Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
File:                     vKs-dvhO1DdC8qCBJCcI55nOG18.mft (raw, json)
Hash identifier:          uP9LFpTFXvFGs0RInsl1i3L7iJCpyBdwBOqZy1EcuQE=
Subject key identifier:   83:CE:89:24:B1:E8:6A:7A:51:6E:F1:F1:CB:0C:33:3C:76:4D:A0:C3
Authority key identifier: BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
Certificate issuer:       /CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
Certificate serial:       0146
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
Manifest number:          0130
Signing time:             Wed 05 Nov 2025 04:54:59 +0000
Manifest this update:     Wed 05 Nov 2025 04:54:59 +0000
Manifest next update:     Wed 12 Nov 2025 04:54:59 +0000
Files and hashes:         1: vKs-dvhO1DdC8qCBJCcI55nOG18.crl (hash: LSxuoJhBfXRst35c+w8Psv/64GxCCfJcrQBGb/gBSQU=)
                          2: E08658208D2D11F09327643FC4F9AE02.roa (hash: 41FC6Qh9FHv4UtlaWBSLbf5ObxYVTSL2scuznbl1Qds=)
                          3: 222F2952038511EFAF036327C4F9AE02.roa (hash: 0POds3yRjM0RD6yJRDt5kjZrzEVN1RcsA2tdedecI4c=)
                          4: A0AD48EA083011EF82AFFD44C4F9AE02.roa (hash: E2oXK+nP7XuyH0hDSL1uq1DEWcq+1W48Rez3w3+1ppw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl
                          rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 04:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC532, serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
        Validity
            Not Before: Nov  5 04:54:59 2025 GMT
            Not After : Nov 12 04:54:59 2025 GMT
        Subject: CN=690ad8a3-36a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b0:77:b6:85:e9:8d:c4:61:91:62:57:a8:dc:
                    73:9d:64:5c:80:8b:6d:2b:ed:4a:6d:f8:21:36:32:
                    cd:a8:4f:6c:c3:7c:53:e6:83:c8:29:f9:89:94:74:
                    39:32:8e:e3:6c:a5:14:6f:7e:f1:eb:d4:f2:9a:4c:
                    e6:b4:60:d7:a6:ef:a2:08:53:d7:9e:b2:30:d6:cc:
                    b7:4d:27:b9:dd:94:64:bb:4e:bb:32:3f:2a:dd:8e:
                    9d:8b:2a:9c:36:51:43:a0:a6:c2:19:21:21:a3:7a:
                    3d:38:33:2e:30:30:56:3e:d2:a6:e1:b8:a9:b8:7f:
                    94:b0:f5:2f:90:21:75:dc:38:a5:fb:e2:d7:b9:bc:
                    cc:d2:38:0e:7f:c2:dd:6c:5e:57:3a:3b:e7:29:e9:
                    57:cc:e6:d7:10:52:f1:6c:4b:e9:82:94:fc:6c:fe:
                    cd:af:03:5a:a7:3b:a9:d3:21:a1:d3:7d:26:b8:48:
                    e8:bc:fe:8c:a7:bc:15:3c:e5:70:1d:45:98:fa:15:
                    83:52:a7:7c:24:40:36:4a:49:12:02:58:64:fe:12:
                    21:53:ab:ab:9d:75:5c:15:98:ec:2a:bd:ae:e2:ea:
                    c9:7b:9d:88:60:c2:de:33:cb:be:0c:96:cc:6a:3c:
                    32:03:4a:1d:d4:32:54:da:53:1a:1a:e7:d7:b7:fb:
                    f2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CE:89:24:B1:E8:6A:7A:51:6E:F1:F1:CB:0C:33:3C:76:4D:A0:C3
            X509v3 Authority Key Identifier:
                keyid:BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:5d:43:56:39:57:3d:5e:04:52:50:02:41:63:8b:55:3f:4b:
         4c:9f:13:38:43:80:2c:eb:c0:8e:d3:53:83:c4:9d:72:c5:3d:
         ae:dd:ad:4b:62:ec:98:8f:08:50:9d:28:19:b0:08:d2:d6:c4:
         a6:c9:d8:92:60:71:cf:7c:2a:fa:a7:c4:61:63:c2:f8:c8:59:
         e4:dc:50:fb:ca:fb:94:2d:17:3c:0a:3b:d8:a7:e4:7f:8a:90:
         e8:fa:16:4d:d6:c0:ea:ac:b0:be:76:87:2a:b5:d7:52:9b:43:
         e0:b2:3f:48:28:26:36:ab:42:a5:52:35:2b:17:62:f4:dc:30:
         8f:5b:b1:f7:f7:a0:03:03:26:88:97:b7:eb:0d:85:04:c7:78:
         be:d9:48:72:8b:bd:8c:1f:3c:81:87:44:f8:ee:1b:55:bb:28:
         d3:bd:5e:98:49:c3:c7:f0:38:6a:67:ed:de:76:bf:99:b7:21:
         c3:38:5d:1a:2c:cc:d1:0b:9b:d3:00:19:2e:68:37:3a:0c:2f:
         9c:f8:83:c4:b8:b2:4c:51:6e:67:25:33:8a:bf:cf:da:a6:1d:
         94:ab:e7:d3:71:6f:2a:92:ff:5a:41:17:9a:43:b6:7c:e0:3a:
         9b:15:2d:1c:80:cb:52:22:82:38:12:88:60:c7:97:fa:9e:36:
         30:2d:f1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:47:35 2025 by rpki-client