Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1CC/7C1E344C4A3A11F0BD5C1B4FC4F9AE02/V-g9gYxmEEbA4OLv5TjuEncAqjM.mft
File:                     V-g9gYxmEEbA4OLv5TjuEncAqjM.mft (raw, json)
Hash identifier:          0JLcOEW/w6aLrkhaRIYKs6XWs3NVcbWlmFwgQ7P0rSQ=
Subject key identifier:   22:7B:5A:28:00:F0:04:B9:F2:1D:44:A1:6E:D9:8B:C7:F3:3B:FA:73
Authority key identifier: 57:E8:3D:81:8C:66:10:46:C0:E0:E2:EF:E5:38:EE:12:77:00:AA:33
Certificate issuer:       /CN=A91DD1CC/serialNumber=57E83D818C661046C0E0E2EFE538EE127700AA33
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V-g9gYxmEEbA4OLv5TjuEncAqjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD1CC/7C1E344C4A3A11F0BD5C1B4FC4F9AE02/V-g9gYxmEEbA4OLv5TjuEncAqjM.mft
Manifest number:          0A
Signing time:             Tue 01 Jul 2025 08:55:59 +0000
Manifest this update:     Tue 01 Jul 2025 08:55:59 +0000
Manifest next update:     Tue 08 Jul 2025 08:55:59 +0000
Files and hashes:         1: V-g9gYxmEEbA4OLv5TjuEncAqjM.crl (hash: tBZd99OAbJ1zZl4gZAjbsBJmo/pypXAtvqB9uOfDjns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD1CC/7C1E344C4A3A11F0BD5C1B4FC4F9AE02/V-g9gYxmEEbA4OLv5TjuEncAqjM.crl
                          rsync://rpki.apnic.net/member_repository/A91DD1CC/7C1E344C4A3A11F0BD5C1B4FC4F9AE02/V-g9gYxmEEbA4OLv5TjuEncAqjM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V-g9gYxmEEbA4OLv5TjuEncAqjM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 08:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD1CC, serialNumber=57E83D818C661046C0E0E2EFE538EE127700AA33
        Validity
            Not Before: Jul  1 08:55:59 2025 GMT
            Not After : Jul  8 08:55:59 2025 GMT
        Subject: CN=6863a29f-a61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6f:24:cd:53:83:82:3b:dd:cf:58:9d:c8:4f:
                    8d:a5:45:24:07:26:2c:06:41:20:9f:08:de:a6:9c:
                    e9:44:f1:e4:16:30:c1:5e:60:3e:73:83:dd:54:48:
                    cc:37:16:6d:1c:b9:e8:a2:0b:a7:37:65:aa:9b:32:
                    e9:8e:a9:5e:27:1c:43:7d:01:ff:21:ab:78:7c:67:
                    92:fc:79:a0:38:61:f3:54:9c:ba:fd:73:38:47:d1:
                    a3:1c:31:3b:15:d3:2e:6d:b6:93:24:05:a8:89:05:
                    28:35:c7:d9:05:9e:75:58:e3:43:3f:1d:e7:b9:83:
                    ba:52:b4:1a:a8:e6:27:b2:c2:8b:d1:6d:32:f5:ad:
                    32:eb:a3:9e:e9:90:e3:46:e7:44:35:ad:05:04:40:
                    de:30:02:0b:3b:72:d8:b8:f3:99:3d:cb:86:5d:02:
                    a3:2c:7c:c4:b8:67:12:b2:42:01:c2:b1:4b:cc:a2:
                    ab:f9:c1:7e:7a:bf:e2:19:50:70:6f:f1:bf:c6:5b:
                    ac:00:f9:45:54:63:f4:68:e5:a4:1b:b3:e1:12:40:
                    d4:9a:44:f0:ba:75:01:ac:8d:ec:f0:d6:54:e5:8d:
                    5e:95:49:99:94:72:62:70:a7:42:c4:9a:46:a4:1e:
                    9b:55:02:9f:4e:e9:68:4b:f7:e9:ce:fe:2e:ff:01:
                    10:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7B:5A:28:00:F0:04:B9:F2:1D:44:A1:6E:D9:8B:C7:F3:3B:FA:73
            X509v3 Authority Key Identifier:
                keyid:57:E8:3D:81:8C:66:10:46:C0:E0:E2:EF:E5:38:EE:12:77:00:AA:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7C1E344C4A3A11F0BD5C1B4FC4F9AE02/V-g9gYxmEEbA4OLv5TjuEncAqjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V-g9gYxmEEbA4OLv5TjuEncAqjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7C1E344C4A3A11F0BD5C1B4FC4F9AE02/V-g9gYxmEEbA4OLv5TjuEncAqjM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:60:88:b8:6c:df:aa:da:65:08:a6:d0:85:b3:f7:6d:7c:d3:
         00:1d:72:69:af:bc:3c:57:f8:13:bb:53:c3:e9:8f:4b:bd:8a:
         9a:e7:18:6d:5d:ab:d8:62:25:d3:2d:0d:fc:34:3d:05:88:d5:
         c0:e5:e7:51:3d:27:83:cc:99:e6:ef:84:20:de:1c:6a:04:3e:
         90:71:a5:35:38:2e:07:99:91:e8:9b:92:ee:6b:48:d6:d8:05:
         5c:c1:02:a9:03:ac:05:89:f6:e3:10:b8:a5:c5:5e:5c:39:55:
         da:30:26:60:74:f8:2f:dc:31:69:1b:15:47:c7:61:aa:e2:4a:
         11:45:d0:8d:47:86:f7:65:04:b5:03:ac:2a:6d:5f:d4:c9:a4:
         8b:45:56:79:04:93:2c:f3:dd:d4:5a:26:c6:21:89:0f:58:b9:
         cf:82:64:27:23:24:7b:c0:83:ac:91:4f:68:7a:bf:98:43:30:
         18:cb:87:d2:0b:40:26:21:8d:f6:12:7a:f4:d1:b6:b1:e6:8c:
         fe:a1:70:d2:04:53:4a:37:88:aa:50:4d:23:81:b9:4e:08:3f:
         bd:0d:c8:12:7d:53:60:97:51:f9:71:83:1a:29:02:22:2d:f9:
         2b:b3:19:42:c6:91:b9:02:ff:66:97:05:0b:90:6c:56:e6:62:
         c3:2c:f6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 02:02:15 2025 by rpki-client