Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
File:                     _vE6uFK4kquii39LJSVwiZZNdms.mft (raw, json)
Hash identifier:          DPtvoE5uYVDs1Oaq2GpMVh9Zn1eUYmbwMm7Pu3rYOh8=
Subject key identifier:   A2:83:E0:6D:97:DF:B1:30:EB:5E:56:FB:FD:0B:1C:2B:7A:D4:0E:10
Authority key identifier: FE:F1:3A:B8:52:B8:92:AB:A2:8B:7F:4B:25:25:70:89:96:4D:76:6B
Certificate issuer:       /CN=A91B66C5/serialNumber=FEF13AB852B892ABA28B7F4B25257089964D766B
Certificate serial:       0A41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
Manifest number:          0A37
Signing time:             Thu 18 Sep 2025 19:58:14 +0000
Manifest this update:     Thu 18 Sep 2025 19:58:14 +0000
Manifest next update:     Thu 25 Sep 2025 19:58:14 +0000
Files and hashes:         1: _vE6uFK4kquii39LJSVwiZZNdms.crl (hash: poajTUmyfdRFUSeHZRXguKncfZ6p+Y3SC5kuNbbdPtU=)
                          2: 503D2222018111EBB0502527C4F9AE02.roa (hash: LQT0TO6GObYdNEXY2zITFA+60OyJn4ApFTpeHBpwqn0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.crl
                          rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 19:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2625 (0xa41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B66C5, serialNumber=FEF13AB852B892ABA28B7F4B25257089964D766B
        Validity
            Not Before: Sep 18 19:58:14 2025 GMT
            Not After : Sep 25 19:58:14 2025 GMT
        Subject: CN=68cc6456-02c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:18:33:d6:44:99:31:49:92:02:bf:dc:de:8c:
                    dd:b8:bc:fe:ec:d5:e3:4a:9d:27:62:c1:96:0c:85:
                    e8:52:63:f2:94:f7:64:d0:d3:68:f7:88:8d:eb:93:
                    92:0b:e5:af:da:ed:57:e6:b5:50:0d:e5:7c:73:34:
                    1e:a2:2a:ef:87:64:ec:52:08:a9:01:e3:18:76:42:
                    9c:09:db:6a:b9:e8:30:55:7b:b0:e2:3a:66:5f:cb:
                    e1:be:33:1b:f1:cc:02:ac:23:7a:25:dd:58:62:fc:
                    ba:93:ef:02:d1:f9:11:cb:d0:b6:a3:54:72:c1:06:
                    fa:61:b7:a2:67:21:bc:74:f4:82:06:53:a3:2a:33:
                    ca:e6:6f:4c:d6:90:8d:8d:f5:cb:48:92:d6:4c:e9:
                    96:ad:d1:22:ed:23:ed:04:cd:55:5d:fd:b3:96:02:
                    56:a5:19:12:5c:fe:f6:3d:91:93:89:ba:46:f3:36:
                    1d:c8:88:d8:0c:80:3b:07:63:5a:0f:90:f2:09:67:
                    c4:41:29:19:3b:0e:f5:b2:0b:40:dc:cd:0f:6e:8e:
                    58:4c:79:36:fa:32:68:34:24:2d:73:4c:9c:24:75:
                    f6:4e:10:e9:3c:f4:16:73:01:95:01:f7:63:1a:a9:
                    19:6b:5b:3d:0a:af:7d:b1:79:e4:3e:d6:16:98:96:
                    d4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:83:E0:6D:97:DF:B1:30:EB:5E:56:FB:FD:0B:1C:2B:7A:D4:0E:10
            X509v3 Authority Key Identifier:
                keyid:FE:F1:3A:B8:52:B8:92:AB:A2:8B:7F:4B:25:25:70:89:96:4D:76:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:fb:fc:cc:7c:6d:78:70:9e:02:ed:bf:28:8b:e7:c7:fa:03:
         26:b9:8b:fa:41:e8:dc:84:dd:aa:81:db:ec:2c:29:30:90:8a:
         24:86:59:6b:51:a4:dc:e4:cc:fd:0c:60:bc:8c:ea:44:6f:d1:
         2b:f2:44:b2:6c:c7:90:15:ad:ea:e7:d8:d2:28:22:9a:3e:73:
         44:e4:0d:29:87:48:dc:cf:90:39:e6:3c:18:ff:62:00:b4:69:
         07:12:49:ad:56:45:79:93:c2:65:28:d1:6c:0b:26:5c:48:58:
         bb:3a:61:66:ef:5b:01:fa:2d:f4:14:27:ce:54:bc:35:94:94:
         31:1c:bf:6e:94:a1:03:55:a4:d2:94:80:e4:07:3c:63:c4:69:
         19:c9:d7:36:6d:c3:30:df:d8:24:f7:eb:b5:91:53:5a:34:9b:
         5a:46:13:e3:90:11:9e:6e:49:9b:24:a7:b6:dc:7f:9b:93:5a:
         e2:4a:79:08:d8:81:cf:cb:b1:4c:c0:65:50:5d:69:30:94:db:
         1f:25:34:6a:b6:71:2b:fd:4d:64:70:46:63:20:38:20:1c:a6:
         b4:e7:bd:9c:a0:71:4e:92:b1:81:6e:67:ec:b4:0e:66:f8:30:
         ae:fb:bd:6a:88:e4:ce:70:c0:50:78:85:cd:8e:ff:2b:23:96:
         48:fa:eb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:34:49 2025 by rpki-client