Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
File:                     vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft (raw, json)
Hash identifier:          57L0MSyPXh4mOCBxqkmMGNoJVBJXd9hh0Jlq9//0ZTE=
Subject key identifier:   60:0B:D9:44:76:AE:48:CC:37:CE:15:6C:06:69:F5:43:21:83:AC:B4
Authority key identifier: BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B
Certificate issuer:       /CN=A91F9E9D/serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B
Certificate serial:       017B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
Manifest number:          0177
Signing time:             Wed 05 Nov 2025 03:55:48 +0000
Manifest this update:     Wed 05 Nov 2025 03:55:47 +0000
Manifest next update:     Wed 12 Nov 2025 03:55:47 +0000
Files and hashes:         1: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl (hash: /JgSuVbpgaEaBRzhsK1j2lw0N0DIdwSw1sFU9zowYFs=)
                          2: 453686A272BA11F09A607433C4F9AE02.roa (hash: q2MSp4Q8sWvUE8k/uBLa7fJOiAjxmo9DC7/S2PYD4Tw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl
                          rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 03:55:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9E9D, serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B
        Validity
            Not Before: Nov  5 03:55:47 2025 GMT
            Not After : Nov 12 03:55:47 2025 GMT
        Subject: CN=690acac4-ad83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:44:30:0a:aa:94:65:d1:2c:69:ab:6c:3f:9d:
                    f5:1a:7d:48:34:3c:6a:5c:32:36:f2:0d:14:2d:aa:
                    f9:42:cb:c7:b5:f9:b1:d9:7a:73:bb:07:8c:ad:7f:
                    f0:54:f2:b4:e0:d6:62:3a:64:be:1a:98:07:43:4a:
                    26:ea:8a:be:a3:25:87:bd:c6:94:bf:5d:7b:13:e2:
                    39:e0:42:62:e9:66:a4:54:9c:3f:87:0a:77:92:e8:
                    58:2d:88:65:15:a5:a3:b4:97:3e:1d:99:1d:9f:b5:
                    1a:13:34:d2:2f:03:18:9c:9a:d9:7d:58:fc:f7:29:
                    03:30:42:4f:c1:be:31:d8:90:9d:c2:37:b3:c2:b0:
                    07:43:84:fd:86:4a:64:00:47:c6:a1:a4:80:0d:6e:
                    ba:9e:e7:d1:fb:3e:77:97:73:9c:45:a8:d0:17:13:
                    84:16:2e:ce:0b:ce:b2:57:0e:d8:6e:cc:c5:3b:ba:
                    9c:82:d1:73:7c:ea:02:19:83:23:1c:97:73:b2:c6:
                    00:14:b3:42:c8:b1:41:b5:f9:d6:78:1c:48:55:2c:
                    6a:33:60:2a:39:bc:b3:26:52:d0:b8:1d:1c:b1:d4:
                    a2:8c:9a:b9:30:a5:21:a5:33:20:99:ef:f9:6e:32:
                    a9:b2:8e:b2:9e:19:de:42:5f:5d:a9:85:cd:7d:a1:
                    d6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0B:D9:44:76:AE:48:CC:37:CE:15:6C:06:69:F5:43:21:83:AC:B4
            X509v3 Authority Key Identifier:
                keyid:BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:ec:38:79:c6:04:dd:40:ee:33:30:53:a3:04:c5:1b:e1:00:
         a4:2d:a0:15:c1:9b:8f:15:fe:a8:b1:56:38:ab:f1:3a:3a:07:
         4f:2e:e7:e9:af:0e:29:ba:44:23:c6:5e:5e:4d:b3:bf:dc:2d:
         7a:62:40:ca:2c:d6:8d:fd:08:64:6e:59:f8:3d:e1:b8:6d:23:
         cb:17:53:4b:ee:0e:c3:9a:91:5a:6d:d8:57:de:64:8d:26:6b:
         ae:05:2c:b3:13:7b:4f:ff:e0:0b:06:a0:43:cc:22:d6:02:f3:
         c0:fc:54:3b:5a:e5:a7:e3:19:9e:b7:65:fc:d7:ae:3d:98:3e:
         3a:85:29:53:f1:90:cd:b9:e1:fe:de:37:fe:c8:71:84:5f:52:
         25:60:a4:73:f3:4a:b9:3c:b4:0d:32:8d:b6:df:17:77:b7:37:
         fa:89:6f:42:7e:9e:8e:c8:83:cd:32:86:68:24:86:cb:3a:62:
         3c:8c:b7:cd:df:98:40:5a:33:32:f7:ee:47:e8:2f:36:64:3c:
         a6:d5:0f:c0:26:08:86:a2:48:cd:08:9b:6e:0a:69:6c:3f:c4:
         ba:5e:7d:d8:cd:48:e9:bf:83:34:e8:63:10:62:bb:6a:8e:cc:
         f9:f5:a8:16:c0:60:00:80:c2:98:ef:c0:d3:39:8c:d4:5e:a7:
         89:6c:b1:74
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjlFOUQxMTAvBgNVBAUTKEJFMDE5MTM3QTgxRDdFOUNEOUFGNTZDRDkxQzU4N0My
RUYwNkU5M0IwHhcNMjUxMTA1MDM1NTQ3WhcNMjUxMTEyMDM1NTQ3WjAYMRYwFAYD
VQQDEw02OTBhY2FjNC1hZDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApkQwCqqUZdEsaatsP531Gn1INDxqXDI28g0ULar5QsvHtfmx2XpzuweMrX/w
VPK04NZiOmS+GpgHQ0om6oq+oyWHvcaUv117E+I54EJi6WakVJw/hwp3kuhYLYhl
FaWjtJc+HZkdn7UaEzTSLwMYnJrZfVj89ykDMEJPwb4x2JCdwjezwrAHQ4T9hkpk
AEfGoaSADW66nufR+z53l3OcRajQFxOEFi7OC86yVw7YbszFO7qcgtFzfOoCGYMj
HJdzssYAFLNCyLFBtfnWeBxIVSxqM2AqObyzJlLQuB0csdSijJq5MKUhpTMgme/5
bjKpso6ynhneQl9dqYXNfaHWVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGAL2UR2
rkjMN84VbAZp9UMhg6y0MB8GA1UdIwQYMBaAFL4BkTeoHX6c2a9WzZHFh8LvBuk7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUU5RC81MjgyOEIyQTdC
ODcxMUVFQTg0MEYyMUVDNEY5QUUwMi92Z0dSTjZnZGZwelpyMWJOa2NXSHd1OEc2
VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZnR1JONmdkZnB6WnIxYk5rY1dId3U4RzZUcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OUU5RC81MjgyOEIyQTdCODcxMUVFQTg0MEYyMUVDNEY5QUUwMi92Z0dSTjZnZGZw
elpyMWJOa2NXSHd1OEc2VHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDL7Dh5xgTdQO4zMFOjBMUb4QCkLaAVwZuPFf6osVY4q/E6OgdPLufp
rw4pukQjxl5eTbO/3C16YkDKLNaN/Qhkbln4PeG4bSPLF1NL7g7DmpFabdhX3mSN
JmuuBSyzE3tP/+ALBqBDzCLWAvPA/FQ7WuWn4xmet2X81649mD46hSlT8ZDNueH+
3jf+yHGEX1IlYKRz80q5PLQNMo223xd3tzf6iW9Cfp6OyIPNMoZoJIbLOmI8jLfN
35hAWjMy9+5H6C82ZDym1Q/AJgiGokjNCJtuCmlsP8S6Xn3YzUjpv4M06GMQYrtq
jsz59agWwGAAgMKY78DTOYzUXqeJbLF0
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:55:38 2025 by rpki-client