Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
File:                     vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json)
Hash identifier:          orGm/NnXYTWIigfKyHtXcxrFlglmEWJT/8PhJdrWI0c=
Subject key identifier:   0D:8D:EF:F2:A2:55:83:A0:97:29:62:E6:0D:84:36:2B:AD:DD:C8:DF
Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03
Certificate issuer:       /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
Certificate serial:       34F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
Manifest number:          34D3
Signing time:             Fri 08 Aug 2025 14:38:56 +0000
Manifest this update:     Fri 08 Aug 2025 14:38:56 +0000
Manifest next update:     Fri 15 Aug 2025 14:38:56 +0000
Files and hashes:         1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: y3ufnlHDQzMwIX3xFliRbJZG4BzHILXVDopYq0MMwxA=)
                          2: 21C0B7E23BD311F0B1BF6C56C4F9AE02.roa (hash: B6iIcDp1e+xSTCgDaU39YslsY3oYKHC1G8nj3LY3fyg=)
                          3: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: 3yE7jzzRRf/nsUpYCxz901DViCqtx9fcvzcGq8i3VT0=)
                          4: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: iBQaFzR8EsNKfOhQyR2WaqwTnXNt65iEA7xvcPEERlo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl
                          rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13558 (0x34f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
        Validity
            Not Before: Aug  8 14:38:56 2025 GMT
            Not After : Aug 15 14:38:56 2025 GMT
        Subject: CN=68960c00-b7e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1d:83:8a:03:d5:9c:3b:3e:df:0f:4d:29:e7:
                    e2:c6:e8:38:d6:4c:b9:6b:fd:b9:c9:e7:ff:74:94:
                    8c:f5:66:3c:53:3b:23:24:4a:e3:ed:3a:3a:49:dc:
                    bf:1d:4d:48:68:67:3a:1e:d9:85:88:97:29:40:4d:
                    39:c5:c3:cf:77:f5:b5:1d:9d:b2:94:65:5b:a2:b8:
                    df:8b:71:94:e1:ed:6d:3e:41:e8:5a:1a:cf:03:b1:
                    e0:1b:8e:75:83:eb:00:b4:de:25:17:16:0c:de:db:
                    5c:a1:d5:3c:ee:74:74:03:f4:44:c4:eb:68:e4:a8:
                    e1:d3:49:68:75:2a:5c:7c:11:f4:f4:d7:30:8f:f2:
                    26:53:1b:61:55:1d:d9:d9:e5:42:4b:28:5a:c4:35:
                    6c:0d:ee:1d:70:95:39:13:da:c0:7e:63:8c:35:bb:
                    67:86:de:16:c3:16:76:c8:c4:6a:e4:cf:b6:49:cc:
                    32:e6:2d:4f:7a:23:16:df:77:dd:9b:a7:c1:43:0e:
                    aa:f8:5f:f2:06:a0:8b:3c:18:3b:00:de:4b:d3:74:
                    9b:12:27:df:f7:9a:26:62:17:96:fc:74:80:3e:4e:
                    1f:c1:13:91:fb:1a:7f:b5:10:3e:5f:71:ad:1f:93:
                    fe:93:db:08:ea:02:02:cd:2d:5f:49:16:9d:37:51:
                    56:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8D:EF:F2:A2:55:83:A0:97:29:62:E6:0D:84:36:2B:AD:DD:C8:DF
            X509v3 Authority Key Identifier:
                keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:fe:2d:f0:46:29:58:a7:61:7d:7e:aa:a6:0a:38:57:e0:3b:
         99:71:60:04:b4:92:d5:9d:2f:86:62:0d:19:75:19:26:37:ed:
         2e:fa:13:39:f2:76:82:8a:b4:63:02:ce:9a:45:db:37:fe:7a:
         1f:23:96:cd:b5:22:a2:5c:d8:08:0c:c9:82:34:c2:0f:6e:f6:
         b3:71:20:d8:aa:57:d6:0b:f8:eb:be:9b:35:a1:2c:80:85:97:
         a8:f9:52:db:75:aa:72:61:8b:9e:8c:80:51:2d:7f:75:75:97:
         57:7b:27:32:c3:2c:1b:27:cd:28:d3:44:71:d5:5d:d2:b4:48:
         4f:36:87:95:52:e4:38:9d:f0:82:07:17:13:e7:3a:c9:96:a2:
         1f:94:a1:54:ca:dc:e4:2b:6c:67:cc:fd:33:15:74:4f:4a:e4:
         f7:31:e6:32:78:a1:10:c0:a8:b6:64:33:51:e1:f4:2c:3d:ec:
         84:96:57:09:7a:96:1d:38:a7:80:02:53:ca:7e:f6:ba:25:22:
         cb:01:a8:56:ad:bf:52:38:08:45:92:4b:53:0e:93:64:1e:d6:
         be:11:a1:85:4a:a7:9f:ea:0e:70:b5:41:e3:ce:30:27:31:31:
         62:9a:ef:3d:70:6b:7f:91:57:e3:54:4f:7e:d7:a7:3f:dc:73:
         97:34:dd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:02:51 2025 by rpki-client