Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.mft
File:                     f_vcP3eaj5llMF597lHmpsU1_7g.mft (raw, json)
Hash identifier:          8nRcsvpUHhzx/HHCh/BXUkW8penL7mtjSFlENaolDRI=
Subject key identifier:   16:3D:FF:F2:FF:04:1A:01:49:78:B3:D9:5C:A1:00:7B:7A:A5:53:F6
Authority key identifier: 7F:FB:DC:3F:77:9A:8F:99:65:30:5E:7D:EE:51:E6:A6:C5:35:FF:B8
Certificate issuer:       /CN=A9196E05/serialNumber=7FFBDC3F779A8F9965305E7DEE51E6A6C535FFB8
Certificate serial:       0861
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_vcP3eaj5llMF597lHmpsU1_7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.mft
Manifest number:          084D
Signing time:             Sat 14 Jun 2025 20:32:35 +0000
Manifest this update:     Sat 14 Jun 2025 20:32:35 +0000
Manifest next update:     Sat 21 Jun 2025 20:32:35 +0000
Files and hashes:         1: f_vcP3eaj5llMF597lHmpsU1_7g.crl (hash: jzc+1et9yx/gbtqxYJVRqOhdBKRjdjLt9O7k+KokTXc=)
                          2: B3C00B80CD6111ED9BB1B571C4F9AE02.roa (hash: 1uFjTFe9Amsbq8/7U9vAw2GFeZcNsCf1O+GdbeaI35g=)
                          3: EF76C18C071C11EF9CF42877C4F9AE02.roa (hash: E3TzLkNtv/k+JSiXVZ+yE4299EE9gUcobjsGLwBVBpk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.crl
                          rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_vcP3eaj5llMF597lHmpsU1_7g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 20:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2145 (0x861)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196E05, serialNumber=7FFBDC3F779A8F9965305E7DEE51E6A6C535FFB8
        Validity
            Not Before: Jun 14 20:32:35 2025 GMT
            Not After : Jun 21 20:32:35 2025 GMT
        Subject: CN=684ddc63-0cc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c3:05:ba:8c:37:6f:c5:e5:ac:e5:c6:71:ea:
                    61:33:c3:8b:df:b2:79:bc:27:85:68:43:97:56:84:
                    ee:de:d7:56:2a:20:45:2f:6f:41:13:a6:82:f9:27:
                    db:8d:2b:bf:02:6b:b3:97:4d:be:2d:cd:9c:08:bd:
                    cb:ac:39:74:5c:fe:f6:75:09:1b:a5:cc:26:b4:f7:
                    bd:97:39:26:d2:18:aa:72:04:2e:a1:ab:21:4f:fd:
                    fb:3c:ff:ed:9e:d5:78:1b:a5:d9:71:bb:ee:46:85:
                    01:1a:84:9a:44:8a:65:82:de:de:09:a4:a7:59:86:
                    50:b5:7f:ed:0b:9b:4b:de:77:5b:e4:7d:d4:ca:c4:
                    70:83:79:20:77:7e:7a:fa:2a:fe:ff:d7:0d:e8:d5:
                    cd:fc:d8:7e:44:36:d1:e6:b0:4d:49:31:44:ca:0b:
                    1b:4a:b6:b0:2b:39:2f:a0:1f:ed:74:95:dc:6b:1a:
                    e0:cd:4c:fe:cd:d7:71:80:c0:2c:a0:20:4b:29:fb:
                    60:cf:8b:97:7e:dd:68:9d:52:da:91:d1:d3:6c:d5:
                    67:b5:eb:0f:b5:b4:a3:ca:5b:9b:b9:a9:90:e7:2c:
                    1c:8e:5f:74:9c:95:3f:70:6f:0f:16:2a:cd:ee:bc:
                    75:a3:dd:3f:75:6f:27:c8:e9:cc:87:fb:56:9f:f4:
                    ed:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3D:FF:F2:FF:04:1A:01:49:78:B3:D9:5C:A1:00:7B:7A:A5:53:F6
            X509v3 Authority Key Identifier:
                keyid:7F:FB:DC:3F:77:9A:8F:99:65:30:5E:7D:EE:51:E6:A6:C5:35:FF:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_vcP3eaj5llMF597lHmpsU1_7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E05/42955510CE5311EA8E8C924CC4F9AE02/f_vcP3eaj5llMF597lHmpsU1_7g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:28:95:1c:45:76:3e:33:9c:b7:d8:6d:62:d1:19:e7:58:33:
         68:50:37:be:ef:a3:66:28:66:c7:5d:c7:25:ca:c6:ea:52:2d:
         91:74:f5:42:68:a0:76:00:e4:43:2b:3a:6b:b3:e2:d4:60:2e:
         13:73:c3:d7:92:54:7b:21:ff:73:e8:d2:75:61:a5:4a:e6:a2:
         85:28:2c:8b:ee:07:1f:1c:86:dd:4d:23:4d:ac:af:87:dd:9c:
         6c:ab:8e:e6:01:fa:95:b7:8d:94:1c:bf:34:e8:3a:bb:84:a6:
         3c:b6:6b:1d:8f:8a:07:9f:2f:ee:25:b4:d1:9b:6b:73:7f:a4:
         c6:61:65:fb:b4:c0:84:75:92:9b:e9:fe:0b:d0:a9:43:62:bc:
         a7:d1:68:66:d9:64:b7:47:ab:d2:68:09:06:2d:9a:f0:b4:fc:
         fd:b6:be:c3:a2:dc:5f:ee:9e:df:01:45:42:48:93:4d:7d:c7:
         26:00:1c:8a:2f:c3:43:6a:44:28:ad:bf:5b:5a:9a:9b:cf:2e:
         f6:6e:2f:3a:6a:f5:d5:f7:da:99:5a:88:9f:dc:91:3b:e1:78:
         69:28:71:b9:8a:15:be:b4:a8:c2:43:8a:0d:d4:b2:a4:9c:c0:
         db:42:3d:41:a6:42:02:a2:62:ef:bd:cb:3b:2c:9e:34:74:b3:
         f2:f0:ba:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:48:52 2025 by rpki-client