Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft
File:                     vhLS7vQqHJ3CpXIERscDFsfCBlA.mft (raw, json)
Hash identifier:          Am4eNwbu7cFgivIS/TapR7ZyXMvyh1iPcqwaESsUeXU=
Subject key identifier:   2C:45:86:43:67:E2:E3:32:44:C6:BA:B9:20:6C:92:A4:A7:5E:CF:10
Authority key identifier: BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50
Certificate issuer:       /CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650
Certificate serial:       2812
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft
Manifest number:          27F7
Signing time:             Fri 08 Aug 2025 15:41:50 +0000
Manifest this update:     Fri 08 Aug 2025 15:41:50 +0000
Manifest next update:     Fri 15 Aug 2025 15:41:50 +0000
Files and hashes:         1: vhLS7vQqHJ3CpXIERscDFsfCBlA.crl (hash: k9/HB6pDmFPFHrv/iKvz/AbDCbx5Hv8vJ+VxboLho+I=)
                          2: B70AE7D20C6B11EC82638A40C4F9AE02.roa (hash: qyTxkkSSZz/mEPJmCPmO4drOsBAzqss/jEsEWzyS7n4=)
                          3: 5B7F22440AF811ECB423A671C4F9AE02.roa (hash: IqEsazWsEikd3PbwO1Zi4SKIR5/W/ukREa4rnvdDPhw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl
                          rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10258 (0x2812)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174A6B, serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650
        Validity
            Not Before: Aug  8 15:41:50 2025 GMT
            Not After : Aug 15 15:41:50 2025 GMT
        Subject: CN=68961abe-cbcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:52:45:74:30:c3:01:3b:ed:ea:23:42:aa:60:
                    76:7e:78:04:07:b9:51:a7:75:62:d3:fd:ca:30:c8:
                    6e:59:a5:de:8b:e4:70:be:a6:f0:15:c7:29:d8:50:
                    54:bd:97:7a:81:50:d2:f4:8c:26:fb:07:4f:09:a0:
                    ba:1e:80:61:6e:8a:cb:98:3a:78:a4:4c:86:d6:23:
                    21:48:c1:28:2e:93:1d:e1:5d:19:38:ed:81:fe:3f:
                    a8:9d:fe:8b:a1:ae:e3:e5:77:d8:07:cb:67:99:bd:
                    21:43:6c:74:ad:5a:57:23:46:db:53:52:4a:d5:93:
                    ed:46:d8:7e:c1:0f:47:63:f9:71:28:27:69:52:32:
                    4d:c3:c0:d8:a5:24:92:29:1c:ad:ab:1e:da:dd:0e:
                    85:d2:df:b8:0b:ae:b6:88:4b:1a:4f:58:06:7a:0e:
                    68:e3:ca:b2:15:9c:12:8a:ef:b3:58:26:90:cc:29:
                    8e:00:e4:c1:07:89:9f:15:22:d5:4c:bf:15:33:a1:
                    a7:92:f1:b8:d5:b9:2f:96:ff:2c:49:73:7a:7b:8b:
                    d5:27:5d:6b:1c:78:89:79:98:b1:aa:f6:c6:89:25:
                    dd:99:69:01:4e:36:0b:e9:e2:0c:b8:46:01:d9:d6:
                    31:6c:87:e6:64:c4:3d:05:ea:01:95:bd:0c:36:c1:
                    de:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:45:86:43:67:E2:E3:32:44:C6:BA:B9:20:6C:92:A4:A7:5E:CF:10
            X509v3 Authority Key Identifier:
                keyid:BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:7c:32:f3:ad:5d:fc:ce:c1:13:b6:cf:3c:a5:58:d1:35:1e:
         1d:6f:e1:36:31:96:de:3c:5e:9d:9c:23:eb:84:0e:e3:e5:a6:
         7a:00:f5:d0:df:32:5f:e1:19:93:bc:c9:ec:4a:2f:a0:3a:a5:
         e6:c4:37:d4:d0:7d:11:aa:ae:68:c5:da:5b:55:c3:3d:c2:f5:
         70:b1:51:53:a7:d8:ab:ac:dc:ce:d2:57:e4:b5:c0:43:ed:1b:
         c4:c3:8a:da:59:68:83:a8:78:59:5f:d1:50:65:9f:09:75:2c:
         ba:27:ff:3a:d1:37:a2:c9:d7:ce:6b:af:8e:26:8a:ff:d3:da:
         09:64:fa:21:f1:bb:88:76:e3:b0:a1:29:ac:35:51:82:2e:18:
         97:f3:0d:22:20:b9:60:25:58:ed:d8:c0:07:7d:fd:b6:2e:8a:
         05:ea:cf:6b:20:84:c7:d8:5f:0f:0a:ad:3e:12:70:7b:4e:6f:
         ad:1a:3e:a5:da:76:91:9b:70:2f:8c:2b:8a:e4:bc:ff:77:22:
         21:00:4e:f9:08:5e:e8:e9:97:43:69:32:cb:40:0d:de:d2:e9:
         0d:b7:10:aa:73:7b:a1:7f:95:06:49:3d:23:e4:02:92:b1:29:
         5f:16:b3:06:d9:f1:bc:5f:af:65:d1:f8:96:f8:c8:b5:0f:ef:
         66:39:e2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:40:26 2025 by rpki-client