Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
File:                     vttNMcgBx4se-jSHY50DVayRNUs.mft (raw, json)
Hash identifier:          je8pWON26HRMftFPV+YIieedCBtsI9CRdp8/469KhKQ=
Subject key identifier:   1E:DE:E7:AA:68:2F:BD:14:B7:4A:A7:FE:64:28:44:1D:66:FC:DB:AB
Authority key identifier: BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B
Certificate issuer:       /CN=A91CB063/serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B
Certificate serial:       A3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
Manifest number:          9C
Signing time:             Wed 05 Nov 2025 06:39:44 +0000
Manifest this update:     Wed 05 Nov 2025 06:39:44 +0000
Manifest next update:     Wed 12 Nov 2025 06:39:44 +0000
Files and hashes:         1: vttNMcgBx4se-jSHY50DVayRNUs.crl (hash: I0b8Dd8NFokMDpu3+XYhJKy4vDFp2G4TO2KS4K/TM9Q=)
                          2: D99266FE4F7911F095AB2D46C4F9AE02.roa (hash: zM2x4PpXDO/09IRoY9uPWWkCUNv9rLsNP/d1xRjR15g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl
                          rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 06:39:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB063, serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B
        Validity
            Not Before: Nov  5 06:39:44 2025 GMT
            Not After : Nov 12 06:39:44 2025 GMT
        Subject: CN=690af130-5e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:40:26:52:12:8c:fd:79:f7:ce:86:d7:96:84:
                    3d:dd:e0:57:ac:d5:16:5a:ee:78:4c:9c:59:a0:ad:
                    f7:2b:7c:20:bb:aa:45:54:41:bc:6f:f8:29:cc:fb:
                    9b:b2:02:94:47:87:a9:b3:2c:da:48:d5:12:bb:fe:
                    30:64:03:31:26:5b:e1:bb:42:7c:e1:ee:87:02:fe:
                    88:99:0f:80:d2:46:dd:cf:06:34:d8:b9:ab:67:4b:
                    38:df:bf:e3:4e:30:8d:dd:40:e1:2f:ed:ab:80:18:
                    d0:17:ef:67:ed:96:2e:7f:45:03:e6:0b:fa:80:fc:
                    1f:d8:42:e4:98:1d:c2:e3:d9:12:37:e3:92:83:f4:
                    78:60:5a:0e:dc:6e:96:bd:59:9d:37:fe:9a:63:47:
                    07:d1:2e:f1:74:ca:ae:83:b0:8b:0a:7b:4c:6d:dc:
                    b6:b6:20:5d:25:c3:3d:90:51:03:3e:ac:5c:ea:af:
                    a4:2a:1a:84:53:12:5b:9e:b5:33:b1:a3:70:29:01:
                    b8:01:8c:43:c9:6e:b9:47:73:34:ea:4d:3b:58:ff:
                    1b:57:c2:ad:82:7a:2a:62:07:b5:7b:94:10:c1:b2:
                    2e:e4:bd:7a:85:42:27:8a:0e:f0:13:09:2e:fd:65:
                    5f:80:03:dc:33:d0:e2:e1:40:94:49:46:9b:59:29:
                    48:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:DE:E7:AA:68:2F:BD:14:B7:4A:A7:FE:64:28:44:1D:66:FC:DB:AB
            X509v3 Authority Key Identifier:
                keyid:BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:58:b0:dd:7a:03:2d:62:0e:90:d9:a7:8f:4b:5a:d1:38:04:
         49:2c:88:d6:e0:20:fb:d4:95:f7:e9:0d:47:7d:55:77:66:e4:
         81:c1:8c:24:5a:26:88:ce:24:16:9f:eb:16:5b:eb:98:c5:83:
         29:4e:1b:6c:a3:1b:84:6b:bf:a3:b4:0c:04:75:54:ce:fd:29:
         32:37:3a:57:15:3f:18:42:2d:28:de:62:c8:5b:a3:1a:5b:9a:
         1f:55:00:e5:e2:f1:40:46:9d:22:4d:00:1e:81:5e:36:03:9e:
         ad:80:d2:dc:c2:1a:ea:50:ad:ca:c7:4f:b4:15:22:de:8e:37:
         31:42:94:59:77:39:80:48:49:6d:b4:e2:6f:d2:b3:f0:de:72:
         2a:f7:ce:69:9a:29:35:c6:c6:77:9b:3b:18:ca:b7:b6:7a:63:
         a9:b4:57:3b:0a:6b:2c:64:21:1e:93:1a:5e:c1:19:b1:f7:ff:
         2e:82:f4:63:a8:62:b2:22:61:7c:68:28:a3:e4:b9:39:c4:83:
         68:b1:2a:42:d0:94:05:b6:1c:d5:2b:25:1a:68:08:a4:4c:d3:
         16:07:d0:d2:22:87:e7:34:bb:58:2e:2d:66:39:25:a7:91:24:
         82:96:df:d5:e8:84:99:f2:28:b6:9d:ae:0c:bb:25:9a:92:cd:
         8d:a5:38:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0IwNjMxMTAvBgNVBAUTKEJFREI0RDMxQzgwMUM3OEIxRUZBMzQ4NzYzOUQwMzU1
QUM5MTM1NEIwHhcNMjUxMTA1MDYzOTQ0WhcNMjUxMTEyMDYzOTQ0WjAYMRYwFAYD
VQQDEw02OTBhZjEzMC01ZTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+EAmUhKM/Xn3zobXloQ93eBXrNUWWu54TJxZoK33K3wgu6pFVEG8b/gpzPub
sgKUR4epsyzaSNUSu/4wZAMxJlvhu0J84e6HAv6ImQ+A0kbdzwY02LmrZ0s437/j
TjCN3UDhL+2rgBjQF+9n7ZYuf0UD5gv6gPwf2ELkmB3C49kSN+OSg/R4YFoO3G6W
vVmdN/6aY0cH0S7xdMqug7CLCntMbdy2tiBdJcM9kFEDPqxc6q+kKhqEUxJbnrUz
saNwKQG4AYxDyW65R3M06k07WP8bV8KtgnoqYge1e5QQwbIu5L16hUInig7wEwku
/WVfgAPcM9Di4UCUSUabWSlI4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7e56po
L70Ut0qn/mQoRB1m/NurMB8GA1UdIwQYMBaAFL7bTTHIAceLHvo0h2OdA1WskTVL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA2My82M0I0NzYwMkQ2
RUQxMUVGOUQ5QkYzNkFDNEY5QUUwMi92dHROTWNnQng0c2UtalNIWTUwRFZheVJO
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3Z0dE5NY2dCeDRzZS1qU0hZNTBEVmF5Uk5Vcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QjA2My82M0I0NzYwMkQ2RUQxMUVGOUQ5QkYzNkFDNEY5QUUwMi92dHROTWNnQng0
c2UtalNIWTUwRFZheVJOVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAcWLDdegMtYg6Q2aePS1rROARJLIjW4CD71JX36Q1HfVV3ZuSBwYwk
WiaIziQWn+sWW+uYxYMpThtsoxuEa7+jtAwEdVTO/SkyNzpXFT8YQi0o3mLIW6Ma
W5ofVQDl4vFARp0iTQAegV42A56tgNLcwhrqUK3Kx0+0FSLejjcxQpRZdzmASElt
tOJv0rPw3nIq985pmik1xsZ3mzsYyre2emOptFc7CmssZCEekxpewRmx9/8ugvRj
qGKyImF8aCij5Lk5xINosSpC0JQFthzVKyUaaAikTNMWB9DSIofnNLtYLi1mOSWn
kSSClt/V6ISZ8ii2na4MuyWaks2NpTg0
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:36:03 2025 by rpki-client