Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
File:                     vkY_wZGbQUKyOCgTgn-3FtbukoM.mft (raw, json)
Hash identifier:          Nm2EDEsqy4EsDBlyxXqIg0PbjDHvAZEKrMrhJl3jc40=
Subject key identifier:   95:18:C2:27:AB:70:D1:8D:90:DF:D9:87:32:9A:33:B2:21:7C:80:F0
Authority key identifier: BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83
Certificate issuer:       /CN=A91D40BF/serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283
Certificate serial:       0793
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
Manifest number:          0784
Signing time:             Mon 08 Sep 2025 21:31:45 +0000
Manifest this update:     Mon 08 Sep 2025 21:31:45 +0000
Manifest next update:     Mon 15 Sep 2025 21:31:45 +0000
Files and hashes:         1: vkY_wZGbQUKyOCgTgn-3FtbukoM.crl (hash: hdvYw8RNPcgo4si8kk5y5NDRVjidryxiLsCfg02r+5M=)
                          2: 28543AA0BABA11EB8A51C234C4F9AE02.roa (hash: tLbuywK1hQsCi3a1AqRQB3esx6wP54LrqFgdAXcaBdM=)
                          3: ACEBC29CC5B911EBB41FAF2DC4F9AE02.roa (hash: XOt7bB+UgZTY8Thh+DvUt1JxAIDEDKn5j8X2t+ws97c=)
                          4: 2798B9A6BABA11EB8A51C234C4F9AE02.roa (hash: +zcjX2imATb1GbMG2fycsIcaiWvdU6/+K/wkiamqX6U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl
                          rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 21:31:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1939 (0x793)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D40BF, serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283
        Validity
            Not Before: Sep  8 21:31:45 2025 GMT
            Not After : Sep 15 21:31:45 2025 GMT
        Subject: CN=68bf4b41-c5cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:38:d5:82:25:62:2a:32:a9:04:9d:9a:fa:cd:
                    b7:18:16:84:81:7e:a9:95:f1:7a:c6:c8:c8:f0:26:
                    e8:ba:6e:ff:05:74:bb:55:8f:38:dc:da:cb:89:89:
                    b4:31:87:0d:04:f7:d0:38:50:51:9a:4e:b8:e2:fe:
                    d2:9f:05:d7:bc:5a:e7:ab:7d:ac:af:5e:26:6b:35:
                    0a:b9:8d:bf:fc:f3:58:5f:71:da:6d:7b:a9:75:4d:
                    fa:c2:f3:4b:d9:35:ad:4e:89:87:fe:d7:df:c0:8f:
                    e6:07:b2:c3:07:75:55:01:db:04:1b:04:1d:45:46:
                    87:49:e7:9e:f9:a3:7c:7e:f1:cf:7f:fa:26:9d:6f:
                    a5:a6:df:0f:72:33:1a:bf:e9:5d:5a:f1:26:00:fb:
                    59:f0:90:36:be:ee:63:e3:8f:73:d2:dc:29:d4:be:
                    47:65:5e:81:b4:e0:fc:b6:74:09:b6:55:55:d8:39:
                    4f:95:8b:89:c9:27:ab:b0:64:ef:15:12:df:f0:f4:
                    5e:01:37:b0:9a:35:26:37:60:b9:90:3a:a1:2c:e5:
                    5b:cb:06:35:b3:4a:d9:af:62:e6:c1:8e:10:62:e4:
                    ea:02:35:48:f1:33:92:64:89:f5:0f:35:d0:e4:69:
                    f6:bf:02:17:33:50:a7:4b:cd:d7:c8:0e:06:ec:a9:
                    fd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:18:C2:27:AB:70:D1:8D:90:DF:D9:87:32:9A:33:B2:21:7C:80:F0
            X509v3 Authority Key Identifier:
                keyid:BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:61:65:d1:65:e5:4a:08:86:ac:15:d7:3b:93:58:2b:49:e7:
         fc:f8:b2:8f:1d:d5:93:65:9b:a0:a6:22:cb:c5:20:51:bb:52:
         30:b8:e9:4d:75:aa:8e:78:ff:ae:b4:16:0e:ac:28:26:08:43:
         6c:ee:36:93:56:91:b1:9c:be:ee:01:8c:ee:17:a9:cb:79:ae:
         b5:5b:66:4f:c1:7e:7c:9e:d3:dc:4d:35:71:87:71:0b:59:38:
         26:ad:ac:84:0b:fe:b4:94:a5:9e:7b:04:09:a0:2a:38:7f:09:
         0a:ed:29:43:3a:4a:87:a4:97:e8:38:d6:fc:29:2f:6e:da:c9:
         dd:4a:87:3c:b2:de:54:f0:26:5b:d9:42:a5:c0:f9:0d:a5:ff:
         bc:16:d9:33:30:4d:e8:ce:90:ce:74:66:2d:c9:cb:c4:e8:56:
         8e:91:f3:40:c8:e2:8c:16:97:30:b0:87:e3:d6:2f:51:ef:66:
         3e:5c:c2:ed:90:78:ac:e9:c7:ff:74:9c:53:e3:4f:e3:1b:d4:
         af:78:cf:38:c8:0e:b0:46:71:0e:aa:07:24:15:4d:42:74:82:
         5e:40:a4:30:98:1d:68:5f:d7:a4:dd:ec:98:8e:93:87:eb:82:
         f2:48:d9:92:04:8e:5b:29:9d:b1:85:47:d0:28:0b:23:4c:ed:
         75:9e:fc:b2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQwQkYxMTAvBgNVBAUTKEJFNDYzRkMxOTE5QjQxNDJCMjM4MjgxMzgyN0ZCNzE2
RDZFRTkyODMwHhcNMjUwOTA4MjEzMTQ1WhcNMjUwOTE1MjEzMTQ1WjAYMRYwFAYD
VQQDEw02OGJmNGI0MS1jNWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAojjVgiViKjKpBJ2a+s23GBaEgX6plfF6xsjI8Cboum7/BXS7VY843NrLiYm0
MYcNBPfQOFBRmk644v7SnwXXvFrnq32sr14mazUKuY2//PNYX3HabXupdU36wvNL
2TWtTomH/tffwI/mB7LDB3VVAdsEGwQdRUaHSeee+aN8fvHPf/omnW+lpt8PcjMa
v+ldWvEmAPtZ8JA2vu5j449z0twp1L5HZV6BtOD8tnQJtlVV2DlPlYuJySersGTv
FRLf8PReATewmjUmN2C5kDqhLOVbywY1s0rZr2LmwY4QYuTqAjVI8TOSZIn1DzXQ
5Gn2vwIXM1CnS83XyA4G7Kn9cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJUYwier
cNGNkN/ZhzKaM7IhfIDwMB8GA1UdIwQYMBaAFL5GP8GRm0FCsjgoE4J/txbW7pKD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBCRi8yN0I3QTI4NDI0
QzAxMUVCQjYyQjQzODdDNEY5QUUwMi92a1lfd1pHYlFVS3lPQ2dUZ24tM0Z0YnVr
b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZrWV93WkdiUVVLeU9DZ1Rnbi0zRnRidWtvTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDBCRi8yN0I3QTI4NDI0QzAxMUVCQjYyQjQzODdDNEY5QUUwMi92a1lfd1pHYlFV
S3lPQ2dUZ24tM0Z0YnVrb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDCYWXRZeVKCIasFdc7k1grSef8+LKPHdWTZZugpiLLxSBRu1IwuOlN
daqOeP+utBYOrCgmCENs7jaTVpGxnL7uAYzuF6nLea61W2ZPwX58ntPcTTVxh3EL
WTgmrayEC/60lKWeewQJoCo4fwkK7SlDOkqHpJfoONb8KS9u2sndSoc8st5U8CZb
2UKlwPkNpf+8FtkzME3ozpDOdGYtycvE6FaOkfNAyOKMFpcwsIfj1i9R72Y+XMLt
kHis6cf/dJxT40/jG9SveM84yA6wRnEOqgckFU1CdIJeQKQwmB1oX9ek3eyYjpOH
64LySNmSBI5bKZ2xhUfQKAsjTO11nvyy
-----END CERTIFICATE-----
Generated at Tue Sep 9 13:22:39 2025 by rpki-client