Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft
File:                     VaNt8khLtGWsMwGcBws5J0UkAic.mft (raw, json)
Hash identifier:          +XKlruglP/jCwPbSJhGesZcqslzKL1XptZmOM/MzwpU=
Subject key identifier:   B6:E0:8A:E7:1F:EF:41:7A:11:C7:78:BD:2D:49:AA:FE:FC:64:1A:31
Authority key identifier: 55:A3:6D:F2:48:4B:B4:65:AC:33:01:9C:07:0B:39:27:45:24:02:27
Certificate issuer:       /CN=A9134167/serialNumber=55A36DF2484BB465AC33019C070B392745240227
Certificate serial:       CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VaNt8khLtGWsMwGcBws5J0UkAic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft
Manifest number:          CC
Signing time:             Sat 09 Aug 2025 06:07:35 +0000
Manifest this update:     Sat 09 Aug 2025 06:07:35 +0000
Manifest next update:     Sat 16 Aug 2025 06:07:35 +0000
Files and hashes:         1: VaNt8khLtGWsMwGcBws5J0UkAic.crl (hash: G9fTZFyQyBhlyal/GRMF81xCrdBjPlEzIPNaxrCNB8A=)
                          2: A1A1946E3E8F11EF90A1D97EC4F9AE02.roa (hash: RjGhvtiZ99qV/uWgf+fYP1U5NceB1zdotuSd44m3FNo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.crl
                          rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VaNt8khLtGWsMwGcBws5J0UkAic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134167, serialNumber=55A36DF2484BB465AC33019C070B392745240227
        Validity
            Not Before: Aug  9 06:07:35 2025 GMT
            Not After : Aug 16 06:07:35 2025 GMT
        Subject: CN=6896e5a7-5cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f1:ca:85:0f:52:b6:14:0a:11:ca:d1:68:81:
                    9f:80:2a:c2:6b:b2:a1:a1:33:e9:92:cb:71:09:0a:
                    31:5a:1e:37:bd:e8:8d:2c:5f:d4:18:29:89:f7:31:
                    19:4c:8c:bf:0b:af:7b:93:1e:8c:06:2e:ea:40:35:
                    b5:f2:7f:2d:8c:9f:3b:e6:9d:04:5e:91:4e:87:27:
                    ac:29:44:a9:2a:14:3a:8c:96:85:da:1a:c4:c6:bd:
                    b8:10:11:74:1a:63:a1:cf:42:23:d5:b5:50:7b:a5:
                    34:d5:23:21:4f:fb:eb:31:d9:ae:5d:03:92:15:5f:
                    c4:26:00:15:0d:15:b0:54:1c:44:3e:74:bd:92:0f:
                    77:60:3a:9f:56:d4:20:92:42:70:bb:90:8f:59:78:
                    88:41:7e:36:04:aa:1e:0e:ab:42:c6:f9:a3:e8:e2:
                    47:5a:da:f2:de:97:55:d5:79:97:f8:19:3a:dc:77:
                    c9:a0:dc:4e:c5:22:1c:56:af:cb:06:e5:27:17:4a:
                    d3:0f:9a:d3:14:16:7a:04:2f:8c:69:54:65:99:19:
                    47:44:dd:18:57:47:ec:8a:ec:bc:1b:32:7c:ec:20:
                    a1:bb:e6:29:14:ff:fc:18:7c:7b:b6:e4:df:ac:70:
                    73:8c:02:b9:12:00:5c:77:16:fd:4c:7d:d1:f0:55:
                    18:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E0:8A:E7:1F:EF:41:7A:11:C7:78:BD:2D:49:AA:FE:FC:64:1A:31
            X509v3 Authority Key Identifier:
                keyid:55:A3:6D:F2:48:4B:B4:65:AC:33:01:9C:07:0B:39:27:45:24:02:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VaNt8khLtGWsMwGcBws5J0UkAic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:2f:24:93:93:98:10:db:46:33:51:98:d1:c7:6e:15:4a:3d:
         7e:a2:0a:20:39:13:73:2d:7d:87:48:d5:1d:2b:b0:f4:53:ad:
         92:54:79:29:8e:96:68:4b:33:8f:dc:20:e4:43:a6:43:3d:a1:
         0c:a8:a7:52:54:ec:e4:d2:e9:c0:3c:df:5e:88:4b:69:5d:84:
         5a:41:1e:47:cb:92:5a:54:0e:89:c9:c6:ef:d5:a9:de:35:97:
         10:1c:a7:d8:fd:a1:d6:d4:2d:52:aa:2d:23:f1:2f:09:bf:9f:
         6d:44:8d:d5:67:9c:c8:49:84:26:11:0b:dc:69:a5:e8:35:36:
         5a:e8:43:5a:a7:81:25:ac:29:d1:eb:b1:17:10:a1:6e:8e:1d:
         df:a7:9b:71:08:d0:f9:18:5f:f6:f7:ad:0d:ce:35:5a:22:3a:
         f3:44:cf:d2:5e:a5:1a:0b:a0:c7:f6:73:c0:b5:3f:7a:e9:57:
         bc:5c:0d:db:6b:5b:d1:44:8c:4d:cb:38:92:29:3b:7e:8b:63:
         64:82:db:6c:d3:0c:ad:2d:5e:2a:33:75:d9:74:27:2d:72:74:
         0f:d6:a0:3b:ff:c2:06:2c:be:43:10:1c:8f:31:df:69:ea:d4:
         26:da:6c:c5:d0:8f:82:07:8f:71:a4:ba:f0:0a:7d:d5:8e:77:
         ff:6d:ed:af
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQxNjcxMTAvBgNVBAUTKDU1QTM2REYyNDg0QkI0NjVBQzMzMDE5QzA3MEIzOTI3
NDUyNDAyMjcwHhcNMjUwODA5MDYwNzM1WhcNMjUwODE2MDYwNzM1WjAYMRYwFAYD
VQQDEw02ODk2ZTVhNy01Y2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx/HKhQ9SthQKEcrRaIGfgCrCa7KhoTPpkstxCQoxWh43veiNLF/UGCmJ9zEZ
TIy/C697kx6MBi7qQDW18n8tjJ875p0EXpFOhyesKUSpKhQ6jJaF2hrExr24EBF0
GmOhz0Ij1bVQe6U01SMhT/vrMdmuXQOSFV/EJgAVDRWwVBxEPnS9kg93YDqfVtQg
kkJwu5CPWXiIQX42BKoeDqtCxvmj6OJHWtry3pdV1XmX+Bk63HfJoNxOxSIcVq/L
BuUnF0rTD5rTFBZ6BC+MaVRlmRlHRN0YV0fsiuy8GzJ87CChu+YpFP/8GHx7tuTf
rHBzjAK5EgBcdxb9TH3R8FUYcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLbgiucf
70F6Ecd4vS1Jqv78ZBoxMB8GA1UdIwQYMBaAFFWjbfJIS7RlrDMBnAcLOSdFJAIn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE2Ny9CNDIyNjdGNDNF
OEUxMUVGOTdBODU1N0RDNEY5QUUwMi9WYU50OGtoTHRHV3NNd0djQndzNUowVWtB
aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZhTnQ4a2hMdEdXc013R2NCd3M1SjBVa0FpYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDE2Ny9CNDIyNjdGNDNFOEUxMUVGOTdBODU1N0RDNEY5QUUwMi9WYU50OGtoTHRH
V3NNd0djQndzNUowVWtBaWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCBLySTk5gQ20YzUZjRx24VSj1+ogogORNzLX2HSNUdK7D0U62SVHkp
jpZoSzOP3CDkQ6ZDPaEMqKdSVOzk0unAPN9eiEtpXYRaQR5Hy5JaVA6Jycbv1ane
NZcQHKfY/aHW1C1Sqi0j8S8Jv59tRI3VZ5zISYQmEQvcaaXoNTZa6ENap4ElrCnR
67EXEKFujh3fp5txCND5GF/2960NzjVaIjrzRM/SXqUaC6DH9nPAtT966Ve8XA3b
a1vRRIxNyziSKTt+i2Nkgtts0wytLV4qM3XZdCctcnQP1qA7/8IGLL5DEByPMd9p
6tQm2mzF0I+CB49xpLrwCn3Vjnf/be2v
-----END CERTIFICATE-----
Generated at Mon Aug 11 01:50:24 2025 by rpki-client