Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
File:                     Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft (raw, json)
Hash identifier:          lcvzCa9v5O5+Km3PzP7cYquTGGS6r36xS8dyFsG9GyI=
Subject key identifier:   79:7B:CC:FD:E3:CA:9E:42:D6:96:7B:2F:B2:FF:09:C5:0A:9C:11:2D
Authority key identifier: 56:0B:BD:60:06:CE:CD:73:00:D1:52:4C:8A:27:43:9A:BB:F1:59:7E
Certificate issuer:       /CN=A9171172/serialNumber=560BBD6006CECD7300D1524C8A27439ABBF1597E
Certificate serial:       07B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
Manifest number:          07B9
Signing time:             Tue 04 Nov 2025 21:24:08 +0000
Manifest this update:     Tue 04 Nov 2025 21:24:07 +0000
Manifest next update:     Tue 11 Nov 2025 21:24:07 +0000
Files and hashes:         1: Vgu9YAbOzXMA0VJMiidDmrvxWX4.crl (hash: EmF/N4dH4JYbO/vxKe16voRk9umv1ZPCdcw/RQe4W+Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.crl
                          rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 21:24:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1977 (0x7b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171172, serialNumber=560BBD6006CECD7300D1524C8A27439ABBF1597E
        Validity
            Not Before: Nov  4 21:24:07 2025 GMT
            Not After : Nov 11 21:24:07 2025 GMT
        Subject: CN=690a6ef7-01da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:46:41:86:06:e8:45:b4:b2:28:69:58:a0:e6:
                    c6:0f:9f:87:2f:e1:1b:85:07:ce:51:bf:e9:49:be:
                    f2:5d:aa:71:70:8d:7a:e9:f9:7c:df:be:cb:4b:5e:
                    78:cf:cf:f6:87:a0:2d:45:9f:98:7f:60:35:7d:ea:
                    05:ae:70:78:2b:e6:9d:fe:a2:9e:7d:1d:31:16:c2:
                    91:42:63:29:c3:20:06:02:48:fe:ea:22:74:1e:21:
                    b9:46:a1:42:52:14:be:e4:87:ce:f3:c8:5a:c5:3f:
                    66:53:40:b7:b1:57:fa:50:65:97:74:89:41:d9:db:
                    27:a2:92:f5:cf:f8:4f:70:8f:d2:2d:d8:21:67:6e:
                    b0:9c:cb:a4:96:41:ae:76:b5:df:69:6b:fc:59:51:
                    fa:bf:31:25:85:bb:ef:41:ce:7e:6b:a1:76:19:8e:
                    1d:45:38:a2:66:4e:a3:b6:71:12:d0:e7:8b:50:33:
                    53:ad:01:35:e3:e4:ef:f2:23:4c:18:75:2d:4a:18:
                    88:02:85:a9:6d:9e:a8:40:1e:b7:23:da:85:91:4b:
                    6d:c3:28:ca:21:69:47:56:e5:ad:ad:42:a4:e8:44:
                    a8:1d:0b:0a:6a:0b:38:d2:65:44:d7:58:91:cd:76:
                    a6:7b:63:c5:a4:ae:72:71:7e:9b:56:da:1b:7e:a4:
                    0c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:7B:CC:FD:E3:CA:9E:42:D6:96:7B:2F:B2:FF:09:C5:0A:9C:11:2D
            X509v3 Authority Key Identifier:
                keyid:56:0B:BD:60:06:CE:CD:73:00:D1:52:4C:8A:27:43:9A:BB:F1:59:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ec:50:47:9c:72:84:d2:39:07:50:49:70:83:52:a9:c0:f4:
         7a:e2:36:de:95:5d:a6:fd:a3:8d:a2:36:89:bb:64:e9:ba:1d:
         27:bd:45:ee:f3:3e:15:40:3d:00:f3:eb:dd:96:c1:da:28:ab:
         b1:1e:79:1b:a4:3c:9b:ae:6d:30:54:3d:bd:e0:92:95:3b:2b:
         29:85:95:77:8f:bc:ec:15:64:ec:b7:22:79:68:af:e9:72:1e:
         b8:e8:9f:6e:f7:71:03:fc:5a:b5:c1:0b:31:54:71:fa:10:93:
         60:a2:69:de:a4:ae:fe:e4:75:e9:35:84:6d:89:4b:de:56:3d:
         e3:be:82:be:58:51:46:6a:79:29:c1:b0:a2:b1:3a:fa:bd:42:
         6d:98:df:62:0c:6c:ff:f0:69:40:c4:b3:f8:12:a1:5b:4d:b4:
         6d:eb:b0:af:e3:46:98:8e:dd:56:ea:59:cc:2a:d3:06:75:96:
         39:96:e0:b8:b0:be:54:f7:41:1e:04:9e:fd:75:32:1d:af:84:
         53:08:09:81:31:a0:0e:01:8b:bf:6c:1c:95:31:38:d5:5d:8a:
         94:40:6d:ff:1f:5b:44:e5:d2:93:b9:ab:6d:65:fd:17:75:f1:
         bb:24:ca:f5:81:95:47:d6:77:59:8f:50:2f:ec:3b:5d:ff:a2:
         7d:55:31:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:44:12 2025 by rpki-client