Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
File:                     VRTBgTfeq40U8RHJD39rfjDQH2Q.mft (raw, json)
Hash identifier:          PMoLomfhkVCBfwEJdFqCV8F5q5CdwfnPG+pwR0Ta0j8=
Subject key identifier:   8B:C1:89:E0:BE:6E:86:02:08:9E:7C:37:11:FC:74:1A:C7:59:B6:87
Authority key identifier: 55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64
Certificate issuer:       /CN=A916D1DA/serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64
Certificate serial:       34A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
Manifest number:          34A9
Signing time:             Fri 08 Aug 2025 15:03:39 +0000
Manifest this update:     Fri 08 Aug 2025 15:03:39 +0000
Manifest next update:     Fri 15 Aug 2025 15:03:39 +0000
Files and hashes:         1: VRTBgTfeq40U8RHJD39rfjDQH2Q.crl (hash: l6hok53qKIhdtmIfGfmuCBqgEImu9/sUdE7FVX9yZCw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl
                          rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13481 (0x34a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D1DA, serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64
        Validity
            Not Before: Aug  8 15:03:39 2025 GMT
            Not After : Aug 15 15:03:39 2025 GMT
        Subject: CN=689611cb-44a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1e:47:76:38:7b:4b:1d:31:be:0b:81:14:c6:
                    8d:ef:14:14:ea:40:75:09:92:23:ce:3f:03:27:d6:
                    d4:1f:3d:b9:64:a3:ec:21:d2:35:b1:f4:2e:b0:5a:
                    b0:e3:ac:86:7a:81:97:79:69:cd:2f:86:58:7a:14:
                    59:ac:87:20:32:e9:0b:65:b9:63:d4:7d:bb:f6:d2:
                    0a:25:e6:82:35:29:ef:14:aa:64:01:1b:32:8c:01:
                    ca:2d:f1:a6:75:e3:34:89:eb:be:bc:bd:36:00:44:
                    59:c0:8a:fc:4a:b7:4c:dd:1f:7a:26:bc:bc:67:ca:
                    f3:93:6f:1e:c2:73:89:5e:91:da:94:5d:b9:74:34:
                    48:3c:18:2d:5f:8c:38:ef:95:a8:90:93:12:75:64:
                    0a:45:df:7f:16:74:ba:84:64:ff:ac:fb:e8:ee:0e:
                    fb:b7:1b:ec:09:89:1e:93:03:d5:e0:02:aa:59:dd:
                    92:d9:6f:51:42:9f:64:26:9e:41:3d:94:25:76:1e:
                    c7:e9:15:a9:81:d5:9f:4c:75:f6:13:19:c0:3c:cc:
                    21:77:ae:2f:0c:54:f7:8e:ac:55:fa:ca:25:e5:82:
                    28:fe:e4:c1:aa:cf:86:55:eb:a6:32:12:5a:4f:1a:
                    70:da:70:e5:a9:97:29:2f:86:04:7f:5b:5c:93:26:
                    6d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C1:89:E0:BE:6E:86:02:08:9E:7C:37:11:FC:74:1A:C7:59:B6:87
            X509v3 Authority Key Identifier:
                keyid:55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b6:78:f8:a8:6e:49:aa:4a:bd:23:85:f5:39:d3:11:1e:37:
         7b:c3:cb:96:44:fa:18:e6:0e:aa:68:12:cd:db:d4:b1:62:cc:
         27:36:1e:e7:ab:00:d6:fa:db:7a:ef:72:2e:a7:62:55:cc:c7:
         56:0d:f8:79:b3:9d:42:93:c7:59:9d:77:a7:f3:75:26:f4:50:
         76:06:e6:7f:ef:01:0f:01:af:cf:50:00:9d:df:48:1c:b6:eb:
         34:2a:59:87:f5:16:48:57:50:fd:fc:7c:80:97:9f:09:64:b2:
         d5:ad:e9:84:47:84:5d:76:9d:78:e5:c7:72:75:25:ac:b3:3d:
         5a:0a:73:ce:6a:57:de:88:6e:a1:ca:88:d2:a7:b2:ec:b3:ba:
         cb:2e:52:00:64:9e:bf:a7:a4:1c:e6:a2:f1:41:67:fd:25:78:
         a2:72:64:82:e8:80:6e:4d:53:24:9b:aa:df:12:89:7c:22:a5:
         85:ff:47:df:1b:32:64:c4:12:c0:58:1c:40:40:c2:8f:a5:0d:
         c5:4b:b2:2e:18:ec:52:82:bf:28:3c:c5:f9:40:5b:e2:79:03:
         f8:67:30:25:e2:54:1f:e8:ac:f1:28:89:e5:6c:10:8e:64:fa:
         8a:f0:23:a4:fd:15:34:d7:95:d6:1d:b5:79:cc:15:3d:5a:40:
         69:31:43:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:53:10 2025 by rpki-client