Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
File:                     vkiLTmCsanOmVu_bxfpnoajegSo.mft (raw, json)
Hash identifier:          rYlrC8y+muQd5CX+yHIz+OqiKVE80gw1MbqUUTcQf9I=
Subject key identifier:   1E:84:5D:40:69:C4:67:8A:CD:93:8A:14:6D:56:F0:37:5A:C2:7D:B9
Authority key identifier: BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A
Certificate issuer:       /CN=A91ADE0A/serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A
Certificate serial:       22AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
Manifest number:          226F
Signing time:             Fri 08 Aug 2025 15:57:16 +0000
Manifest this update:     Fri 08 Aug 2025 15:57:15 +0000
Manifest next update:     Fri 15 Aug 2025 15:57:15 +0000
Files and hashes:         1: vkiLTmCsanOmVu_bxfpnoajegSo.crl (hash: oQZV+VUploa4XA5sYVn6yfp+ybaj6yCyJcUVHRYkY/4=)
                          2: 4AB8D38E178811EF95C8DF41C4F9AE02.roa (hash: bRjvCEzkjDm3JJYu7t1zkHD97hp8O/fwotkC6wIv1RQ=)
                          3: 815465903EB511E9881B6529C4F9AE02.roa (hash: gW74XIULKnrcRgyXZDwxsWWvrLPKxQLUY/wa7dOD1h8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl
                          rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8877 (0x22ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADE0A, serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A
        Validity
            Not Before: Aug  8 15:57:15 2025 GMT
            Not After : Aug 15 15:57:15 2025 GMT
        Subject: CN=68961e5c-1983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1c:77:de:7e:8a:7e:bc:80:05:76:95:69:2d:
                    d0:f6:f7:b5:85:de:0d:5c:44:34:c9:f1:95:94:f0:
                    94:58:61:7b:8a:bf:f6:0e:7a:13:b1:c0:f9:d3:47:
                    57:2f:6a:7d:fd:64:e1:b1:73:52:d3:c0:4c:68:39:
                    ed:5e:e0:26:1a:cf:19:34:30:b9:94:32:b6:8f:44:
                    51:b3:9a:05:9a:08:aa:9a:89:6a:24:00:0d:d8:2d:
                    0a:9d:2b:04:d0:66:50:27:73:85:d5:27:54:27:d3:
                    2f:7f:f6:ae:e6:52:69:b1:60:93:c8:89:b6:be:76:
                    26:9b:6f:5e:9d:f6:e7:fa:10:48:e4:9b:0e:68:5f:
                    4a:40:18:ea:68:69:dc:63:ec:be:57:6d:0c:7c:11:
                    41:27:fe:43:ef:5d:12:34:ee:e1:63:47:e5:5e:42:
                    56:ea:75:a9:8a:b1:75:b1:a2:96:b2:db:af:5f:c0:
                    5d:a6:fa:e3:25:22:ee:f1:4c:7e:ad:a8:0f:0c:30:
                    3b:5c:5e:4e:dd:82:56:3c:d8:33:88:81:d8:50:12:
                    f2:be:16:c0:fd:b7:63:2c:c3:73:82:e2:85:51:a1:
                    f1:a4:14:b1:52:a4:31:c9:f5:3b:64:b8:49:53:fc:
                    c2:63:ca:7c:82:66:22:86:9d:47:3a:7a:58:b3:a0:
                    f5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:84:5D:40:69:C4:67:8A:CD:93:8A:14:6D:56:F0:37:5A:C2:7D:B9
            X509v3 Authority Key Identifier:
                keyid:BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:60:6e:21:b4:48:a7:16:6c:a7:69:87:18:68:80:70:74:33:
         f8:4f:de:51:07:3b:e0:1f:a9:a3:9e:53:20:41:72:ea:9f:3e:
         1c:77:dd:a8:f4:d3:2b:4a:66:9e:8e:f7:a1:b8:20:98:d2:b5:
         60:18:6b:b1:35:32:3e:4a:63:5b:13:06:06:b2:13:ca:7f:f7:
         aa:ad:65:aa:bc:2f:c0:4f:a3:45:19:fa:36:1b:e4:0e:6f:8a:
         2f:90:23:86:3e:3d:e4:1c:77:fd:68:e3:de:1f:a8:2b:06:61:
         eb:4f:41:0c:ba:26:93:37:f4:44:40:ea:0b:36:66:41:60:f2:
         a1:cd:d6:6a:98:b0:80:47:1e:88:bb:23:ae:de:36:1e:b2:3a:
         46:fc:a2:09:96:2b:e6:3d:e9:a3:49:7b:c9:34:9c:be:75:db:
         e0:99:3f:c6:5f:98:1b:34:9f:2b:66:20:e3:e2:8b:5e:ae:25:
         e2:da:27:cb:58:64:9a:73:b4:a7:cb:31:33:a9:84:41:0f:0d:
         28:a6:c0:8f:1a:69:9a:82:76:c2:6a:9d:5c:f3:c5:ce:52:03:
         b9:31:d3:64:31:57:57:df:f6:0d:86:5a:71:1d:64:69:fe:c4:
         d8:96:98:25:c3:c0:ef:b3:ab:5a:47:74:4d:c9:17:bf:1d:24:
         90:41:5b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:34:45 2025 by rpki-client