cc:51:5c:1b:4a:ac:63:d2:e3:36:
         9a:d3:91:42:54:8f:fe:ac:5d:c3:c8:7f:85:c1:68:e4:68:77:
         18:02:c4:73:6b:7e:fb:2d:e7:1e:2c:d3:d5:a8:a8:41:e2:81:
         fa:38:b5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:10:07 2025 by rpki-client