Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft
File:                     VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft (raw, json)
Hash identifier:          XLZZE8EdMqoPUubLjq7wlzBd76OIPYrR0lhoMawH4AA=
Subject key identifier:   6F:7E:CB:7F:66:D0:F3:29:45:9E:95:1B:8A:23:7A:F6:DE:48:EA:D4
Authority key identifier: 57:07:41:62:7F:E7:CF:D5:94:EA:2F:7F:44:96:16:B7:7C:2A:C8:42
Certificate issuer:       /CN=A914597C/serialNumber=570741627FE7CFD594EA2F7F449616B77C2AC842
Certificate serial:       01AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwdBYn_nz9WU6i9_RJYWt3wqyEI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft
Manifest number:          01A8
Signing time:             Fri 13 Jun 2025 02:14:10 +0000
Manifest this update:     Fri 13 Jun 2025 02:14:10 +0000
Manifest next update:     Fri 20 Jun 2025 02:14:10 +0000
Files and hashes:         1: VwdBYn_nz9WU6i9_RJYWt3wqyEI.crl (hash: 3KzE015EDUptQ6SjTjPMsiFeQTvvcMQ/gZB79AM1sxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.crl
                          rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwdBYn_nz9WU6i9_RJYWt3wqyEI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 02:14:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914597C, serialNumber=570741627FE7CFD594EA2F7F449616B77C2AC842
        Validity
            Not Before: Jun 13 02:14:10 2025 GMT
            Not After : Jun 20 02:14:10 2025 GMT
        Subject: CN=684b8972-c141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:45:e9:83:3b:f0:db:f4:79:0f:d4:1a:cd:ea:
                    13:d0:1b:0a:f2:a1:89:b5:87:8e:14:c1:64:6c:33:
                    8f:2b:a8:9a:58:12:3d:89:1f:27:df:f7:82:5e:cb:
                    1f:62:ba:5a:2e:e9:ac:6c:31:66:0c:f9:8f:7b:24:
                    2a:b3:4a:b7:fb:64:66:42:86:1f:1a:a5:4c:4c:a6:
                    33:f3:a5:3f:fd:f5:46:6c:1b:d4:39:d8:08:a1:87:
                    9b:e7:73:85:bf:8b:9f:3b:11:de:94:5e:2d:bc:0e:
                    95:2e:a5:95:53:27:d5:5a:0e:fd:ca:e3:f9:91:24:
                    56:46:e9:fe:d2:b3:e7:46:45:8d:05:02:ca:0b:a0:
                    3c:ed:5e:9c:fa:9a:b9:22:c0:60:3f:5d:07:df:0b:
                    75:c9:92:d3:77:8b:4f:83:fd:d3:9f:a2:02:46:17:
                    9c:38:ac:dc:16:32:8f:7f:3b:99:c4:15:36:05:2f:
                    1b:ff:8d:43:3b:c8:39:35:19:c6:dd:1b:5e:c1:a2:
                    22:dc:e6:d3:96:44:ad:90:89:9d:5b:29:94:cf:fc:
                    27:1b:98:c7:07:a0:af:20:cb:66:56:6b:fb:df:c6:
                    a3:3c:65:26:08:36:01:10:6f:26:6d:55:eb:9c:e1:
                    35:17:e4:f6:8c:63:d4:74:19:e1:0e:e3:8c:ab:14:
                    39:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7E:CB:7F:66:D0:F3:29:45:9E:95:1B:8A:23:7A:F6:DE:48:EA:D4
            X509v3 Authority Key Identifier:
                keyid:57:07:41:62:7F:E7:CF:D5:94:EA:2F:7F:44:96:16:B7:7C:2A:C8:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwdBYn_nz9WU6i9_RJYWt3wqyEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914597C/63FFB560B92E11ED9CEEF21DC4F9AE02/VwdBYn_nz9WU6i9_RJYWt3wqyEI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:28:57:4f:76:b8:15:60:d8:b8:9d:a9:51:be:8b:1c:39:11:
         c5:8f:21:77:ad:7a:54:76:4d:ad:6a:44:9e:08:f2:ec:21:2d:
         62:be:13:a1:70:cd:c7:65:b0:9b:c5:a4:2c:31:b0:4d:02:bd:
         5b:df:32:ee:ba:d3:3a:91:81:8e:0f:b7:1c:a4:b4:a0:5a:ee:
         cf:03:e5:b5:4c:56:63:79:78:0e:64:8d:33:d9:e9:10:66:82:
         fe:de:8a:1a:ad:45:22:30:cc:8a:a7:0f:19:ff:74:3d:88:ce:
         74:7c:b7:ef:27:0a:2e:41:2c:97:f1:99:7a:b0:3a:57:62:04:
         ec:90:e2:62:bb:67:20:27:83:4a:f9:dd:19:c9:86:62:4d:33:
         ca:77:05:a2:57:3e:e5:dd:06:df:0d:c3:27:3a:92:ec:f2:a2:
         0d:6e:0f:a4:23:2c:48:32:b6:a9:de:de:80:28:e9:48:03:9f:
         cb:87:ca:df:47:26:b6:9e:5f:16:2e:fb:b5:01:36:d6:29:b2:
         15:c3:91:ba:90:10:ce:bf:f1:76:ff:cc:11:8d:6b:f0:ed:c7:
         4c:e2:03:3e:c0:09:39:72:b5:2f:d3:e5:6a:fc:8e:f8:54:8b:
         3f:7e:97:09:b8:49:f6:1b:9d:91:73:46:e3:b1:4e:d3:ba:3b:
         fc:92:bb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:36:47 2025 by rpki-client