Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft
File:                     8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft (raw, json)
Hash identifier:          LBlkAZx1FnoHJj6tAgBmg/b+lQujKGEKxlelp9+Ve9g=
Subject key identifier:   2E:81:B9:F3:84:80:FC:83:41:EF:BB:83:87:C6:08:21:51:90:CC:56
Authority key identifier: F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97
Certificate issuer:       /CN=A91DC8F3/serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97
Certificate serial:       0765
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft
Manifest number:          075D
Signing time:             Wed 10 Sep 2025 21:50:32 +0000
Manifest this update:     Wed 10 Sep 2025 21:50:31 +0000
Manifest next update:     Wed 17 Sep 2025 21:50:31 +0000
Files and hashes:         1: 8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl (hash: OmU7/cOtTmm28cbbRjoYOAJ0s744Nmq3X1koxcK22w4=)
                          2: ADE3F5B635D611EB8466D634C4F9AE02.roa (hash: 8U9EPbtMKIJ3PvMvZUbdIHhWDysnxRWcaHtBd734a+U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl
                          rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Sep 2025 21:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1893 (0x765)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC8F3, serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97
        Validity
            Not Before: Sep 10 21:50:31 2025 GMT
            Not After : Sep 17 21:50:31 2025 GMT
        Subject: CN=68c1f2a7-eb0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4e:7a:cc:87:3b:cc:b9:5b:9d:56:14:f1:41:
                    67:ec:44:d7:18:46:44:91:92:90:90:4d:0b:cb:3b:
                    ee:5d:ee:b0:af:70:30:1a:26:4d:73:a0:6a:6f:b7:
                    1f:cc:0b:3c:0f:ec:0b:e4:e3:7b:7b:c1:47:31:d2:
                    f8:a4:1f:ba:fd:0e:77:83:88:49:d7:62:1c:f4:c1:
                    cf:34:fe:d7:7c:53:70:b9:bf:9c:0e:b9:19:60:99:
                    aa:00:70:49:d3:e5:5c:96:f0:51:67:9c:17:5f:77:
                    e7:50:f1:a6:0e:06:99:31:82:de:c2:8b:b1:7a:b0:
                    fc:a5:ed:6c:71:df:9b:d9:d2:96:57:e3:6d:c7:0a:
                    7e:a1:5f:ce:83:10:c7:97:c0:97:17:26:b6:a9:df:
                    4a:3f:f5:c4:9d:4f:e2:27:bc:79:cc:02:12:68:76:
                    e4:26:3f:a0:5c:e9:8d:18:e1:20:36:2f:25:0d:86:
                    32:b1:97:03:09:b8:ee:57:a0:20:86:55:15:b0:2f:
                    0c:21:45:c1:54:63:68:01:aa:ca:c0:32:5e:97:95:
                    f1:1a:96:4d:a9:55:61:44:02:a6:12:74:b4:e2:42:
                    81:22:51:1c:fb:b2:ff:39:af:51:b0:01:61:af:59:
                    cb:40:db:a7:e6:92:49:d4:9a:30:4f:ee:29:0e:93:
                    8f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:81:B9:F3:84:80:FC:83:41:EF:BB:83:87:C6:08:21:51:90:CC:56
            X509v3 Authority Key Identifier:
                keyid:F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:82:3f:ac:3b:b3:f6:d0:97:74:e5:b3:fa:26:10:8b:3e:16:
         4d:e3:2e:0a:4e:cb:65:e9:d5:2f:3c:7d:f4:cd:04:06:22:06:
         d2:aa:77:bc:ed:41:3d:d6:d1:60:fb:c4:18:a4:36:cc:5d:7c:
         3d:c1:8d:81:c9:92:52:8a:2f:98:bc:1e:0c:10:8b:c7:e8:4e:
         25:19:41:dd:cd:e9:b8:80:8d:61:c8:ef:bc:58:3f:ca:6e:cd:
         6d:40:e5:ef:6f:3e:b3:ac:a6:04:4a:1b:6e:3c:5d:29:da:92:
         05:88:df:03:c2:7a:8f:95:a9:63:d4:51:92:13:b6:1e:bc:ac:
         d3:7f:54:ee:df:5a:5d:4b:fd:22:be:6d:a6:22:11:55:61:d5:
         83:7d:d2:db:27:bf:c2:9f:e3:90:39:36:c0:7c:64:cf:d2:cb:
         65:48:b8:1e:6d:bb:16:67:8c:35:41:90:56:dc:a5:f7:83:65:
         c2:b1:e7:28:46:d9:da:09:c8:b9:1b:fb:e9:4e:d7:dc:79:21:
         79:28:25:25:fd:5f:90:65:db:f7:44:e3:3d:7b:ad:7f:b0:7a:
         f4:5f:3b:cf:43:82:11:f9:93:3a:3a:55:3f:36:96:29:db:1f:
         1f:11:8d:bc:5e:0a:72:46:f2:0b:49:3b:08:e7:da:e7:aa:86:
         65:d6:cd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 19:56:26 2025 by rpki-client