Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft
File:                     VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft (raw, json)
Hash identifier:          oio/+Vtj1buyrOT2/P9TLYdw1tKmQJpYzj0BSgqOcWQ=
Subject key identifier:   6A:5B:B4:7E:A0:3C:2F:8E:AA:2B:2E:9C:6B:F2:E4:21:4D:28:FB:FC
Authority key identifier: 54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD
Certificate issuer:       /CN=A91790C3/serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD
Certificate serial:       069E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft
Manifest number:          068B
Signing time:             Fri 08 Aug 2025 22:45:22 +0000
Manifest this update:     Fri 08 Aug 2025 22:45:21 +0000
Manifest next update:     Fri 15 Aug 2025 22:45:21 +0000
Files and hashes:         1: VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl (hash: tOtjJpMtFBEcjjLp/wMNocDx2jF5X9aSORwMIic6C/o=)
                          2: C437B01282C211EBBB08B280C4F9AE02.roa (hash: jFt3e40+ALQhrJp6OJZEoPNCJM/tKBFq4PlGOIsp684=)
                          3: C3AD861C82C211EBBB08B280C4F9AE02.roa (hash: ExeORiGRCNK8jvuw56sySZxqK+GOSBQ3JY3+3QQDiXc=)
                          4: 9EA2D73236D311EF89295180C4F9AE02.roa (hash: f2ke3ZBYV1Ribvo8r5rmx6HoUBDp7E1lgqZwRkmtN9g=)
                          5: C310545082C211EBBB08B280C4F9AE02.roa (hash: +qteBc7xk/iNE1OmAmAugB8Y+ErzQcUywqF9mnDTvtM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl
                          rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1694 (0x69e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91790C3, serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD
        Validity
            Not Before: Aug  8 22:45:21 2025 GMT
            Not After : Aug 15 22:45:21 2025 GMT
        Subject: CN=68967e02-3d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8b:d3:60:53:64:bf:f7:00:f6:75:a4:04:38:
                    f9:1b:b3:22:19:ea:7d:b5:ab:1d:33:30:bc:b7:08:
                    34:99:4c:fc:39:bf:35:6c:9f:16:25:48:01:75:2b:
                    38:0c:30:10:50:8a:61:e8:9b:61:6e:a0:cd:f5:fa:
                    44:02:92:03:b2:77:7f:41:66:2e:57:4e:3f:08:16:
                    9b:99:ff:c4:84:7b:cf:bc:24:4a:65:75:bc:28:04:
                    eb:86:7b:90:95:54:cd:f7:a1:a5:49:5a:12:28:8b:
                    67:a6:05:4e:93:e9:7b:8d:84:d5:a1:76:e0:7d:8d:
                    c5:4a:f4:16:13:97:80:77:3a:c9:32:07:23:b7:32:
                    c6:93:fb:77:e9:80:1b:53:81:df:c2:6b:20:c2:80:
                    24:46:5c:d7:2f:0a:9f:e5:5c:97:6b:b1:34:a3:23:
                    6e:90:44:7a:7a:d7:03:11:b9:4c:6c:6c:9c:ce:d9:
                    2d:9c:6a:cd:84:c5:78:bf:50:2e:ee:c7:77:c1:d9:
                    b0:1e:a4:6e:d7:e2:96:3f:1b:82:fe:f2:02:e0:bf:
                    bd:bc:04:fe:8a:1b:e2:ec:90:e4:6a:63:4d:e3:93:
                    e3:6f:82:32:9e:00:a5:ac:66:24:f1:00:1f:05:bd:
                    54:6f:a7:b3:86:70:60:5c:ed:fe:1a:22:13:f3:0a:
                    48:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5B:B4:7E:A0:3C:2F:8E:AA:2B:2E:9C:6B:F2:E4:21:4D:28:FB:FC
            X509v3 Authority Key Identifier:
                keyid:54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:cb:16:61:67:71:2b:4a:c5:06:cc:e2:ae:cb:9b:b0:ef:e4:
         be:68:22:b6:f9:16:50:28:da:dd:b5:f3:ea:97:a9:da:af:fa:
         ef:ab:14:be:c8:ef:ca:af:e0:9f:c7:59:08:6e:51:b1:38:ae:
         68:be:fe:8e:aa:2a:d2:da:da:24:60:36:ee:00:c1:2a:98:8d:
         36:89:aa:d5:24:66:59:e7:a6:4d:01:b1:ce:4b:54:fd:a7:af:
         76:60:b7:70:52:df:df:1a:38:57:50:d9:36:9e:4c:e8:ea:5c:
         7c:9c:2d:05:cf:4c:65:49:b7:29:16:c0:70:e8:2e:ff:c7:b3:
         a7:67:b1:22:ba:6d:8b:04:bb:f7:9e:0f:83:bd:6e:35:be:81:
         a3:85:0d:25:5b:00:d7:13:0f:02:2d:53:65:43:e4:e1:f0:27:
         42:f7:3f:ee:af:03:fb:1d:70:9a:b7:c6:01:bb:87:fd:3e:f3:
         95:79:85:39:52:48:e4:f9:08:9f:35:2f:7a:28:b0:02:01:73:
         7f:1c:72:c6:60:52:12:92:39:9a:82:1c:52:4b:34:92:34:38:
         03:97:44:0d:aa:d1:85:2b:5c:d8:ae:4b:94:b3:e0:6b:97:fd:
         02:7f:ab:88:48:21:52:7c:66:d7:8a:ac:15:a4:42:b1:68:07:
         dc:89:3b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:14:56 2025 by rpki-client