Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
File:                     3VM9EaneKrkYCFCDvoLVFDTfRUA.mft (raw, json)
Hash identifier:          skMng4JWYe5LHuVaViih7oI+rIzLLwcOBkWs/+hxSgw=
Subject key identifier:   B8:0D:44:D7:91:2B:E0:46:B3:37:12:CE:0C:A2:08:9E:FE:EB:E4:C3
Authority key identifier: DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40
Certificate issuer:       /CN=A91C8EB6/serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540
Certificate serial:       15EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
Manifest number:          15E2
Signing time:             Fri 08 Aug 2025 16:55:56 +0000
Manifest this update:     Fri 08 Aug 2025 16:55:55 +0000
Manifest next update:     Fri 15 Aug 2025 16:55:55 +0000
Files and hashes:         1: 3VM9EaneKrkYCFCDvoLVFDTfRUA.crl (hash: fNjkWLUEMQ+ehooaAERjTEs3Vu5mvG/aqHCMS1fmRyk=)
                          2: 116B4B06282011E8BBA2F625C4F9AE02.roa (hash: Xq7aDp/RYbNUbH8lamtxHtlBICT7QgYLuIupGmw4yJo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl
                          rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5610 (0x15ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8EB6, serialNumber=DD533D11A9DE2AB918085083BE82D51434DF4540
        Validity
            Not Before: Aug  8 16:55:55 2025 GMT
            Not After : Aug 15 16:55:55 2025 GMT
        Subject: CN=68962c1c-a77a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6b:4d:2b:b9:17:53:eb:05:ca:e2:25:57:22:
                    a0:32:8a:41:90:9a:57:18:cc:e2:6f:28:7e:eb:36:
                    97:e2:9a:37:d0:41:76:2f:18:b2:a4:34:81:2e:4f:
                    0c:a3:1f:bc:3e:16:41:df:af:40:75:24:2f:49:5e:
                    7c:f0:86:56:02:94:99:ad:fa:37:4a:be:52:e6:f8:
                    dc:4c:1a:e5:e4:e0:73:cb:3c:49:43:9a:65:2d:b6:
                    dd:c9:1c:74:ad:a9:90:dd:23:45:1a:e7:ea:eb:49:
                    8c:6c:cd:9a:eb:d9:f0:7f:1d:3c:36:49:d9:a0:9e:
                    ef:67:b9:a0:18:f3:bf:a0:5c:d0:19:55:4b:68:50:
                    64:b2:e9:0a:ba:a3:0e:79:fe:ee:d1:59:5a:7f:13:
                    ce:03:e8:7d:6a:9a:27:0d:7d:7d:13:f3:b5:5e:ed:
                    e3:7e:89:3b:20:54:32:ca:c6:74:a4:5c:b4:a8:37:
                    86:6d:2a:a7:88:2d:6c:ea:53:b2:e3:e5:8e:fa:d3:
                    bd:e9:a0:6d:3a:bd:97:fa:86:b3:49:4d:b0:a5:10:
                    ba:18:2f:0e:84:4e:b8:bd:1f:77:29:2b:1a:e7:a0:
                    7f:67:d5:cb:de:0f:8e:16:47:75:0e:f0:30:19:12:
                    4d:fb:b5:b8:c5:c2:e0:a5:d2:5a:cf:35:2c:1e:76:
                    9f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0D:44:D7:91:2B:E0:46:B3:37:12:CE:0C:A2:08:9E:FE:EB:E4:C3
            X509v3 Authority Key Identifier:
                keyid:DD:53:3D:11:A9:DE:2A:B9:18:08:50:83:BE:82:D5:14:34:DF:45:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3VM9EaneKrkYCFCDvoLVFDTfRUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EB6/108F53AE281F11E8B2038224C4F9AE02/3VM9EaneKrkYCFCDvoLVFDTfRUA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:67:75:cc:d1:4e:94:9c:a5:8a:2d:0b:2b:13:f8:f5:7c:a2:
         ae:6e:91:3b:14:2a:e4:3a:f5:4e:c6:6b:c0:fd:c5:00:ef:2e:
         c5:63:5f:41:93:eb:05:c1:e4:bb:ba:3d:c7:c1:de:36:28:63:
         43:e7:73:39:73:63:92:70:85:bf:a0:6a:dc:b9:be:36:f7:fa:
         d7:58:bd:7a:9d:e4:2a:0a:28:6d:f5:74:35:32:57:b6:8b:1e:
         88:8c:33:fd:8d:3e:4b:da:be:23:d1:0d:95:0a:b3:3c:de:1b:
         85:51:e7:17:3d:4c:29:64:e5:84:20:15:e5:5b:60:bb:73:4c:
         b9:11:d6:bf:a1:d4:23:6b:e6:10:ba:a9:f1:4f:9d:97:55:88:
         8a:23:4a:fd:81:ef:48:38:15:da:f5:93:d5:4b:1b:0c:d3:49:
         2a:b0:8e:52:ef:79:ee:c3:e3:84:42:be:ef:bb:0b:11:aa:ed:
         a5:ba:89:2b:40:d2:2c:97:c4:1b:c4:4c:af:b3:b0:b3:e5:ba:
         c4:72:10:0f:72:e6:55:1b:cf:98:02:f7:c3:61:7f:29:78:5d:
         2d:73:3f:64:66:a5:0e:bb:17:bf:f8:f0:aa:92:77:e7:04:6c:
         36:f7:12:90:12:33:98:08:07:2f:88:cb:34:6d:f5:0b:a9:38:
         70:b3:26:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:16:39 2025 by rpki-client