Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
File:                     vJfyb7J4ln3TyjnFndCMaiwjBvk.mft (raw, json)
Hash identifier:          Q/qIxglQUgUHiWDZr3zGNsLbBIYfXSmrRPvYLj/opjg=
Subject key identifier:   96:25:5B:CE:E4:B8:7F:0C:FA:7A:1D:43:8B:D2:8F:81:E5:CF:BD:80
Authority key identifier: BC:97:F2:6F:B2:78:96:7D:D3:CA:39:C5:9D:D0:8C:6A:2C:23:06:F9
Certificate issuer:       /CN=A9171845/serialNumber=BC97F26FB278967DD3CA39C59DD08C6A2C2306F9
Certificate serial:       0504
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
Manifest number:          04FC
Signing time:             Sat 09 Aug 2025 00:09:10 +0000
Manifest this update:     Sat 09 Aug 2025 00:09:10 +0000
Manifest next update:     Sat 16 Aug 2025 00:09:10 +0000
Files and hashes:         1: vJfyb7J4ln3TyjnFndCMaiwjBvk.crl (hash: ws70aNjeJDMQin9Ga0s05fdojrYyc0LQp/zccBxGL6I=)
                          2: 8B91EDB420CD11EC97292B78C4F9AE02.roa (hash: eIj7A9yHm5UyaDqD5wlEFgtzeqxaYRyGJ855/hLNbFs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.crl
                          rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1284 (0x504)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171845, serialNumber=BC97F26FB278967DD3CA39C59DD08C6A2C2306F9
        Validity
            Not Before: Aug  9 00:09:10 2025 GMT
            Not After : Aug 16 00:09:10 2025 GMT
        Subject: CN=689691a6-82a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b8:f9:bd:85:b2:73:b6:21:fe:ba:54:7f:b5:
                    82:22:98:17:af:5c:30:47:85:90:d5:fc:fd:1e:e9:
                    31:9e:53:40:ee:cc:21:df:b9:25:88:e9:f6:d9:cc:
                    a0:1e:df:1e:9e:d8:7e:17:6d:2d:ba:24:31:7e:c6:
                    57:de:e5:6e:f7:8a:e4:7c:77:70:fe:7c:75:da:7b:
                    5e:f1:44:bc:1d:16:2c:12:fc:4a:c2:90:a5:3b:80:
                    2a:b2:ff:bf:c7:79:95:9d:c0:49:59:c8:00:e9:32:
                    54:20:30:3f:06:b9:93:b6:07:6b:8d:fb:54:06:75:
                    54:56:b8:f7:09:c8:28:8a:f8:57:a0:d4:bf:9b:02:
                    f7:63:3b:13:a8:fe:80:f5:53:66:13:77:c5:89:6e:
                    6c:27:77:d0:2f:97:f7:bd:5d:1e:68:fe:52:4c:93:
                    da:33:c4:80:df:b1:e9:63:d4:4c:ed:fa:bd:04:98:
                    e9:cc:b9:de:a4:d4:4d:2c:90:7d:b1:7e:34:7f:c4:
                    df:67:d5:8f:3f:09:83:99:80:52:ad:ad:e8:64:05:
                    e1:9c:e6:72:f7:31:c7:7e:b6:95:e1:60:9b:4a:7f:
                    86:c4:ad:a3:a8:f9:fa:5c:5b:55:ca:50:e7:09:e7:
                    8e:ea:55:08:7e:e1:b6:c9:28:94:98:7a:b4:4a:72:
                    e1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:25:5B:CE:E4:B8:7F:0C:FA:7A:1D:43:8B:D2:8F:81:E5:CF:BD:80
            X509v3 Authority Key Identifier:
                keyid:BC:97:F2:6F:B2:78:96:7D:D3:CA:39:C5:9D:D0:8C:6A:2C:23:06:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:32:31:bc:29:ce:71:d0:49:e1:cc:a4:12:db:d5:4b:72:65:
         bb:71:90:c9:90:6a:64:5e:0f:14:4f:70:fd:a9:56:1b:18:73:
         6a:5d:fe:96:e1:a2:4b:de:d5:5c:ec:49:9c:2e:45:8b:84:b3:
         b1:b1:a9:45:b2:3b:24:a0:be:8e:f3:61:f6:57:78:33:c3:ea:
         d1:f4:23:b5:93:3a:fa:32:49:95:44:fa:3b:ef:fd:8c:d5:64:
         c9:36:59:f2:81:dd:64:18:3c:ca:d3:0b:6e:8a:40:22:5e:45:
         17:15:06:74:9b:cf:e8:e6:85:6d:ab:0b:1b:c1:c9:94:c0:3a:
         1d:72:0f:f1:d3:c0:63:6d:bd:4f:a9:35:e2:55:e7:e4:22:ad:
         70:fb:97:88:97:f0:28:b4:5a:f3:b8:f3:1b:da:03:28:b0:d6:
         ff:aa:a1:3c:62:c0:82:05:28:3d:47:bc:71:57:f4:31:d4:be:
         48:90:45:05:54:8c:f8:c1:d7:f0:52:d9:26:87:98:32:93:f1:
         85:42:b6:ff:fb:de:5e:a3:2c:3f:4b:0c:3f:db:6d:ab:3e:7f:
         6e:12:00:af:9d:0f:d8:b6:ee:81:f6:dc:3d:75:1e:b2:e2:82:
         09:23:e8:25:3e:78:fc:ce:8c:b1:93:81:57:d1:0c:1f:23:f0:
         6d:27:c0:b7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE4NDUxMTAvBgNVBAUTKEJDOTdGMjZGQjI3ODk2N0REM0NBMzlDNTlERDA4QzZB
MkMyMzA2RjkwHhcNMjUwODA5MDAwOTEwWhcNMjUwODE2MDAwOTEwWjAYMRYwFAYD
VQQDEw02ODk2OTFhNi04MmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuLj5vYWyc7Yh/rpUf7WCIpgXr1wwR4WQ1fz9HukxnlNA7swh37kliOn22cyg
Ht8enth+F20tuiQxfsZX3uVu94rkfHdw/nx12nte8US8HRYsEvxKwpClO4Aqsv+/
x3mVncBJWcgA6TJUIDA/BrmTtgdrjftUBnVUVrj3CcgoivhXoNS/mwL3YzsTqP6A
9VNmE3fFiW5sJ3fQL5f3vV0eaP5STJPaM8SA37HpY9RM7fq9BJjpzLnepNRNLJB9
sX40f8TfZ9WPPwmDmYBSra3oZAXhnOZy9zHHfraV4WCbSn+GxK2jqPn6XFtVylDn
CeeO6lUIfuG2ySiUmHq0SnLhNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJYlW87k
uH8M+nodQ4vSj4Hlz72AMB8GA1UdIwQYMBaAFLyX8m+yeJZ908o5xZ3QjGosIwb5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTg0NS83QjYyQzgwODIw
Q0ExMUVDQjY2QzE0NTJDNEY5QUUwMi92SmZ5YjdKNGxuM1R5am5GbmRDTWFpd2pC
dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZKZnliN0o0bG4zVHlqbkZuZENNYWl3akJ2ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTg0NS83QjYyQzgwODIwQ0ExMUVDQjY2QzE0NTJDNEY5QUUwMi92SmZ5YjdKNGxu
M1R5am5GbmRDTWFpd2pCdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBkMjG8Kc5x0EnhzKQS29VLcmW7cZDJkGpkXg8UT3D9qVYbGHNqXf6W
4aJL3tVc7EmcLkWLhLOxsalFsjskoL6O82H2V3gzw+rR9CO1kzr6MkmVRPo77/2M
1WTJNlnygd1kGDzK0wtuikAiXkUXFQZ0m8/o5oVtqwsbwcmUwDodcg/x08Bjbb1P
qTXiVefkIq1w+5eIl/AotFrzuPMb2gMosNb/qqE8YsCCBSg9R7xxV/Qx1L5IkEUF
VIz4wdfwUtkmh5gyk/GFQrb/+95eoyw/Sww/222rPn9uEgCvnQ/Ytu6B9tw9dR6y
4oIJI+glPnj8zoyxk4FX0QwfI/BtJ8C3
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:10:12 2025 by rpki-client