Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B37/5AEC0C30ABBC11EFB3D9CE6EC4F9AE02/vc-jy52E0VT-MqVOm0uJXlyNWR4.mft
File:                     vc-jy52E0VT-MqVOm0uJXlyNWR4.mft (raw, json)
Hash identifier:          lW6zj5lZZoCJPEK30uAz8706BtQ7hwbhp1Q2qsyjvOM=
Subject key identifier:   FF:47:37:A3:47:94:DE:3E:D6:9E:72:44:3C:4E:76:B5:49:91:F6:4C
Authority key identifier: BD:CF:A3:CB:9D:84:D1:54:FE:32:A5:4E:9B:4B:89:5E:5C:8D:59:1E
Certificate issuer:       /CN=A9161B37/serialNumber=BDCFA3CB9D84D154FE32A54E9B4B895E5C8D591E
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vc-jy52E0VT-MqVOm0uJXlyNWR4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161B37/5AEC0C30ABBC11EFB3D9CE6EC4F9AE02/vc-jy52E0VT-MqVOm0uJXlyNWR4.mft
Manifest number:          85
Signing time:             Sat 09 Aug 2025 07:05:59 +0000
Manifest this update:     Sat 09 Aug 2025 07:05:58 +0000
Manifest next update:     Sat 16 Aug 2025 07:05:58 +0000
Files and hashes:         1: vc-jy52E0VT-MqVOm0uJXlyNWR4.crl (hash: YfmLJcxF89hOUP4zkcu8oBAU6/s1aK7kDIaIC51c6Fk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161B37/5AEC0C30ABBC11EFB3D9CE6EC4F9AE02/vc-jy52E0VT-MqVOm0uJXlyNWR4.crl
                          rsync://rpki.apnic.net/member_repository/A9161B37/5AEC0C30ABBC11EFB3D9CE6EC4F9AE02/vc-jy52E0VT-MqVOm0uJXlyNWR4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vc-jy52E0VT-MqVOm0uJXlyNWR4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161B37, serialNumber=BDCFA3CB9D84D154FE32A54E9B4B895E5C8D591E
        Validity
            Not Before: Aug  9 07:05:58 2025 GMT
            Not After : Aug 16 07:05:58 2025 GMT
        Subject: CN=6896f357-4b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8b:b1:f7:12:ee:bc:f1:be:ea:b5:19:2a:c5:
                    50:b1:e9:fe:aa:35:01:a7:68:d0:7c:12:65:db:4d:
                    d4:9f:91:17:27:77:76:a7:21:10:38:e1:83:eb:34:
                    75:63:f3:e0:22:28:a5:99:55:7d:67:c6:86:b4:c0:
                    d2:e5:d6:43:58:77:63:7e:cc:3d:84:96:bf:f3:a1:
                    50:47:09:71:7b:6a:ad:1e:79:3c:0b:84:03:fa:da:
                    4c:5e:dd:91:ef:1e:87:bf:4a:dc:fe:52:44:4b:28:
                    0b:8a:10:bc:2e:e3:ae:3d:20:4b:18:60:0e:0d:6f:
                    69:9d:8e:72:7f:25:69:1f:ab:7c:6b:be:f4:fc:3a:
                    4d:bb:e5:50:a4:d8:84:cb:31:62:3c:41:50:f7:7f:
                    ce:9c:3b:0d:b0:d3:d6:27:64:11:5a:94:e3:ce:92:
                    69:4e:95:17:b7:53:b3:68:61:d0:7c:58:b5:bc:87:
                    64:91:b4:f7:df:f8:76:44:da:43:e5:7d:97:07:20:
                    d9:d6:2d:fa:6a:4e:02:ec:18:b8:f7:42:54:a2:4b:
                    27:31:5e:b6:c8:5a:74:bb:49:b2:dc:de:b4:94:bd:
                    e2:6d:43:93:b9:72:8b:22:6a:94:5c:fb:f2:f2:24:
                    d3:3d:6f:0f:00:13:18:0d:74:41:66:f6:83:04:87:
                    2d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:47:37:A3:47:94:DE:3E:D6:9E:72:44:3C:4E:76:B5:49:91:F6:4C
            X509v3 Authority Key Identifier:
                keyid:BD:CF:A3:CB:9D:84:D1:54:FE:32:A5:4E:9B:4B:89:5E:5C:8D:59:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161B37/5AEC0C30ABBC11EFB3D9CE6EC4F9AE02/vc-jy52E0VT-MqVOm0uJXlyNWR4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vc-jy52E0VT-MqVOm0uJXlyNWR4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B37/5AEC0C30ABBC11EFB3D9CE6EC4F9AE02/vc-jy52E0VT-MqVOm0uJXlyNWR4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:69:a6:fd:69:c4:95:e4:fe:19:e9:b4:ee:29:13:e0:b7:68:
         1a:1d:75:86:9f:b5:86:5d:f9:1b:ef:49:78:da:29:18:ec:fe:
         f6:cb:a3:ab:2f:9f:73:cc:81:26:39:92:03:44:7c:f0:92:0f:
         2f:83:c1:50:cd:c5:b1:b4:ce:e0:5c:f2:4b:17:6f:7e:02:6f:
         7d:73:e2:2b:ed:e4:54:df:67:d1:74:c5:c0:3a:21:69:e4:5b:
         0f:55:10:c2:70:14:c9:0c:7d:49:bc:df:e2:47:a3:84:6c:e9:
         b4:f0:3e:4b:ab:fb:70:5e:20:62:e9:33:39:cd:46:fa:a5:4f:
         57:38:af:19:4d:75:eb:2a:9c:ae:0e:f4:bf:d3:41:ab:35:20:
         d4:4b:6d:18:dc:8c:53:df:08:85:7f:e4:1c:17:bc:fc:48:b5:
         f3:dd:18:b2:a1:e7:6b:ad:a8:f6:d6:91:f4:18:c6:75:0b:6e:
         56:8d:08:b0:b4:b3:05:13:9e:07:63:0c:e0:5f:a6:50:f6:32:
         db:5f:8a:21:80:e6:0b:7b:c3:66:a8:cc:8f:85:d9:6f:af:19:
         d0:26:36:98:cb:14:d7:45:ce:97:58:57:d2:30:e1:59:5a:85:
         51:b3:fb:3c:b0:bd:14:05:75:bf:aa:01:44:f9:42:8c:2e:c8:
         97:e8:27:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:06:01 2025 by rpki-client