Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft
File:                     vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft (raw, json)
Hash identifier:          ik8YnZxKAqMBFOHV3s36rcJiQIfro6JDKYWGfMYglJo=
Subject key identifier:   A9:E5:4A:57:37:0D:36:AF:C5:5C:62:87:06:4C:02:26:AA:99:81:91
Authority key identifier: BE:3F:81:3B:20:2F:FB:0A:38:2F:73:79:68:EE:16:65:98:E0:E8:AB
Certificate issuer:       /CN=A91911EB/serialNumber=BE3F813B202FFB0A382F737968EE166598E0E8AB
Certificate serial:       D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft
Manifest number:          CB
Signing time:             Tue 09 Sep 2025 05:59:19 +0000
Manifest this update:     Tue 09 Sep 2025 05:59:18 +0000
Manifest next update:     Tue 16 Sep 2025 05:59:18 +0000
Files and hashes:         1: vj-BOyAv-wo4L3N5aO4WZZjg6Ks.crl (hash: 8oyljh1Pl6k+23Qf0yWKcrKgnBPdC4thl8Q8QOLoe+g=)
                          2: 9BC7782069A911EFBF66800FC4F9AE02.roa (hash: A3vIJwUMYtfFutVYOqaUZlkIJqgqL/aJPc4cakn1uMQ=)
                          3: 4978358A70E011EF8CDC2330C4F9AE02.roa (hash: uWOdhRYcncT/3w5J6lEkhO72ABKA151UX0ndXBDbx3E=)
                          4: 9CF17DD669A911EFBF66800FC4F9AE02.roa (hash: bBT8gdGhlwg5r06wlUXlbf1qWwPVmNNVH6Tp4yfxfVE=)
                          5: 9C594FD469A911EFBF66800FC4F9AE02.roa (hash: LB+IcduN6puMn/RBrX77+95EeodFJyL3pQbIzRhkuAc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.crl
                          rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 05:59:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91911EB, serialNumber=BE3F813B202FFB0A382F737968EE166598E0E8AB
        Validity
            Not Before: Sep  9 05:59:18 2025 GMT
            Not After : Sep 16 05:59:18 2025 GMT
        Subject: CN=68bfc237-dc2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ff:f2:b3:e0:34:aa:af:31:67:30:5d:cb:b5:
                    96:63:39:d6:42:11:43:38:88:d9:73:7c:83:c7:8f:
                    64:f1:8e:d8:31:b4:ee:8e:0e:59:04:2f:c2:dc:ba:
                    cb:22:06:83:dd:95:20:9c:02:fd:1f:24:3b:12:1c:
                    ec:97:c8:7c:c6:21:f0:fe:21:a4:c3:d0:2f:9d:cf:
                    1c:cd:da:c1:98:31:eb:12:53:7a:3c:63:b8:23:ee:
                    51:68:f7:2b:af:b0:d1:4a:fe:43:d0:af:be:46:d1:
                    fd:b5:b3:03:c5:11:c1:c1:9b:ff:10:5c:04:af:bc:
                    fe:c9:03:96:9f:89:ac:3a:96:fd:7f:10:af:37:38:
                    ba:66:d2:9e:10:31:8c:40:2d:71:4e:b5:7e:52:90:
                    91:85:5e:9a:7d:82:11:76:be:40:18:6f:88:9e:b1:
                    9e:29:5c:31:07:a6:64:40:b4:ff:6a:a4:34:89:1b:
                    c7:dd:a2:cb:68:b5:87:6d:f0:90:32:82:7c:be:ef:
                    f4:50:6d:7f:57:8b:2b:0b:d8:7d:b7:ac:59:8e:57:
                    2d:80:fb:1f:87:e7:12:20:84:97:7f:e0:53:b8:51:
                    d9:b6:cc:f9:3a:0c:5c:a2:0f:fa:7f:aa:2a:01:68:
                    1f:13:59:c9:28:6d:2d:42:48:aa:98:70:81:5c:77:
                    c9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E5:4A:57:37:0D:36:AF:C5:5C:62:87:06:4C:02:26:AA:99:81:91
            X509v3 Authority Key Identifier:
                keyid:BE:3F:81:3B:20:2F:FB:0A:38:2F:73:79:68:EE:16:65:98:E0:E8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:09:50:e8:68:e6:5f:65:c1:82:03:5c:d6:88:95:1c:ea:30:
         6d:8c:41:bc:89:f7:a4:ff:0d:16:71:91:f3:da:33:78:46:3d:
         fb:8a:a7:ec:e2:4b:a0:4b:68:68:a8:f7:6b:b8:88:d8:7d:66:
         79:fd:68:a3:83:c6:fd:0d:09:31:66:18:5f:2b:fc:23:57:7e:
         ce:00:a9:5e:48:91:21:48:b8:df:a5:85:7c:5d:c4:28:e6:84:
         d6:cf:ac:3b:a4:a5:0a:7c:3b:98:e9:ca:32:8c:4d:fd:b6:06:
         e3:03:fe:a3:a3:11:86:b4:75:eb:ae:8c:26:cc:b3:09:9b:66:
         9b:01:70:d9:70:22:22:0f:95:d1:e6:07:6d:36:19:51:f6:da:
         8e:1d:84:93:be:71:77:e9:a4:ca:2a:a9:c0:61:c6:f9:5e:c6:
         e4:d7:d4:59:ac:6a:e8:16:3f:d8:bb:17:44:81:c4:2d:d7:3b:
         25:d1:70:21:23:6a:d6:4e:d0:d8:6b:79:04:19:0b:56:21:34:
         0e:20:57:06:e2:e7:07:99:a7:e1:ab:96:a9:95:de:a3:91:6b:
         91:5a:40:14:cb:9b:ff:4e:0c:45:f3:2e:f9:50:dc:12:54:6b:
         f8:b0:83:a3:50:00:f5:43:fe:37:fd:73:7c:65:13:81:6a:d2:
         27:49:fb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 11:31:06 2025 by rpki-client