Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft
File:                     VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft (raw, json)
Hash identifier:          uvbaDGcCz/BpYMM4AXRBei1FGp8r6yQ/EyujIp8cqUU=
Subject key identifier:   44:A2:88:ED:3A:0B:44:A3:17:46:03:EB:BB:EF:86:58:AC:A3:FB:16
Authority key identifier: 54:41:1F:E7:33:2D:2E:F4:FF:27:5E:59:D5:DE:FE:D1:CC:E9:60:14
Certificate issuer:       /CN=A91AEBFF/serialNumber=54411FE7332D2EF4FF275E59D5DEFED1CCE96014
Certificate serial:       048C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft
Manifest number:          0486
Signing time:             Thu 21 Aug 2025 00:10:11 +0000
Manifest this update:     Thu 21 Aug 2025 00:10:11 +0000
Manifest next update:     Thu 28 Aug 2025 00:10:11 +0000
Files and hashes:         1: VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl (hash: M6Gfgt3RPMrNgTXQSTlD/acD0kmHAt/xMADfIYEpKd4=)
                          2: FEE1AED6C77311EEB751AE2CC4F9AE02.roa (hash: VVFFKCHYbosvaaLrPx2vqSUqYAflv5w/HG528t1OXHo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl
                          rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Aug 2025 00:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1164 (0x48c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEBFF, serialNumber=54411FE7332D2EF4FF275E59D5DEFED1CCE96014
        Validity
            Not Before: Aug 21 00:10:11 2025 GMT
            Not After : Aug 28 00:10:11 2025 GMT
        Subject: CN=68a663e3-29be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ef:42:65:63:e2:cc:ae:92:6d:c9:a3:4b:2e:
                    13:af:1b:53:69:70:49:09:bd:c4:d9:cb:3a:8b:42:
                    21:94:11:28:a4:01:37:66:28:9f:3b:8c:ce:7e:c3:
                    b5:a6:20:c5:36:f7:70:c6:63:a6:cc:f5:73:9e:8f:
                    74:d7:15:65:d8:e4:67:c3:e9:16:1f:06:d1:da:7a:
                    9f:42:ef:b5:6f:89:ef:57:c7:10:a6:fa:c5:52:5e:
                    8b:7a:b3:8b:fb:46:91:d5:2e:e4:c8:25:b0:91:37:
                    e6:8d:51:b2:01:ff:2b:38:4d:6e:3c:fb:b0:18:ac:
                    16:e8:c7:66:de:1d:7c:d4:d2:83:7a:6a:72:1b:63:
                    d9:3b:be:29:9f:75:a9:46:ee:13:f3:1d:c0:f0:92:
                    c4:51:9c:47:48:7f:c7:33:7e:8b:e1:fb:bb:6a:e3:
                    c3:5e:55:a1:57:82:f9:e1:08:96:2b:20:dc:f4:83:
                    27:e1:4a:f7:a9:e1:89:c3:be:30:af:0a:6b:db:58:
                    63:62:24:96:56:19:0b:a7:3c:24:aa:c7:db:8e:63:
                    c1:f2:d1:b0:f3:c3:e9:bb:62:8d:e2:ad:a9:d1:66:
                    d7:dc:89:e1:5a:a3:42:ee:92:40:ef:0a:7a:4c:10:
                    56:37:38:75:f1:5a:09:a2:40:68:69:a3:89:30:05:
                    f7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A2:88:ED:3A:0B:44:A3:17:46:03:EB:BB:EF:86:58:AC:A3:FB:16
            X509v3 Authority Key Identifier:
                keyid:54:41:1F:E7:33:2D:2E:F4:FF:27:5E:59:D5:DE:FE:D1:CC:E9:60:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:93:0d:1e:14:08:90:2d:3f:1e:42:30:14:c1:d8:99:ac:26:
         84:a9:28:6f:83:64:04:ad:57:8d:3f:dd:51:aa:6d:06:b6:09:
         fd:ce:71:24:d5:48:97:43:6e:d5:3a:49:26:cd:15:8d:aa:80:
         71:fa:bf:7e:ad:f9:3f:bd:ec:2b:90:c6:14:5a:ec:a0:b9:fc:
         94:34:88:74:ac:99:a9:9d:b8:c4:89:c1:47:73:73:c3:4f:62:
         bd:d2:68:99:d6:86:c3:dc:fc:84:6e:4f:62:30:55:92:69:c2:
         73:93:96:cd:02:06:2a:af:3f:bf:4b:4c:d4:75:62:d2:fc:ae:
         85:fa:c7:e4:1c:93:d0:14:21:c7:5a:ec:88:ed:83:ba:e5:be:
         f4:15:96:43:61:f1:ef:66:e3:90:b7:ba:12:48:c3:61:27:fb:
         1f:d7:a6:8b:6f:c2:3d:34:4f:9b:76:a9:2b:25:55:bf:af:fe:
         a5:a4:99:8a:07:b6:7b:8e:5c:12:4b:89:9e:94:88:68:4e:49:
         40:59:db:c8:54:4c:e8:87:41:99:95:e7:38:17:05:b3:7c:94:
         51:86:5e:3b:42:85:40:88:04:60:ae:78:ce:57:ac:41:1e:d0:
         75:57:2a:38:79:32:55:95:d5:61:fa:52:05:69:8b:44:fb:d6:
         93:62:42:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:33:11 2025 by rpki-client