Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft
File:                     vjP21UgZuYkyL1Kj7LXzP98OFZY.mft (raw, json)
Hash identifier:          3/ko6B7mVPhuHSkSLel3RChylIHLd3WULOkwjQtCn/s=
Subject key identifier:   06:B9:60:B5:0B:DA:E6:7C:AB:07:01:23:82:A5:E5:9A:8B:C8:F3:F9
Authority key identifier: BE:33:F6:D5:48:19:B9:89:32:2F:52:A3:EC:B5:F3:3F:DF:0E:15:96
Certificate issuer:       /CN=A9178EF3/serialNumber=BE33F6D54819B989322F52A3ECB5F33FDF0E1596
Certificate serial:       0720
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjP21UgZuYkyL1Kj7LXzP98OFZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft
Manifest number:          0719
Signing time:             Fri 08 Aug 2025 22:15:27 +0000
Manifest this update:     Fri 08 Aug 2025 22:15:27 +0000
Manifest next update:     Fri 15 Aug 2025 22:15:27 +0000
Files and hashes:         1: vjP21UgZuYkyL1Kj7LXzP98OFZY.crl (hash: Opbm4VyO2qE7/WJQ57QUGazk+/avfLGr0mCoRIF21eM=)
                          2: 4BC1EE9A4AAF11EBBF031959C4F9AE02.roa (hash: 9QXEZ3KUMVxM1IFtAM5AqpjiZSShCfJ9XhH0+sUzVjs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.crl
                          rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjP21UgZuYkyL1Kj7LXzP98OFZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1824 (0x720)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178EF3, serialNumber=BE33F6D54819B989322F52A3ECB5F33FDF0E1596
        Validity
            Not Before: Aug  8 22:15:27 2025 GMT
            Not After : Aug 15 22:15:27 2025 GMT
        Subject: CN=689676ff-7f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:59:7d:4b:e8:0b:9c:fe:b2:da:f1:82:f3:8a:
                    4c:e1:91:d0:6d:2d:c4:2d:1f:31:dd:10:3d:1c:6b:
                    12:75:0e:7d:27:9b:cf:86:84:85:4d:90:3a:4e:64:
                    0c:c4:41:24:88:44:40:fe:85:63:a7:ce:d4:60:cd:
                    5f:94:dd:a7:ae:95:e4:4f:ad:ed:6c:43:ab:ef:aa:
                    99:df:83:4f:96:e3:aa:b8:4e:e1:17:c2:1e:ab:58:
                    bd:3d:cc:0d:59:d2:da:8a:60:be:1c:b3:05:3f:1d:
                    6b:e6:82:4e:52:57:33:9a:10:6a:79:4b:a4:8c:09:
                    c2:c8:66:6d:d4:89:75:8b:94:bc:a0:87:ca:5d:3d:
                    77:e6:d4:60:b1:a6:ea:f3:74:ec:b1:c0:59:97:ac:
                    31:08:d0:80:c5:3c:78:50:fd:bc:13:f6:67:09:e3:
                    9e:11:21:b8:c5:ad:72:cb:4a:09:e2:a4:b4:4c:28:
                    85:26:0e:44:f2:b7:07:93:a6:e5:7f:37:75:6b:7c:
                    9c:a9:88:69:82:b3:54:b5:d3:5c:28:12:0e:83:2d:
                    8c:ff:ce:51:40:93:9c:f2:48:4a:67:ba:56:ea:39:
                    60:08:c9:ea:76:27:e6:aa:f1:e5:00:86:51:9c:ff:
                    45:89:c9:44:a6:aa:5f:75:5b:17:78:ab:32:14:11:
                    67:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B9:60:B5:0B:DA:E6:7C:AB:07:01:23:82:A5:E5:9A:8B:C8:F3:F9
            X509v3 Authority Key Identifier:
                keyid:BE:33:F6:D5:48:19:B9:89:32:2F:52:A3:EC:B5:F3:3F:DF:0E:15:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vjP21UgZuYkyL1Kj7LXzP98OFZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EF3/9281034A4AAD11EB90637E57C4F9AE02/vjP21UgZuYkyL1Kj7LXzP98OFZY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:94:d9:db:e3:61:57:8d:e7:e9:af:5d:a5:e6:09:46:50:47:
         e9:dd:4f:3a:a6:f5:5f:d0:7a:15:fc:01:bc:71:69:d6:73:37:
         48:6c:1f:4e:9d:cd:df:90:86:a0:d4:53:11:b9:42:2f:39:15:
         23:ac:1f:17:13:f2:5e:0a:22:6c:9a:41:d0:cb:a8:3e:f6:28:
         33:a7:0a:42:b9:d3:70:2b:71:2e:39:f0:ad:8e:d1:e6:97:51:
         c5:67:d0:b2:36:95:4b:59:50:3f:a3:38:a4:92:23:a6:ba:16:
         2a:f6:a3:d3:e0:be:ef:67:bd:e4:5c:35:0b:13:76:a4:4a:72:
         71:fe:d5:6e:f9:8d:4b:78:8e:a6:91:24:3e:ea:2b:d1:94:50:
         47:e9:7d:16:af:9b:ff:a2:9f:ed:78:c0:7e:ee:b6:48:19:71:
         bd:17:5c:aa:6c:50:80:5e:4f:b6:9d:ff:95:21:34:ff:d7:7d:
         3a:35:be:c6:bb:37:48:06:06:f2:56:44:b3:76:b5:50:c8:cf:
         18:a2:13:fd:83:65:e6:34:91:32:ab:5e:fb:fc:26:e5:e9:a3:
         ed:9a:a0:6b:e0:4a:2b:90:84:6e:69:d9:33:f1:15:5d:b6:70:
         c9:4d:07:eb:ad:98:69:6d:01:41:85:d1:0f:f7:25:aa:6e:2f:
         90:b8:9e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:54:47 2025 by rpki-client