Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.mft
File:                     vi_5e5tTTVONpBoJtsCNAjMuhlU.mft (raw, json)
Hash identifier:          5kSirAIqxbXtrpcOOCE5z2ZvnSe4XofJZ67AxufniiI=
Subject key identifier:   6F:97:42:B3:24:C1:C3:29:B7:62:44:28:C2:18:65:8B:DA:6E:53:45
Authority key identifier: BE:2F:F9:7B:9B:53:4D:53:8D:A4:1A:09:B6:C0:8D:02:33:2E:86:55
Certificate issuer:       /CN=A9173D07/serialNumber=BE2FF97B9B534D538DA41A09B6C08D02332E8655
Certificate serial:       0771
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vi_5e5tTTVONpBoJtsCNAjMuhlU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.mft
Manifest number:          076B
Signing time:             Sat 14 Jun 2025 21:18:27 +0000
Manifest this update:     Sat 14 Jun 2025 21:18:26 +0000
Manifest next update:     Sat 21 Jun 2025 21:18:26 +0000
Files and hashes:         1: vi_5e5tTTVONpBoJtsCNAjMuhlU.crl (hash: K3yGDf1DqRcI39NRX/Gzh5a17qpcUD3xC6tDX2HFuIc=)
                          2: AD2ACD6423F411EB8FBA6A83C4F9AE02.roa (hash: zDoEmMgh0Ofm4a5TBSo1aulp2cylUWbLMdlBm8sXwCs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.crl
                          rsync://rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vi_5e5tTTVONpBoJtsCNAjMuhlU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 21:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1905 (0x771)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173D07, serialNumber=BE2FF97B9B534D538DA41A09B6C08D02332E8655
        Validity
            Not Before: Jun 14 21:18:26 2025 GMT
            Not After : Jun 21 21:18:26 2025 GMT
        Subject: CN=684de722-6a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:86:f8:84:5a:b8:a2:1e:20:a9:27:df:6c:95:
                    ef:42:32:2e:59:18:22:d3:8c:ef:0f:6e:65:3f:2b:
                    37:3f:86:4c:2e:36:71:ee:0b:c9:75:d0:5e:f0:d4:
                    f8:5f:a8:aa:c5:d9:03:2c:33:72:8e:c3:c7:98:b3:
                    08:9e:0f:3e:08:c9:a6:fa:21:30:c9:47:6d:e8:ec:
                    36:b6:27:bd:98:9d:b8:78:71:79:66:7b:9f:ce:76:
                    37:15:1d:d5:4b:5a:06:30:8b:f2:43:5c:62:fb:4a:
                    c5:43:88:92:fa:6e:cb:40:77:fe:88:d0:c5:1a:e6:
                    67:7e:49:02:2b:96:c5:bc:c6:48:e9:97:09:f3:2a:
                    b8:a5:4d:76:2f:3f:1d:5e:8f:1c:d1:3a:98:01:2e:
                    81:a7:a7:fe:e1:a2:62:fc:56:c1:1e:75:d2:0e:42:
                    af:57:24:bd:0e:6f:e9:f5:aa:ca:ff:9d:97:7b:e9:
                    00:63:b6:b8:f5:88:48:b7:55:20:c9:08:45:e8:66:
                    ae:65:95:fc:cc:d9:e7:c3:1c:69:73:11:9b:62:f3:
                    2b:a0:b0:73:f7:cd:a5:b1:03:93:1a:d0:95:90:ea:
                    64:3d:2f:ab:11:56:b6:76:a3:ab:23:21:16:5e:c3:
                    d0:ec:d2:0b:28:26:59:13:4e:ee:b4:ea:16:16:22:
                    2f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:97:42:B3:24:C1:C3:29:B7:62:44:28:C2:18:65:8B:DA:6E:53:45
            X509v3 Authority Key Identifier:
                keyid:BE:2F:F9:7B:9B:53:4D:53:8D:A4:1A:09:B6:C0:8D:02:33:2E:86:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vi_5e5tTTVONpBoJtsCNAjMuhlU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D07/BF9AFF4C1CD211EB99D58B2CC4F9AE02/vi_5e5tTTVONpBoJtsCNAjMuhlU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:6d:50:9b:ac:2d:0f:0d:ab:e3:2d:2b:83:f4:42:3b:cf:0e:
         c9:0f:d9:a8:6d:52:2e:9b:54:59:7c:41:57:1a:b1:56:49:2f:
         94:6e:13:16:8b:7d:7e:4e:37:8f:21:67:3e:3c:e0:ff:54:29:
         1c:57:89:46:09:bc:5f:ae:8c:db:0b:a4:80:06:2b:e0:a0:da:
         19:3f:19:c7:bb:a1:ec:1e:9f:c7:93:c1:a9:98:2b:ff:de:5d:
         9e:d2:8b:ac:ab:53:44:7f:88:07:9f:a3:1e:60:d5:b0:61:ce:
         b1:a8:23:0f:e1:f6:be:db:70:3f:1e:b4:b4:1e:ff:45:f7:56:
         0c:eb:86:51:d6:2f:04:76:f0:9a:60:5f:3c:7b:3a:c0:b6:c7:
         7b:57:c0:51:3a:f3:79:88:d9:be:e3:11:0b:3f:9d:fc:c1:86:
         96:70:9b:4e:30:c5:aa:c6:4a:77:1c:cf:36:8c:54:17:cf:ec:
         c5:d2:51:59:97:72:d9:e3:a7:e6:f9:f5:f4:e8:20:06:e7:86:
         12:1e:60:b9:88:24:32:d2:a0:8a:1f:ee:21:cf:84:5c:98:d7:
         87:d8:8c:59:14:25:3c:72:45:82:93:6f:c9:d0:cb:e2:c1:52:
         01:33:15:14:4e:b4:17:b6:af:ed:75:6c:81:55:e3:16:4d:3d:
         6c:00:11:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:32:50 2025 by rpki-client