Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
File:                     vaPoqCMceH9rfxi8FGuV-1wDjtk.mft (raw, json)
Hash identifier:          onNWaXasH2mKC+srUrqiI44FK0eGl/IDlYPIykqrnLQ=
Subject key identifier:   3E:42:52:49:EA:36:B5:B5:3C:7B:A1:90:26:CC:65:FC:A5:56:AE:5F
Authority key identifier: BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9
Certificate issuer:       /CN=A91AE8D7/serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9
Certificate serial:       4F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
Manifest number:          4F
Signing time:             Tue 05 Aug 2025 07:53:08 +0000
Manifest this update:     Tue 05 Aug 2025 07:53:08 +0000
Manifest next update:     Tue 12 Aug 2025 07:53:08 +0000
Files and hashes:         1: vaPoqCMceH9rfxi8FGuV-1wDjtk.crl (hash: iXA3RCWqo4c+OX8fucx6t7XXZ9ximINPcy+GrRshQGM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl
                          rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 07:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE8D7, serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9
        Validity
            Not Before: Aug  5 07:53:08 2025 GMT
            Not After : Aug 12 07:53:08 2025 GMT
        Subject: CN=6891b864-b128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:44:cc:96:67:bf:d0:06:49:8d:de:aa:00:57:
                    fe:c1:5f:f0:81:c6:a1:90:9e:2f:b3:d3:b4:5b:ac:
                    a1:74:6f:19:2b:17:b1:f6:14:0a:f7:33:da:bc:41:
                    50:f3:20:31:10:04:ac:dd:88:04:37:4e:e5:aa:56:
                    94:3a:ff:f4:40:95:56:99:cd:d1:fa:16:d2:b1:ed:
                    dc:ae:29:de:5f:2a:7c:7d:a4:f0:c1:50:9f:3d:1e:
                    d2:b9:6e:ee:80:79:e8:c4:05:c5:97:72:bf:f1:b3:
                    f8:11:13:7a:48:66:0f:3e:3c:cf:70:cc:f5:55:c7:
                    c5:0b:4c:06:a7:bc:a9:8c:b2:86:2d:84:6d:74:d0:
                    7b:cc:59:d9:5c:9c:3a:07:ed:6b:cc:0c:c0:26:49:
                    f9:1f:07:0f:fc:71:f0:1d:40:1f:48:ba:d8:0f:34:
                    95:ed:64:39:45:c1:49:a1:67:54:b1:3b:94:6e:62:
                    8e:df:85:b1:32:9c:95:fd:a5:b9:2d:74:0d:08:3e:
                    06:e5:8d:7a:2b:fa:de:54:fc:a7:ce:82:71:6b:63:
                    3d:ec:f5:34:6c:b1:ef:0f:3c:a2:1d:c4:e5:77:e8:
                    b4:be:e9:b1:83:39:54:c3:8f:15:23:72:41:98:a7:
                    e9:62:59:5c:e1:02:17:32:f9:d6:64:55:f7:15:9b:
                    76:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:42:52:49:EA:36:B5:B5:3C:7B:A1:90:26:CC:65:FC:A5:56:AE:5F
            X509v3 Authority Key Identifier:
                keyid:BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:3b:1a:99:99:eb:29:02:17:f7:17:a2:37:a5:a3:04:1d:fc:
         30:ff:08:1d:54:89:09:b0:68:b7:27:9a:57:7f:cf:66:99:bf:
         57:e2:59:f6:20:6a:22:4d:db:49:22:d4:ff:a7:4e:08:d1:91:
         cf:b2:74:bc:11:52:f2:c7:f6:37:93:60:82:c4:45:2a:91:de:
         31:67:77:17:95:73:14:34:b6:2c:ce:b0:95:6a:67:26:99:ce:
         ac:ea:db:ac:02:74:9f:6d:9b:6a:60:d3:ce:ad:8d:49:cb:6c:
         64:a3:ed:35:a2:51:d9:87:7f:cc:d4:42:7e:5d:b1:0e:b5:8c:
         6f:34:99:c7:81:0f:cb:cd:c2:b6:6f:ba:5c:dd:90:1a:f9:03:
         45:fe:52:ab:f8:bd:4f:dc:ea:a0:22:14:54:f2:e5:81:fe:11:
         8b:95:93:c0:76:e5:71:e2:9e:06:4b:ae:ca:2c:94:38:46:02:
         6a:5d:31:4f:35:e6:2a:dd:53:c1:fb:7c:61:ab:9a:ee:6a:7b:
         65:57:08:b9:58:57:33:5a:66:b3:4d:b5:3e:2d:8e:ec:ba:2f:
         7f:bd:3b:38:48:02:85:96:4c:0e:d3:e1:a6:32:6d:ef:54:ca:
         ae:f6:c0:28:f5:59:04:5e:be:ac:48:51:a3:b8:f4:53:ef:93:
         79:31:0a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:16:50 2025 by rpki-client