Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft
File:                     Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft (raw, json)
Hash identifier:          gBQTFsJHDz/gSIxQl9n4FHom+qvR/WzlFp3BcaASSCo=
Subject key identifier:   A4:E8:FC:B7:79:1F:C4:03:44:57:1B:11:9A:43:97:AD:C0:84:43:8F
Authority key identifier: 56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00
Certificate issuer:       /CN=A91ADB98/serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800
Certificate serial:       022A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft
Manifest number:          021F
Signing time:             Sat 09 Aug 2025 02:32:28 +0000
Manifest this update:     Sat 09 Aug 2025 02:32:28 +0000
Manifest next update:     Sat 16 Aug 2025 02:32:28 +0000
Files and hashes:         1: Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl (hash: kr1rqLPwIO0mlSa4joIbGLW3p57ImvRHJO2fHtgKNuA=)
                          2: 310AEC7A5B7C11EDAAFAB831C4F9AE02.roa (hash: LZXk13HoV3M3PJSIAKsfySeBLEgNErX9ux8+6mN8duA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl
                          rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554 (0x22a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADB98, serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800
        Validity
            Not Before: Aug  9 02:32:28 2025 GMT
            Not After : Aug 16 02:32:28 2025 GMT
        Subject: CN=6896b33c-fdda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2a:6c:7b:94:c2:df:74:50:38:f1:ab:9d:f4:
                    c9:73:c5:99:67:a3:b7:f9:39:74:cc:5b:24:42:e4:
                    a8:31:a0:76:c5:7b:c0:1f:f7:51:02:a9:5f:e4:1d:
                    7a:9c:c2:ec:24:00:ee:57:c5:be:fd:40:2b:ca:84:
                    5e:99:f7:2d:c4:c4:45:e8:e4:85:ca:f1:04:14:a8:
                    c4:78:55:f6:cf:d7:e5:e9:04:4e:7e:14:28:09:8f:
                    1c:1d:d1:b3:63:d2:5d:11:42:03:9c:41:69:4d:d2:
                    e3:dd:9e:17:81:52:aa:1e:ef:bb:b8:5f:09:8e:b5:
                    ac:21:9a:6b:0f:70:a1:b4:e4:9d:4e:9b:da:60:16:
                    ff:20:2e:0c:29:84:ec:d8:88:18:cb:99:ac:38:16:
                    8b:ca:31:d6:46:e1:80:20:c7:d4:d7:9a:34:b2:b4:
                    67:70:57:07:6e:fc:87:dd:1b:bc:6c:26:fe:ca:21:
                    3c:02:c5:34:85:e4:8e:5b:48:13:b6:c3:16:3b:3b:
                    b4:db:0a:fb:99:c2:ec:f2:55:26:37:aa:d3:f3:b3:
                    9d:35:b6:92:f5:23:f2:14:2b:17:b6:3d:37:79:5c:
                    c0:b4:b9:5b:6b:f0:ce:39:08:8f:a8:99:46:e2:d0:
                    ff:ff:a0:60:dc:bb:52:b6:97:bb:53:77:af:47:57:
                    39:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E8:FC:B7:79:1F:C4:03:44:57:1B:11:9A:43:97:AD:C0:84:43:8F
            X509v3 Authority Key Identifier:
                keyid:56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:93:06:b1:15:c0:22:d9:3b:b2:fe:5e:b6:6a:75:3c:b4:dd:
         ba:75:4a:a9:e5:ef:d6:90:55:15:c1:1c:a1:52:51:92:09:f6:
         f0:e8:29:7a:99:aa:79:fa:0d:5a:48:23:63:81:a8:1d:ca:84:
         c7:d3:27:57:c3:75:ed:45:64:8f:44:f7:c5:f6:17:82:ac:12:
         ce:45:ac:b6:93:f4:8d:d6:28:92:12:f1:00:36:48:2a:d6:56:
         b2:5e:5d:a4:5a:9a:80:be:e6:67:1e:e4:24:f8:cc:95:f8:34:
         50:ea:8e:93:10:9c:81:f7:e8:06:95:06:cf:80:36:d3:08:79:
         81:a6:7b:99:69:73:0a:87:2b:26:68:0e:20:d0:86:4b:be:fa:
         9a:4a:15:7c:7e:2f:76:d2:02:2d:d5:54:8c:54:ff:d1:90:cd:
         94:96:e0:c6:35:45:a2:56:29:11:d6:92:7d:e9:69:a4:85:de:
         7a:a1:5e:98:ad:4b:16:04:f7:42:55:51:1c:79:9d:ce:a8:01:
         31:05:40:40:25:42:8d:b8:ca:14:be:ab:18:9b:d0:f2:6e:13:
         a7:29:8f:ce:e6:8b:ad:f9:99:35:70:34:4f:e0:3d:8e:9a:4e:
         45:c8:2a:8c:06:34:99:a9:51:95:3c:41:88:fc:5d:81:da:31:
         5a:c7:ce:3c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QURCOTgxMTAvBgNVBAUTKDU2N0Y5QUIyQjJDNzk2OTI2ODVDMDMwNTVBRjk2OUU2
MEI2NkI4MDAwHhcNMjUwODA5MDIzMjI4WhcNMjUwODE2MDIzMjI4WjAYMRYwFAYD
VQQDEw02ODk2YjMzYy1mZGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwSpse5TC33RQOPGrnfTJc8WZZ6O3+Tl0zFskQuSoMaB2xXvAH/dRAqlf5B16
nMLsJADuV8W+/UAryoRemfctxMRF6OSFyvEEFKjEeFX2z9fl6QROfhQoCY8cHdGz
Y9JdEUIDnEFpTdLj3Z4XgVKqHu+7uF8JjrWsIZprD3ChtOSdTpvaYBb/IC4MKYTs
2IgYy5msOBaLyjHWRuGAIMfU15o0srRncFcHbvyH3Ru8bCb+yiE8AsU0heSOW0gT
tsMWOzu02wr7mcLs8lUmN6rT87OdNbaS9SPyFCsXtj03eVzAtLlba/DOOQiPqJlG
4tD//6Bg3LtStpe7U3evR1c5GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTo/Ld5
H8QDRFcbEZpDl63AhEOPMB8GA1UdIwQYMBaAFFZ/mrKyx5aSaFwDBVr5aeYLZrgA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9FMkRBODUxODQ5
MjExMUVEQUJENTlDNTNDNEY5QUUwMi9Wbi1hc3JMSGxwSm9YQU1GV3ZscDVndG11
QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZuLWFzckxIbHBKb1hBTUZXdmxwNWd0bXVBQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
REI5OC9FMkRBODUxODQ5MjExMUVEQUJENTlDNTNDNEY5QUUwMi9Wbi1hc3JMSGxw
Sm9YQU1GV3ZscDVndG11QUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCxkwaxFcAi2Tuy/l62anU8tN26dUqp5e/WkFUVwRyhUlGSCfbw6Cl6
map5+g1aSCNjgagdyoTH0ydXw3XtRWSPRPfF9heCrBLORay2k/SN1iiSEvEANkgq
1layXl2kWpqAvuZnHuQk+MyV+DRQ6o6TEJyB9+gGlQbPgDbTCHmBpnuZaXMKhysm
aA4g0IZLvvqaShV8fi920gIt1VSMVP/RkM2UluDGNUWiVikR1pJ96Wmkhd56oV6Y
rUsWBPdCVVEceZ3OqAExBUBAJUKNuMoUvqsYm9DybhOnKY/O5out+Zk1cDRP4D2O
mk5FyCqMBjSZqVGVPEGI/F2B2jFax848
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:52:25 2025 by rpki-client