Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
File:                     voUqizt-pcWsWlKqy4UqAaTN0II.mft (raw, json)
Hash identifier:          56/c+fCFMddeheQqDgFvWqGsMM9bvNVKNjvqnsY18Tg=
Subject key identifier:   A7:DD:FF:0D:8A:56:8C:CB:65:3F:F2:B9:02:88:B6:65:8C:59:18:B7
Authority key identifier: BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
Certificate issuer:       /CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Certificate serial:       0493
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
Manifest number:          047D
Signing time:             Sun 07 Sep 2025 00:32:11 +0000
Manifest this update:     Sun 07 Sep 2025 00:32:11 +0000
Manifest next update:     Sun 14 Sep 2025 00:32:11 +0000
Files and hashes:         1: voUqizt-pcWsWlKqy4UqAaTN0II.crl (hash: JkLlSDPJQeaFDiKPRjzCeUEQRdRfDr8sYGro2c5OakI=)
                          2: D717B9F0B7E511EFB5F63E6DC4F9AE02.roa (hash: R/nnjeAR+tZePhFeIgEDIZOhg5pi4qQT+4iwQfx8ekU=)
                          3: D254B444679111EF8A2C9062C4F9AE02.roa (hash: KIM/sEwaQaYFPC8qF/5+qRUkUFtySui4RoXzgpLXzmc=)
                          4: 14F55DEAB7E611EF9B9D9F6DC4F9AE02.roa (hash: BIPMm9ibDgvfx7NU935+UV2sEA5f17RgI+qcbtg58kw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
                          rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 00:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1171 (0x493)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF428, serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
        Validity
            Not Before: Sep  7 00:32:11 2025 GMT
            Not After : Sep 14 00:32:11 2025 GMT
        Subject: CN=68bcd28b-fb97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a0:62:7f:4f:f7:65:c8:44:13:de:80:49:c2:
                    db:5a:cd:1e:17:67:1d:f7:2c:eb:19:79:bd:a2:da:
                    a1:87:81:76:63:25:e2:22:cb:f1:86:47:56:27:4a:
                    fa:be:c1:a1:53:ff:dc:54:d1:7a:38:fd:5f:e1:2c:
                    5a:c9:69:eb:6e:96:67:d1:15:c6:c2:b3:ef:4e:14:
                    95:e9:f7:e0:83:8c:18:74:b4:cc:9c:1f:7d:45:fb:
                    5f:85:b2:73:a8:0f:19:66:71:0a:a8:87:4d:20:55:
                    48:1f:b2:d7:29:5d:6d:e8:cc:f1:d6:6b:ff:ea:13:
                    7b:07:25:4a:e7:a8:9a:cf:fa:04:32:d0:49:33:a4:
                    03:ca:e1:91:78:46:94:bf:03:ad:98:a3:02:3b:fd:
                    8c:d5:37:fe:27:99:50:8b:05:de:09:a5:6d:89:60:
                    94:ed:e8:af:c3:b8:97:16:40:94:3c:4a:b8:ed:21:
                    07:4b:08:6c:ef:ed:92:dd:8a:4e:9e:6e:6f:c6:58:
                    08:c3:54:13:3d:fc:7e:49:47:ee:fd:64:a7:01:f0:
                    8d:06:6d:70:c6:5a:01:dc:69:49:18:74:44:c0:e7:
                    76:14:37:88:9e:6c:92:4e:d9:b2:9a:d9:35:94:99:
                    69:8e:66:3f:12:b2:d0:51:e8:05:44:bf:fa:8e:49:
                    54:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DD:FF:0D:8A:56:8C:CB:65:3F:F2:B9:02:88:B6:65:8C:59:18:B7
            X509v3 Authority Key Identifier:
                keyid:BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:df:fe:27:f2:cb:eb:38:a1:0d:eb:67:8b:fe:c1:58:cc:c2:
         4a:1a:3d:31:d9:b9:f5:dc:3f:01:9b:b6:87:ff:22:40:3e:bb:
         ee:5e:ea:4b:23:97:f1:a3:f9:9a:7e:4b:4b:a3:2d:f3:ed:66:
         e0:6f:ff:97:e9:f5:fd:13:fb:cc:b5:95:6b:07:d7:49:7a:7f:
         76:b0:fa:2e:cc:f3:e9:1d:19:95:2a:a9:8a:55:47:55:f5:fc:
         f2:5c:21:ae:3b:e0:23:bc:58:1b:34:6d:59:18:4f:47:d6:52:
         f4:9d:07:2d:7b:00:66:06:54:f9:42:54:e8:a2:99:9d:72:15:
         59:cc:7f:3a:cf:72:27:19:1e:35:1d:35:05:cd:7a:bf:23:af:
         fe:de:54:c2:19:99:32:c3:86:dc:9f:d2:a2:dc:04:ac:97:3e:
         5d:af:1a:2a:72:dc:03:aa:15:2a:d0:2b:f2:63:8f:8b:9b:a6:
         cf:cc:57:11:5a:d6:9e:e1:1d:68:c2:5b:99:92:65:32:f4:52:
         fe:e1:44:03:e9:05:36:db:72:5e:ec:23:5c:ba:24:a3:9e:55:
         40:34:79:51:c1:20:f7:3f:a1:0e:78:43:d2:a6:42:1d:33:ad:
         6c:f9:f4:3e:2f:49:7b:c2:27:c8:98:72:bf:36:72:e5:11:2f:
         6b:a1:4e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 03:35:35 2025 by rpki-client