Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.mft
File:                     VIQw6riOTjePtQBa-uXKucAAeho.mft (raw, json)
Hash identifier:          T2dT7fGxJM6VIncC5hzNf2VHh2vZdpaY/osP7g6gLRM=
Subject key identifier:   F1:EE:D9:31:CF:54:3C:38:BE:8B:02:20:B3:24:99:F0:5C:45:C4:17
Authority key identifier: 54:84:30:EA:B8:8E:4E:37:8F:B5:00:5A:FA:E5:CA:B9:C0:00:7A:1A
Certificate issuer:       /CN=A9190818/serialNumber=548430EAB88E4E378FB5005AFAE5CAB9C0007A1A
Certificate serial:       E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.mft
Manifest number:          DB
Signing time:             Wed 05 Nov 2025 06:03:42 +0000
Manifest this update:     Wed 05 Nov 2025 06:03:41 +0000
Manifest next update:     Wed 12 Nov 2025 06:03:41 +0000
Files and hashes:         1: VIQw6riOTjePtQBa-uXKucAAeho.crl (hash: TZiSAjQ9kYGayjt2xZmVKyWjUplXZNGb3JIOvHIeoQM=)
                          2: B91F8BF69EE211EF883C7D14C4F9AE02.roa (hash: ystaA1qH4YgbU9d9hzX/8z1Ck2jWutx3GJsE5BHcT3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.crl
                          rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 06:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190818, serialNumber=548430EAB88E4E378FB5005AFAE5CAB9C0007A1A
        Validity
            Not Before: Nov  5 06:03:41 2025 GMT
            Not After : Nov 12 06:03:41 2025 GMT
        Subject: CN=690ae8bd-732a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:af:26:79:2d:aa:ec:58:1c:5e:ef:f9:5c:03:
                    16:6c:87:73:ca:fe:ee:c9:20:68:92:6f:f6:5b:2a:
                    c2:09:84:b7:40:b2:23:60:30:df:1d:cc:72:45:ce:
                    15:a6:9d:e2:1d:8d:e6:cd:a8:48:e8:28:cb:f3:22:
                    42:e4:b6:ac:bd:7f:e3:9a:a9:a9:50:66:ac:8a:60:
                    88:bb:9d:a5:64:53:37:1f:15:94:11:6d:ce:91:b8:
                    9d:57:b1:c9:33:60:ee:91:f2:d2:79:04:ce:eb:da:
                    d6:fa:31:0c:e4:84:bc:18:66:fc:04:ce:17:e7:67:
                    2a:56:c1:23:64:d8:9c:d3:d4:34:12:a6:d3:6e:a3:
                    a4:0c:df:6e:3f:f4:ca:d8:61:96:01:f9:a2:d5:be:
                    8f:7f:bf:e9:4b:81:ff:73:55:f7:b2:d4:36:0f:41:
                    9c:da:88:c7:d4:eb:1b:54:39:69:02:aa:5e:e5:9b:
                    2b:a1:81:60:61:d2:81:d7:c9:d8:15:55:72:55:ff:
                    f2:c7:93:3e:df:9b:41:3b:5e:fb:9d:b5:ea:8d:de:
                    3b:67:dc:60:ad:e2:ab:e4:68:60:0b:73:38:89:9f:
                    d8:5f:b2:ee:5e:ee:6f:57:5a:d0:55:1a:78:f5:de:
                    c9:52:23:1b:11:7c:34:af:8d:c8:79:1f:9f:14:24:
                    9f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:EE:D9:31:CF:54:3C:38:BE:8B:02:20:B3:24:99:F0:5C:45:C4:17
            X509v3 Authority Key Identifier:
                keyid:54:84:30:EA:B8:8E:4E:37:8F:B5:00:5A:FA:E5:CA:B9:C0:00:7A:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:f6:cb:b6:45:4f:a7:ab:34:86:02:f2:3e:66:9d:00:10:ea:
         cc:b1:07:a5:cc:c7:23:25:6e:6d:5e:e9:b4:fc:d3:53:d0:74:
         ea:76:4f:f4:f6:ef:ee:96:0b:9f:d7:ab:07:d6:69:f3:7a:a4:
         8e:17:21:6e:d9:02:e5:8a:c1:84:55:32:b3:d9:1f:e0:fd:bb:
         07:d0:d9:b3:ed:db:56:06:73:af:88:a2:a5:08:a4:e6:9d:5e:
         6b:18:f6:6a:25:94:96:a8:db:8e:4f:b4:38:b8:bc:1e:dd:8e:
         63:6c:8b:20:ff:c1:bb:e7:2d:5e:a6:3f:b0:9a:37:1a:e3:c4:
         38:03:73:7c:4b:20:23:da:39:dd:97:63:18:59:a8:ac:55:60:
         c6:5a:9f:35:5d:39:07:6d:95:d9:fb:f7:d4:3d:93:a6:8d:05:
         51:03:bd:69:a7:8b:b9:97:cd:93:a1:cc:c3:3b:a1:cd:89:63:
         70:f2:f7:6d:69:ee:ed:2b:b6:5e:67:20:37:93:06:2f:c3:4c:
         e4:0c:8e:de:ff:a9:69:47:6f:76:f1:bd:0c:c7:ba:83:2c:64:
         ac:d0:ac:87:db:7e:8b:02:d4:28:a5:3e:d9:eb:6f:ef:f2:5b:
         82:96:69:31:ee:db:34:46:fd:fa:41:65:14:92:fa:22:da:51:
         b2:f2:86:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:04:50 2025 by rpki-client