Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft
File:                     vUxEHwLHrdQvpiQugzHZP1nlGDo.mft (raw, json)
Hash identifier:          qq1p7myQNtOBo7+n8S9gxin7PiLESmJqj+iRjxUfVlU=
Subject key identifier:   E1:17:2E:25:05:CC:83:47:AF:D0:B6:AD:1B:91:0F:B1:22:1B:31:5F
Authority key identifier: BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A
Certificate issuer:       /CN=A91C67F9/serialNumber=BD4C441F02C7ADD42FA6242E8331D93F59E5183A
Certificate serial:       0207
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft
Manifest number:          0200
Signing time:             Wed 17 Sep 2025 02:55:54 +0000
Manifest this update:     Wed 17 Sep 2025 02:55:54 +0000
Manifest next update:     Wed 24 Sep 2025 02:55:54 +0000
Files and hashes:         1: vUxEHwLHrdQvpiQugzHZP1nlGDo.crl (hash: f9CLXPELK5icHQvuGv6qsFu4s2YJ7Nt2TY4+5yBwm3M=)
                          2: 079523028DB211ED910C330CC4F9AE02.roa (hash: xzgBPal6IOe/j/+TaOIAF4pWCr/iRW72DMF6pOIsYcg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl
                          rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 02:55:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C67F9, serialNumber=BD4C441F02C7ADD42FA6242E8331D93F59E5183A
        Validity
            Not Before: Sep 17 02:55:54 2025 GMT
            Not After : Sep 24 02:55:54 2025 GMT
        Subject: CN=68ca233a-9390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d2:87:f8:9b:61:b0:59:10:70:81:f2:8f:3c:
                    e7:b5:e4:65:be:65:29:57:cc:89:c8:4f:ec:8a:2b:
                    5c:80:bf:1a:36:ee:48:b0:7f:74:ee:2f:f2:aa:06:
                    32:c6:4d:d2:28:a3:23:37:eb:a1:0b:91:04:45:eb:
                    17:fb:7c:bc:6a:8b:3e:8a:43:bf:b5:93:c2:20:75:
                    14:30:b9:b9:bf:1a:73:aa:bc:62:2a:c3:05:92:3b:
                    cd:d4:9b:e5:ad:8a:f7:19:0c:d7:76:c3:50:ed:12:
                    b7:45:28:7b:6a:b0:74:bb:42:e3:b1:95:4b:78:d6:
                    15:03:33:ff:59:fc:f4:a7:8f:4c:50:51:77:56:25:
                    c5:7d:b7:31:20:11:e3:7c:bb:da:bf:8d:81:72:aa:
                    32:2b:ce:8a:04:f2:c4:ef:9d:25:a1:7d:ad:0d:c8:
                    e7:57:48:26:f0:30:b9:62:bc:7c:b1:b2:74:3a:d6:
                    ea:b6:fe:0b:63:8c:34:72:e1:17:86:8c:bc:36:bf:
                    52:64:63:13:48:9e:d9:e4:40:f3:94:7a:b7:aa:bb:
                    38:74:cb:ee:01:92:ed:1e:80:e9:8c:e8:77:8b:5b:
                    e8:e4:8f:67:0a:0d:fa:23:ac:21:47:d3:56:1d:f1:
                    89:51:b8:7b:f4:83:fd:11:4e:ad:81:fa:43:8d:a4:
                    83:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:17:2E:25:05:CC:83:47:AF:D0:B6:AD:1B:91:0F:B1:22:1B:31:5F
            X509v3 Authority Key Identifier:
                keyid:BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:cb:ad:b3:64:8c:6e:de:0d:4e:c3:64:33:ad:ff:66:5f:8e:
         a5:d2:50:88:a6:d9:07:e0:95:0b:7b:24:bb:c0:e0:be:8c:2f:
         0e:ce:fb:a7:ef:ec:4a:37:0f:1c:c3:f5:33:82:d4:35:67:ae:
         6f:6f:85:01:c5:f2:7e:f9:e7:aa:63:d8:2b:57:4e:14:30:ce:
         1e:f2:a8:60:2b:1b:96:d5:19:ac:30:c6:11:c6:c8:c5:34:df:
         05:3e:b6:26:d1:ff:9d:4b:c5:55:cd:b2:34:e3:37:d6:4c:6b:
         91:f4:1a:7d:07:b9:d1:6a:51:9b:fd:2d:6e:a5:83:3c:f9:53:
         8d:05:af:bd:90:a7:69:d2:7c:e1:8e:ea:3a:a5:10:a4:11:36:
         bc:0d:95:64:ab:3b:74:4a:c2:9e:fc:47:00:bc:24:9e:05:58:
         99:f3:3f:54:3d:e9:af:2a:58:d9:93:3d:4a:a0:0c:28:18:4f:
         c5:3e:d9:82:3c:de:a9:14:a8:6c:6f:2d:af:96:0b:a5:5c:76:
         06:9d:ba:d0:10:e5:45:4e:fa:34:29:17:45:10:d2:ef:21:af:
         dd:89:d1:70:f9:b4:d4:68:44:94:50:b3:e9:d6:65:d3:a9:c1:
         6f:d3:41:5c:54:3c:f6:34:c0:32:b1:c6:33:8d:34:95:b4:f3:
         56:76:36:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 03:41:18 2025 by rpki-client