Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
File:                     VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft (raw, json)
Hash identifier:          1/3YyIdMsuU+/cbrzuClSeexNdsXsFT4v+AyOYAaYxA=
Subject key identifier:   F0:BE:88:2F:AC:6B:3F:4B:8D:F1:4D:2B:37:83:9B:FB:0B:18:0C:35
Authority key identifier: 56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC
Certificate issuer:       /CN=A91203DF/serialNumber=56790B8C9507D9D4F3900950D329E275747767AC
Certificate serial:       0DB7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
Manifest number:          0DA6
Signing time:             Fri 08 Aug 2025 18:09:08 +0000
Manifest this update:     Fri 08 Aug 2025 18:09:07 +0000
Manifest next update:     Fri 15 Aug 2025 18:09:07 +0000
Files and hashes:         1: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl (hash: Fj9CCBZ04XmiOyX/cyd4hCAKk6B3uRNNHf8suS98s5o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl
                          rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3511 (0xdb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91203DF, serialNumber=56790B8C9507D9D4F3900950D329E275747767AC
        Validity
            Not Before: Aug  8 18:09:07 2025 GMT
            Not After : Aug 15 18:09:07 2025 GMT
        Subject: CN=68963d44-8385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bf:11:39:44:9d:c5:f3:33:15:e0:87:fb:0d:
                    b0:58:49:6a:2c:71:e0:98:4f:77:73:6f:32:0d:ec:
                    d3:c7:1e:ba:35:7e:0c:ac:68:70:bd:ac:b8:94:cc:
                    1c:3e:17:40:06:b1:dc:d5:f1:fc:b6:2e:48:27:00:
                    fb:17:ca:41:f4:51:ae:09:a8:cf:1d:a1:57:07:70:
                    b6:f9:51:fa:42:5a:df:4b:34:57:c9:79:c7:30:93:
                    3b:88:f6:04:b4:07:48:80:46:9f:41:49:98:52:e9:
                    82:3a:dc:c9:1b:10:09:c5:68:ba:af:30:df:51:3b:
                    1c:ad:e1:c0:43:db:8c:9a:aa:2c:eb:fd:5f:ee:cd:
                    a5:f5:6b:95:3b:b2:af:89:9f:21:db:c1:15:b5:45:
                    46:44:c9:fe:2e:5d:20:84:73:ad:6e:8e:87:59:45:
                    b6:e8:96:04:42:a6:0e:86:7b:e8:91:36:c7:02:d4:
                    6d:ba:cd:74:e7:ed:b6:65:e8:9b:95:c6:05:2c:cd:
                    a0:64:ca:d2:22:ed:75:df:e0:91:2c:bb:ae:12:a7:
                    25:f3:f4:32:62:86:6d:ed:d2:99:dc:38:7c:8e:ad:
                    5e:6b:63:bf:ed:03:9f:c4:d9:81:e7:98:1a:a1:77:
                    4f:d7:db:f8:75:8b:15:e9:64:05:05:e0:13:dd:32:
                    dc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BE:88:2F:AC:6B:3F:4B:8D:F1:4D:2B:37:83:9B:FB:0B:18:0C:35
            X509v3 Authority Key Identifier:
                keyid:56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:cc:ea:3e:24:c6:4c:54:0b:3a:23:f5:90:44:d6:86:dd:e1:
         16:77:d9:9d:32:84:c6:9e:b9:6b:25:42:90:07:e6:58:bf:3d:
         b7:3d:2e:70:c3:55:ce:2a:3d:bb:6f:97:dd:47:10:d5:42:f9:
         f0:6f:e7:d6:59:80:a8:c6:0c:72:11:75:42:85:18:4b:ba:4c:
         b8:68:9a:2d:da:98:ff:37:ee:d4:67:66:8c:02:ac:16:ed:02:
         49:06:9a:2f:ea:33:76:01:92:8c:a0:55:ed:45:80:c5:49:b8:
         7f:81:04:31:61:78:87:ce:a9:44:05:83:07:6a:1d:3f:08:f9:
         a6:65:84:e8:aa:6a:1c:7a:41:2d:0e:15:a7:42:c8:f2:cb:08:
         5a:e4:2a:b7:58:c4:2a:d3:8b:41:d3:ad:b9:93:be:d7:1c:04:
         5f:9c:5e:1c:7d:47:24:1c:61:e9:5f:01:8b:e3:2b:c2:cd:5d:
         aa:5b:1b:7c:28:27:29:e9:8d:3c:c2:42:2d:be:75:4b:de:f3:
         c3:b6:8e:09:8e:ab:81:81:cd:ef:99:7e:9a:7e:f7:d1:cc:cd:
         8c:0b:ad:00:9d:96:e8:d2:3b:fb:34:74:3b:52:16:38:e9:71:
         73:dc:02:eb:17:f4:cb:d2:e0:6f:a8:f2:69:f3:b3:69:54:5b:
         03:83:5c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:21:50 2025 by rpki-client