Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
File:                     vxobyMAsIDYtD9n5K8AGoolejIA.mft (raw, json)
Hash identifier:          6+GPVynYXwImtVG4eEg/xrlRQOXEFE/tPZIlYhVmyko=
Subject key identifier:   3B:84:23:7A:17:2D:D2:C3:C2:3C:7E:6B:83:5F:83:37:62:B3:C7:07
Authority key identifier: BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80
Certificate issuer:       /CN=A91A423B/serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80
Certificate serial:       07F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
Manifest number:          07EA
Signing time:             Tue 04 Nov 2025 21:11:11 +0000
Manifest this update:     Tue 04 Nov 2025 21:11:11 +0000
Manifest next update:     Tue 11 Nov 2025 21:11:11 +0000
Files and hashes:         1: vxobyMAsIDYtD9n5K8AGoolejIA.crl (hash: 9B/Fz7wp8R6sbf/BqF86WAcyJFQgoX8Pa8o64IBOjxk=)
                          2: ABD5003E079C11EBA7C04832C4F9AE02.roa (hash: gudUHLzJpmvIi7qROWYt11jIMMWxAxmreMkdOGwLNhI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl
                          rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 21:11:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2032 (0x7f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A423B, serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80
        Validity
            Not Before: Nov  4 21:11:11 2025 GMT
            Not After : Nov 11 21:11:11 2025 GMT
        Subject: CN=690a6bef-8019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c6:4b:b5:c2:9d:75:a1:dc:35:d7:15:89:c0:
                    4f:7f:fa:71:00:39:49:07:41:86:e1:f1:aa:fc:41:
                    11:f4:52:fc:6a:cf:e7:cb:19:f5:68:b1:21:47:83:
                    93:b1:d4:98:45:3d:c9:0f:1e:8b:44:cb:7d:4e:61:
                    63:43:59:af:ec:89:de:9e:f4:b5:3b:04:91:d2:a6:
                    4b:f1:50:51:7d:76:a0:36:16:19:e9:d4:23:6f:01:
                    eb:38:bf:e1:19:7d:c4:a8:43:f2:7c:81:38:ab:55:
                    5c:09:1c:d3:8c:a4:5f:61:7b:0e:ec:f6:03:9b:60:
                    a2:ff:94:4d:b1:75:91:45:78:6e:b2:e4:21:a6:87:
                    96:64:d4:e4:ee:35:19:f1:f7:bb:84:97:59:7a:c8:
                    70:a1:35:de:1e:f8:e7:52:ce:54:0e:c2:52:fd:08:
                    3d:92:a3:2b:52:29:e2:35:ce:be:11:90:34:04:c4:
                    e6:96:dc:d2:83:c3:b7:95:53:95:64:8d:26:ae:7f:
                    e0:92:67:05:33:61:60:25:6f:a5:4c:47:2a:5e:14:
                    8f:81:96:3d:9f:7b:8c:e1:2b:1a:68:f2:c2:18:d2:
                    76:1f:7a:2e:c8:10:78:8d:76:93:12:75:ab:d9:66:
                    8e:ce:8e:27:71:83:83:ba:9d:0c:71:60:d7:79:4c:
                    e0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:84:23:7A:17:2D:D2:C3:C2:3C:7E:6B:83:5F:83:37:62:B3:C7:07
            X509v3 Authority Key Identifier:
                keyid:BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:dc:26:8d:c2:7b:34:66:80:66:6a:d9:66:ba:59:96:87:62:
         6d:77:aa:f1:09:a1:f3:fb:32:18:b0:f9:3f:a5:4f:15:d8:44:
         e8:8e:f3:16:2f:24:ef:29:df:2e:4f:f4:b0:09:91:fd:d8:99:
         e2:e0:3d:3b:05:87:0a:65:22:7a:1d:97:84:3b:ee:48:5a:a6:
         d4:65:f7:87:9e:0a:79:db:29:dd:54:6a:72:22:d0:8a:53:17:
         e5:8b:ed:65:c7:92:c2:f2:21:f3:0e:0f:48:dd:19:03:79:7d:
         d6:5f:35:49:49:5f:58:65:a6:ce:8e:77:c6:2c:0b:cd:2d:b0:
         39:48:8e:d8:d6:02:bf:07:f9:ac:f3:6f:36:e0:3c:93:db:40:
         cb:60:ef:74:37:9d:bc:e8:3c:a4:d4:ef:68:c3:f0:c4:1b:c3:
         85:65:47:39:24:2d:07:e3:75:a2:f2:dd:5d:cf:12:6f:e6:5f:
         ea:bf:c0:62:34:96:38:40:8d:69:0b:d5:56:bd:5f:f7:10:50:
         e8:5c:a3:87:41:0d:c5:c8:37:03:bf:ad:04:24:6c:9f:7a:5f:
         44:57:d5:36:72:12:a4:d4:b7:bd:05:0b:76:78:eb:b2:ef:1f:
         c9:e0:3b:18:e1:66:11:56:6a:99:a2:af:27:c7:71:4b:21:29:
         09:0b:1e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:25:29 2025 by rpki-client