Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
File:                     VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft (raw, json)
Hash identifier:          0aAR2t/eWv5RDF6wEiSbRSD89/xGwVuznl/9r2BwtNU=
Subject key identifier:   B6:27:B0:3C:C4:11:03:67:85:F5:5F:7C:8C:31:51:29:D2:BA:78:B6
Authority key identifier: 55:F2:E9:DB:28:3C:B4:59:E2:66:68:F9:22:4F:26:B3:A2:A4:46:4E
Certificate issuer:       /CN=A915B878/serialNumber=55F2E9DB283CB459E26668F9224F26B3A2A4464E
Certificate serial:       05C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
Manifest number:          05C0
Signing time:             Fri 08 Aug 2025 23:30:28 +0000
Manifest this update:     Fri 08 Aug 2025 23:30:27 +0000
Manifest next update:     Fri 15 Aug 2025 23:30:27 +0000
Files and hashes:         1: VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl (hash: Uv2yoToy0ELsfe4o2nsA4woxvhTHbZ/ukOCgm6/DXPo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl
                          rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1474 (0x5c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B878, serialNumber=55F2E9DB283CB459E26668F9224F26B3A2A4464E
        Validity
            Not Before: Aug  8 23:30:27 2025 GMT
            Not After : Aug 15 23:30:27 2025 GMT
        Subject: CN=68968893-2e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:17:a8:d2:f4:b4:9c:30:69:ee:7d:ef:7d:28:
                    69:95:9c:0a:d4:aa:4c:02:34:0d:d2:a7:20:dd:94:
                    a6:2a:71:37:9c:62:3b:c3:13:a3:f1:6c:91:f6:1f:
                    56:6c:da:45:43:04:50:99:12:64:94:73:c4:d2:92:
                    64:92:ba:af:49:1b:5e:8e:d0:af:c4:e1:61:5c:92:
                    c1:71:e0:d6:3c:d6:91:c3:a9:51:ee:49:30:5f:8d:
                    11:47:4e:c9:34:a7:1c:74:7f:f4:47:a1:0d:21:69:
                    b1:99:49:68:27:4a:98:ca:37:e3:4f:31:52:87:e9:
                    db:6a:34:32:16:7d:1d:4f:df:03:43:a9:92:80:8b:
                    b8:97:38:e6:20:54:e4:c3:f0:77:94:c3:e2:45:e0:
                    fd:c2:7b:a1:b7:80:ac:65:65:45:64:c4:05:bc:2c:
                    19:99:4e:d4:6f:48:d1:51:16:b8:7e:6d:b1:9e:81:
                    3b:c6:95:cd:f3:f2:ae:37:80:26:df:1b:b2:61:e3:
                    4b:6e:1a:88:74:45:23:b1:b9:c5:4e:59:19:5a:a7:
                    1b:c2:24:19:7f:c8:42:be:86:f1:a6:4c:b7:1b:ef:
                    45:9b:ec:fb:fd:02:4b:ce:27:b1:fb:14:55:09:17:
                    4a:f4:84:dd:3d:e6:09:c6:1a:05:3d:7d:17:9a:1e:
                    19:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:27:B0:3C:C4:11:03:67:85:F5:5F:7C:8C:31:51:29:D2:BA:78:B6
            X509v3 Authority Key Identifier:
                keyid:55:F2:E9:DB:28:3C:B4:59:E2:66:68:F9:22:4F:26:B3:A2:A4:46:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLp2yg8tFniZmj5Ik8ms6KkRk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B878/BED83666CD1111EBBC935F16C4F9AE02/VfLp2yg8tFniZmj5Ik8ms6KkRk4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:dd:da:db:7b:b5:6d:9c:bf:15:e2:eb:f6:f9:dc:01:54:a4:
         47:83:3e:f1:43:4e:9b:b1:11:80:aa:53:bd:1d:34:99:58:e0:
         46:73:18:17:1f:b4:af:0a:bd:60:86:d4:38:ca:31:91:48:73:
         cb:61:fb:5e:af:89:60:82:7d:69:b2:f0:85:e2:e3:e5:2d:93:
         52:93:47:e5:bb:85:bb:8c:82:8f:10:bd:d3:74:63:3a:b3:1a:
         fe:ae:ed:fb:0a:21:21:b8:3d:2c:f3:b1:16:65:83:cf:fe:f0:
         35:e5:b8:90:59:16:4d:d0:ae:74:7a:45:dd:2c:40:e2:9a:b0:
         aa:be:1a:db:28:bc:8d:20:5b:5f:b4:9c:8d:36:a2:8b:eb:db:
         e0:29:b5:9a:2d:cc:b5:42:fa:c6:24:cb:0c:d9:f3:93:c3:d6:
         34:3a:60:94:a1:00:f1:c2:a6:5c:d3:b0:e9:eb:74:a9:28:5c:
         f1:76:d0:19:47:85:0e:55:df:cb:ab:d2:51:7f:5c:c5:5f:38:
         2b:cd:c4:b8:b0:cd:7e:8f:c2:6e:84:7d:39:2d:98:e0:a4:c9:
         59:7b:2a:e7:f1:8c:27:0b:04:a1:c7:e8:39:ed:22:a9:a0:da:
         ce:3c:aa:88:8b:e6:b8:d7:a6:cf:04:0b:29:42:78:97:b1:fc:
         11:56:c6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:11:21 2025 by rpki-client