Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft
File:                     VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft (raw, json)
Hash identifier:          0gnp/thGeYkQfe1NV4kUBzsJeMbfaKqBoEShEZnGkK0=
Subject key identifier:   22:F2:45:2D:04:6D:8E:25:15:EB:48:7D:B2:69:7E:C5:58:1C:EB:2A
Authority key identifier: 55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9
Certificate issuer:       /CN=A9154534/serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9
Certificate serial:       0B6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft
Manifest number:          0B62
Signing time:             Wed 06 Aug 2025 19:20:47 +0000
Manifest this update:     Wed 06 Aug 2025 19:20:46 +0000
Manifest next update:     Wed 13 Aug 2025 19:20:46 +0000
Files and hashes:         1: VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl (hash: hwbOmt268DesfOlWDhbqcL3xrYgPvsloAjXw+kABL70=)
                          2: 8789C45E384311EAAA40EE51C4F9AE02.roa (hash: MAWDNXgpu9PgJn7Gnnkwa2ICesKD1B+IPcDJf1k8UoI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl
                          rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 19:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2922 (0xb6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154534, serialNumber=55C46855CC91AC54AC075C297B7531FA88A735D9
        Validity
            Not Before: Aug  6 19:20:46 2025 GMT
            Not After : Aug 13 19:20:46 2025 GMT
        Subject: CN=6893ab0f-6c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:67:a1:b2:55:97:a6:6e:ae:96:90:45:84:79:
                    e4:d9:d0:75:12:8f:9c:91:09:fc:f0:37:3a:92:14:
                    8b:54:90:b7:fd:bc:f7:fe:3b:26:6d:ff:6c:1a:a0:
                    11:b7:e1:47:f4:0e:5a:eb:48:0d:44:78:0a:d0:98:
                    ed:4d:9b:99:68:66:3e:8c:53:68:d2:ab:ba:a4:d6:
                    70:7e:09:94:aa:b0:3f:18:2b:19:49:07:c5:1d:66:
                    a3:d0:79:9c:32:d6:ff:8b:b9:15:e8:c3:7a:11:d7:
                    01:82:ae:72:cc:b4:cc:78:e1:25:68:14:a2:07:a3:
                    a4:95:c3:37:ba:0b:5b:ec:15:ae:e5:e1:c6:fc:6d:
                    d9:72:74:be:52:44:0f:f4:de:3f:43:8a:7d:c1:d0:
                    ac:94:a5:4d:6d:2a:5f:e4:7b:d5:37:6f:b1:57:a1:
                    21:61:1e:32:f4:10:dc:93:72:bd:e5:78:a5:fa:7b:
                    1f:5e:61:fd:7d:b3:0d:cd:d7:20:ba:a1:0e:0b:bc:
                    3e:40:7a:a4:09:5c:44:79:de:22:b6:1c:b2:9f:a7:
                    d1:99:88:54:4a:9f:00:f3:74:14:dd:a0:75:5e:9a:
                    f7:ba:14:44:b7:e3:4d:cb:c9:e6:88:8d:f5:80:ee:
                    65:37:15:28:a1:a3:a2:d4:e2:d7:b3:33:e7:f8:f3:
                    75:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F2:45:2D:04:6D:8E:25:15:EB:48:7D:B2:69:7E:C5:58:1C:EB:2A
            X509v3 Authority Key Identifier:
                keyid:55:C4:68:55:CC:91:AC:54:AC:07:5C:29:7B:75:31:FA:88:A7:35:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VcRoVcyRrFSsB1wpe3Ux-oinNdk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154534/BD26909E384111EA9FED5D4FC4F9AE02/VcRoVcyRrFSsB1wpe3Ux-oinNdk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:ba:f6:09:f2:b4:5f:d0:37:00:b8:ba:ed:d1:36:76:6f:9a:
         96:8e:9d:f8:5b:27:f1:d4:d3:2a:42:3b:64:a5:76:15:49:49:
         be:5d:a2:e8:97:28:7a:ed:26:1f:fb:0e:31:a1:f3:14:6b:81:
         06:f7:da:3e:43:17:fd:11:ee:b0:02:9f:9b:c3:5b:8c:9b:f7:
         19:d5:bc:71:e0:e6:68:3f:e4:2c:b1:06:72:12:e2:10:1b:98:
         d7:eb:1f:42:53:b9:0a:08:2c:0b:b7:84:fc:28:b1:86:6a:e7:
         2c:af:04:01:64:0c:13:8a:8a:22:b8:f8:7f:61:e3:55:af:e9:
         b2:19:24:45:23:b6:ac:0e:e3:7c:97:08:ba:52:b9:36:d0:1b:
         49:ca:5b:b9:bb:4d:fb:4a:ae:d9:80:f5:d5:2d:80:da:ba:9b:
         21:5f:f0:1a:ae:c5:76:80:7d:59:c0:67:57:80:5a:26:79:72:
         5c:a5:41:8c:fa:cf:68:6a:f7:74:93:a6:dd:60:c4:49:bb:71:
         bb:e7:88:ed:2d:3b:f6:55:95:95:01:03:4e:6c:6d:11:02:e2:
         71:ca:67:5b:e9:c1:a6:2d:04:99:8b:25:44:8e:09:59:0d:19:
         12:b7:18:49:d7:04:33:58:4a:72:24:58:8c:79:e2:73:d6:b9:
         13:e3:ca:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:28:17 2025 by rpki-client