Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
File:                     VN6ZlQt_yVgf6KyWHze3iY81zcM.mft (raw, json)
Hash identifier:          4jCCvheQ7qD0jKbsZCAhZEbmCwNFBD/EL+fR361T224=
Subject key identifier:   3A:70:7C:C4:C6:D6:11:5D:14:FA:29:9C:B1:C6:E7:47:FB:FA:34:E0
Authority key identifier: 54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3
Certificate issuer:       /CN=A917E458/serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3
Certificate serial:       3E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
Manifest number:          3C
Signing time:             Fri 05 Sep 2025 08:01:36 +0000
Manifest this update:     Fri 05 Sep 2025 08:01:35 +0000
Manifest next update:     Fri 12 Sep 2025 08:01:35 +0000
Files and hashes:         1: VN6ZlQt_yVgf6KyWHze3iY81zcM.crl (hash: 6cNBMXbuLUiprbKWDq5IYQwyHHneuLAGOqoiLr6JV9Y=)
                          2: 8F8A915C590C11F0AC0A3639C4F9AE02.roa (hash: 65bo4JvkKG1LiWSEJwhJil93bHGvwvvTBpuZe2kaGMk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl
                          rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 08:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E458, serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3
        Validity
            Not Before: Sep  5 08:01:35 2025 GMT
            Not After : Sep 12 08:01:35 2025 GMT
        Subject: CN=68ba98df-6555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:94:e5:41:da:64:5a:a4:2a:67:b7:39:b1:1c:
                    a3:a9:58:2a:bb:ee:79:a2:96:d3:1d:a6:6f:4f:5e:
                    ad:2a:a2:14:08:fa:6d:25:e0:2a:7a:37:50:ab:0a:
                    ad:8e:b9:bf:34:79:ac:f7:1c:71:54:5a:25:2f:58:
                    f3:5c:24:5b:ba:3b:6f:78:72:c3:02:3c:47:11:28:
                    20:ac:6a:7c:14:4c:73:fe:47:dd:6c:ee:c3:ba:08:
                    b2:be:10:c6:63:1f:c8:5d:f5:1c:af:cc:69:43:68:
                    fe:79:16:64:8c:24:6c:f2:45:1a:5f:56:fe:9d:ad:
                    36:1a:ca:e1:bd:b6:04:a6:5f:82:8a:56:80:23:66:
                    ac:c9:09:c5:95:38:a4:e1:56:09:e4:78:04:5f:57:
                    c1:27:b2:13:b7:f5:37:ac:b5:62:d5:0c:79:47:fe:
                    42:e4:87:d2:d9:f1:13:5d:56:8d:b2:e9:25:9b:07:
                    b9:81:27:fb:5b:66:d3:82:2c:c9:74:27:77:27:85:
                    09:65:a7:e6:ec:aa:f0:24:cf:b1:f7:b8:38:d9:d2:
                    c2:a1:d2:6f:e0:28:fd:fa:4a:eb:57:55:b8:ff:46:
                    a9:2c:86:bd:43:fe:e0:08:20:1c:83:f3:ee:e1:b7:
                    c4:45:95:ea:97:58:0c:f5:e0:d0:9b:99:1f:04:ef:
                    ca:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:70:7C:C4:C6:D6:11:5D:14:FA:29:9C:B1:C6:E7:47:FB:FA:34:E0
            X509v3 Authority Key Identifier:
                keyid:54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:eb:ae:a0:02:fa:e2:54:5d:25:07:8f:ce:5d:dc:1c:65:68:
         df:a7:df:0a:c6:3d:57:12:47:18:2c:8e:75:da:3a:77:a1:a2:
         aa:19:87:e5:fd:5f:38:91:d6:52:4f:a7:90:fb:0b:e0:33:d5:
         f7:2f:8a:e9:37:ad:dc:b8:84:01:c1:df:3e:fe:19:33:fe:5b:
         29:d3:e3:82:ad:92:ff:b0:0b:00:05:87:28:d0:73:a8:56:f9:
         14:0c:6e:36:a9:cb:41:18:e5:53:48:4e:cf:ef:ed:7f:5b:f7:
         34:e5:ab:5f:7a:e8:24:5e:90:5a:70:ad:5f:4b:10:8c:df:c4:
         32:8a:2a:9a:f6:54:d2:53:9e:4c:29:4a:b9:6a:66:01:65:81:
         89:2f:d0:9d:85:45:83:ba:66:5e:bb:62:1d:06:90:67:83:99:
         ad:0d:52:b8:c1:a4:d6:c8:ff:c4:2d:f1:ce:cc:b0:40:f9:11:
         04:ae:b3:67:39:60:15:ec:82:d0:9e:82:41:97:95:a3:b4:e0:
         41:89:b0:72:05:73:02:0d:70:7b:ee:f4:54:a2:c4:2f:d7:0a:
         97:6b:10:70:9d:d2:5e:4b:8c:ed:86:47:70:19:66:dc:3b:ac:
         28:db:98:6c:3d:f0:83:d6:ca:fc:b9:c6:a9:71:0e:9c:5d:43:
         a7:11:6f:9b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
RTQ1ODExMC8GA1UEBRMoNTRERTk5OTUwQjdGQzk1ODFGRThBQzk2MUYzN0I3ODk4
RjM1Q0RDMzAeFw0yNTA5MDUwODAxMzVaFw0yNTA5MTIwODAxMzVaMBgxFjAUBgNV
BAMTDTY4YmE5OGRmLTY1NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCwlOVB2mRapCpntzmxHKOpWCq77nmiltMdpm9PXq0qohQI+m0l4Cp6N1CrCq2O
ub80eaz3HHFUWiUvWPNcJFu6O294csMCPEcRKCCsanwUTHP+R91s7sO6CLK+EMZj
H8hd9RyvzGlDaP55FmSMJGzyRRpfVv6drTYayuG9tgSmX4KKVoAjZqzJCcWVOKTh
VgnkeARfV8EnshO39TestWLVDHlH/kLkh9LZ8RNdVo2y6SWbB7mBJ/tbZtOCLMl0
J3cnhQllp+bsqvAkz7H3uDjZ0sKh0m/gKP36SutXVbj/Rqkshr1D/uAIIByD8+7h
t8RFleqXWAz14NCbmR8E78rDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOnB8xMbW
EV0U+imcscbnR/v6NOAwHwYDVR0jBBgwFoAUVN6ZlQt/yVgf6KyWHze3iY81zcMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFNDU4LzFFQzcyRjIyMzBE
ODExRjBBN0JFMkU0RkM0RjlBRTAyL1ZONlpsUXRfeVZnZjZLeVdIemUzaVk4MXpj
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvVk42WmxRdF95VmdmNkt5V0h6ZTNpWTgxemNNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF
NDU4LzFFQzcyRjIyMzBEODExRjBBN0JFMkU0RkM0RjlBRTAyL1ZONlpsUXRfeVZn
ZjZLeVdIemUzaVk4MXpjTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAA3rrqAC+uJUXSUHj85d3BxlaN+n3wrGPVcSRxgsjnXaOnehoqoZh+X9
XziR1lJPp5D7C+Az1fcviuk3rdy4hAHB3z7+GTP+WynT44Ktkv+wCwAFhyjQc6hW
+RQMbjapy0EY5VNITs/v7X9b9zTlq1966CRekFpwrV9LEIzfxDKKKpr2VNJTnkwp
SrlqZgFlgYkv0J2FRYO6Zl67Yh0GkGeDma0NUrjBpNbI/8Qt8c7MsED5EQSus2c5
YBXsgtCegkGXlaO04EGJsHIFcwINcHvu9FSixC/XCpdrEHCd0l5LjO2GR3AZZtw7
rCjbmGw98IPWyvy5xqlxDpxdQ6cRb5s=
-----END CERTIFICATE-----
Generated at Sat Sep 6 21:05:12 2025 by rpki-client