Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft
File:                     VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft (raw, json)
Hash identifier:          42V7rGDO60Ajks16gUm5L2B/mqvKUZtjgLNygwoBGJM=
Subject key identifier:   3A:22:18:5C:A0:18:27:F8:33:9A:26:1A:2C:3E:98:A2:39:3D:35:B6
Authority key identifier: 54:B6:DE:06:91:A9:C6:D5:65:CD:18:01:1D:D2:2B:10:9E:02:37:9B
Certificate issuer:       /CN=A9116119/serialNumber=54B6DE0691A9C6D565CD18011DD22B109E02379B
Certificate serial:       1145
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft
Manifest number:          113C
Signing time:             Tue 04 Nov 2025 17:20:51 +0000
Manifest this update:     Tue 04 Nov 2025 17:20:50 +0000
Manifest next update:     Tue 11 Nov 2025 17:20:50 +0000
Files and hashes:         1: VLbeBpGpxtVlzRgBHdIrEJ4CN5s.crl (hash: Y3QcjsCVoiSL622ZBxYJ1k3x5I05h8mMlVX7XQ+/+VE=)
                          2: 991E066C1DB711EB95324E17C4F9AE02.roa (hash: aSeUfkVwR//SK7D+tzKs0QDgJME6lZysD7HNSISzHbo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.crl
                          rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 17:20:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4421 (0x1145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116119, serialNumber=54B6DE0691A9C6D565CD18011DD22B109E02379B
        Validity
            Not Before: Nov  4 17:20:50 2025 GMT
            Not After : Nov 11 17:20:50 2025 GMT
        Subject: CN=690a35f3-d28e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:55:b2:26:29:43:20:4e:61:0a:dd:1e:aa:5b:
                    b5:4c:c9:b7:1f:b6:10:19:c1:89:4c:1e:ea:d2:4b:
                    20:a5:15:1e:c4:f1:01:d5:00:56:8a:70:75:5d:9e:
                    41:81:42:ac:a3:55:55:c7:d5:04:c7:68:be:fb:1b:
                    68:05:3b:c0:ce:bb:ea:11:8a:d9:b4:28:b2:3b:d3:
                    49:b8:01:00:26:63:0c:bb:5f:95:74:e3:f8:4e:ad:
                    a4:71:0c:56:32:85:ca:82:0d:b1:c6:12:15:78:45:
                    e6:94:e4:73:37:8c:46:a8:dd:a1:5c:32:2b:eb:cc:
                    57:8e:58:3e:79:13:ae:81:70:b8:1f:51:e0:b6:89:
                    cc:6e:8e:de:93:2f:ce:4e:d8:81:db:8b:c8:b2:29:
                    89:96:3d:04:30:02:d6:ec:0c:b4:d1:07:35:72:70:
                    40:e8:ca:72:d6:0a:45:85:c1:3a:13:ca:40:da:9d:
                    7d:a8:41:e2:c6:ae:d6:ea:c5:59:2e:ac:cc:09:da:
                    19:4d:2c:85:94:95:e1:3d:2c:f8:d9:10:4d:b0:61:
                    1d:c2:41:03:46:30:b2:00:ea:ca:6d:a6:96:52:61:
                    c4:df:53:98:0d:e1:ff:6a:d6:9e:cd:fa:5d:3c:e7:
                    6b:a5:26:e7:11:63:f0:31:1d:13:a5:3a:ec:ad:ee:
                    e4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:22:18:5C:A0:18:27:F8:33:9A:26:1A:2C:3E:98:A2:39:3D:35:B6
            X509v3 Authority Key Identifier:
                keyid:54:B6:DE:06:91:A9:C6:D5:65:CD:18:01:1D:D2:2B:10:9E:02:37:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116119/5448179E1ABC11E9BDA4FC48C4F9AE02/VLbeBpGpxtVlzRgBHdIrEJ4CN5s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:24:e0:63:6a:f6:5c:6b:93:e2:9a:69:83:08:40:3f:26:d8:
         27:b5:57:bc:c1:42:b3:24:20:d1:08:42:11:cd:1b:d6:16:bf:
         31:0b:09:dd:d5:ae:91:2a:16:ff:ed:76:01:60:02:a2:a7:3c:
         99:62:72:53:9b:ff:f2:43:36:74:24:76:18:e5:01:b8:6b:76:
         1e:69:03:ba:91:54:8c:dc:ef:36:ab:d4:34:ef:77:d1:12:61:
         87:fb:c8:1f:7f:f5:d8:fb:77:ff:ba:86:5a:e8:9d:65:42:f4:
         df:e1:66:b0:f5:2f:68:01:b7:5e:f9:b2:36:1d:c9:85:71:ed:
         01:4a:41:1c:a3:b3:af:1c:0d:de:7d:b0:ba:3b:69:6f:20:56:
         77:dc:3a:c9:0d:3a:b2:b3:82:74:a9:aa:ae:55:44:f1:7f:f1:
         e5:ef:0f:6e:44:b8:01:39:d1:c3:05:bc:ba:25:d1:7a:10:73:
         c4:5c:f5:d3:06:51:d0:a2:9f:15:3e:17:85:24:d8:25:0a:57:
         07:30:7d:46:81:88:14:98:e1:e4:bf:f6:41:b5:56:a5:e8:19:
         a5:45:cf:eb:ef:eb:ef:b7:bc:c4:c2:24:0a:7c:f5:bf:53:82:
         24:45:10:54:97:50:a2:7d:f4:da:71:7d:bb:d3:a7:ce:7f:e9:
         c3:31:6c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:33:42 2025 by rpki-client