Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
File:                     VVzqN0EM0oazHxoArfYlPUzgUjI.mft (raw, json)
Hash identifier:          cyfrFJVLPK/aFLUwri5kJ33JmRTWHgMfxTS1JFVhxx8=
Subject key identifier:   81:0F:6D:0C:7C:0C:2B:6B:1E:02:02:F9:09:AE:E5:3E:43:BD:A5:F1
Authority key identifier: 55:5C:EA:37:41:0C:D2:86:B3:1F:1A:00:AD:F6:25:3D:4C:E0:52:32
Certificate issuer:       /CN=A9137522/serialNumber=555CEA37410CD286B31F1A00ADF6253D4CE05232
Certificate serial:       34B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
Manifest number:          34AB
Signing time:             Fri 08 Aug 2025 15:04:56 +0000
Manifest this update:     Fri 08 Aug 2025 15:04:56 +0000
Manifest next update:     Fri 15 Aug 2025 15:04:56 +0000
Files and hashes:         1: VVzqN0EM0oazHxoArfYlPUzgUjI.crl (hash: f8te4n69ymqIsJUt4x9g6zUwpdrggZJAq+EXezZXRvE=)
                          2: FF9802D6FE3911EBBCE1485DC4F9AE02.roa (hash: 568OZFsZ65IljrgEB7BfKeTiUKIZul9sanmI2zkZhwE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.crl
                          rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13489 (0x34b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137522, serialNumber=555CEA37410CD286B31F1A00ADF6253D4CE05232
        Validity
            Not Before: Aug  8 15:04:56 2025 GMT
            Not After : Aug 15 15:04:56 2025 GMT
        Subject: CN=68961218-08b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ef:7b:2d:39:c1:96:43:8c:ce:3d:c1:b4:af:
                    c4:90:64:f6:99:28:21:d4:76:26:14:61:57:71:a7:
                    39:0c:36:b4:67:b2:df:a8:48:d5:27:81:41:db:87:
                    f7:04:bf:87:91:7d:5b:b7:9a:fe:a2:4f:cd:3c:72:
                    46:4b:90:34:40:ba:64:c9:3a:43:55:74:81:e2:bd:
                    db:7e:f7:73:24:a3:1b:97:99:ef:ba:db:7c:e0:b0:
                    d8:51:ed:87:49:c6:3d:8e:22:4c:72:95:97:ca:78:
                    c7:2c:d7:44:4f:b0:a8:a4:53:80:11:e3:3c:ba:a4:
                    e0:a0:df:d0:8c:33:e5:01:7f:88:d7:bb:31:9a:a7:
                    42:a4:5e:c0:9e:d7:d4:f8:6a:fd:8d:0d:7a:7f:b8:
                    82:45:0f:b3:7d:54:29:6c:1a:ab:b5:2b:f5:bb:62:
                    ab:a3:01:b4:99:af:e6:f8:92:0f:8d:60:68:07:14:
                    b6:f1:ab:99:1c:6a:6c:9c:8a:77:49:ca:38:c6:c2:
                    fd:06:25:05:26:cd:52:91:24:b2:b6:b4:11:35:4f:
                    c1:59:a2:d2:43:aa:40:78:7a:ac:ab:fe:1b:72:f0:
                    f8:9b:70:1b:8a:bb:5d:37:b3:77:5a:b9:1c:af:a9:
                    51:f6:85:0b:f1:19:a1:15:ef:b9:07:fd:c6:7d:b5:
                    bd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0F:6D:0C:7C:0C:2B:6B:1E:02:02:F9:09:AE:E5:3E:43:BD:A5:F1
            X509v3 Authority Key Identifier:
                keyid:55:5C:EA:37:41:0C:D2:86:B3:1F:1A:00:AD:F6:25:3D:4C:E0:52:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d2:e3:9e:45:25:7a:d7:b9:be:58:5a:90:54:f8:5c:78:20:
         53:32:b7:b8:94:1e:f2:d2:1b:38:ec:6c:03:c3:87:3b:0f:27:
         b4:82:63:ce:04:56:17:e8:bf:36:88:51:eb:d1:4f:df:0f:0b:
         b3:75:86:f7:0a:64:e7:e8:38:b7:59:83:9e:23:1d:c2:b1:f7:
         d1:ca:22:cb:d1:54:9f:5e:ec:c7:5f:b3:12:b6:79:59:29:d0:
         a3:ef:d5:8f:4f:61:92:8b:ce:1e:a3:c3:39:41:b9:e1:77:91:
         8c:0b:89:59:86:46:b8:55:01:73:0e:14:f5:cb:f1:4a:ac:53:
         9a:16:5a:70:8c:29:f1:38:82:17:d1:55:45:96:34:99:e4:f6:
         05:59:05:02:80:e1:2d:f8:e7:47:e3:34:76:68:c3:c9:35:e2:
         be:f2:c4:38:27:e2:4b:85:c8:4e:2e:29:cd:7b:8d:c2:4e:09:
         50:de:b4:db:5c:7d:b6:38:cd:24:03:95:44:44:e3:6d:5d:ef:
         f3:12:65:7a:ea:f9:6d:8d:7f:d1:53:4a:2d:07:0c:31:d9:9b:
         50:df:ed:9c:70:b1:1b:a5:7a:c8:7b:45:66:05:4f:6c:96:c4:
         e3:55:79:67:28:ef:b3:c8:01:16:22:d6:b6:84:f7:da:fe:72:
         b4:c1:ca:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:52:07 2025 by rpki-client