Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
File:                     vkY_wZGbQUKyOCgTgn-3FtbukoM.mft (raw, json)
Hash identifier:          dcaEt8sNuaZnn40EOM6CEtc58Pn9sluMzjaNBlaYZ30=
Subject key identifier:   52:3F:A4:FA:44:19:9D:E4:6D:B6:07:4D:F0:15:E5:AE:1A:18:B3:01
Authority key identifier: BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83
Certificate issuer:       /CN=A91D40BF/serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283
Certificate serial:       07B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
Manifest number:          07A0
Signing time:             Sun 02 Nov 2025 21:24:09 +0000
Manifest this update:     Sun 02 Nov 2025 21:24:09 +0000
Manifest next update:     Sun 09 Nov 2025 21:24:09 +0000
Files and hashes:         1: vkY_wZGbQUKyOCgTgn-3FtbukoM.crl (hash: Lhh70a7z2/OXPjAnaPLPn/FSok5zaKiWnP105LnVG7o=)
                          2: 28543AA0BABA11EB8A51C234C4F9AE02.roa (hash: tLbuywK1hQsCi3a1AqRQB3esx6wP54LrqFgdAXcaBdM=)
                          3: ACEBC29CC5B911EBB41FAF2DC4F9AE02.roa (hash: XOt7bB+UgZTY8Thh+DvUt1JxAIDEDKn5j8X2t+ws97c=)
                          4: 2798B9A6BABA11EB8A51C234C4F9AE02.roa (hash: +zcjX2imATb1GbMG2fycsIcaiWvdU6/+K/wkiamqX6U=)
                          5: 58E4A6E8B60811F0AF40B71EC4F9AE02.roa (hash: 726+J+96Tj+HjEIghhxWecanICxHywnH4M9SjhljsVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl
                          rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 21:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1968 (0x7b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D40BF, serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283
        Validity
            Not Before: Nov  2 21:24:09 2025 GMT
            Not After : Nov  9 21:24:09 2025 GMT
        Subject: CN=6907cbf9-eae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9d:7c:b3:a4:e3:25:36:28:7f:05:8e:a2:e9:
                    7b:70:76:30:f5:94:f5:6a:9d:da:9e:34:cb:88:27:
                    14:a3:4b:93:76:8f:1f:c7:f3:54:41:d2:ac:7a:05:
                    9c:58:1d:5d:14:2e:e0:05:70:df:67:fe:bd:80:dc:
                    5c:8f:87:ee:a0:18:1b:96:78:7d:57:b5:47:87:0c:
                    5c:1b:f2:17:32:4f:64:0c:bb:44:f5:d1:7d:13:b6:
                    9e:68:6b:5d:02:53:d5:09:42:ce:6f:63:4c:ec:29:
                    2d:f9:59:db:6c:71:fd:07:70:cc:29:4e:97:fc:5d:
                    2c:8c:19:28:cd:3c:36:74:cb:b8:ed:70:fb:5f:8f:
                    cd:eb:7f:d6:83:d6:8f:38:df:2e:c2:17:89:b3:9c:
                    43:55:ce:43:00:ce:d8:f2:61:eb:05:e3:9b:ff:89:
                    22:d7:f7:e0:94:5c:26:84:c9:c9:99:af:f9:5d:82:
                    9e:dd:29:4a:9e:1d:10:b9:21:80:8f:c8:0c:81:05:
                    58:e8:e5:79:05:65:84:a3:41:b2:fb:c4:48:8f:76:
                    55:ef:3c:4f:22:61:a9:14:04:f1:aa:bd:49:c1:57:
                    f1:68:9a:c4:68:09:6d:60:d7:06:64:0a:29:50:d7:
                    0c:c1:64:92:5a:fb:73:2d:46:cc:95:cf:03:7e:3b:
                    9b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:3F:A4:FA:44:19:9D:E4:6D:B6:07:4D:F0:15:E5:AE:1A:18:B3:01
            X509v3 Authority Key Identifier:
                keyid:BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:0c:eb:4f:d0:33:99:23:5c:64:e2:b0:3a:03:56:ab:0c:be:
         44:e4:e0:6f:9b:ac:7c:c5:c3:3f:ce:6a:3b:a5:37:a7:96:25:
         85:4b:ef:d3:14:b6:b0:83:f3:63:4f:9b:2c:81:3c:35:bc:c5:
         85:26:02:c1:35:a6:08:10:ac:e9:d4:cc:91:74:43:0e:89:70:
         84:fc:5b:11:2e:a9:ee:5a:79:52:5b:4a:08:d2:f4:17:1b:43:
         d5:4a:1e:f5:08:79:e8:8d:3a:c2:dc:8b:37:8c:b5:b2:b7:67:
         62:16:14:2a:c5:53:b4:76:b5:8c:9b:1d:39:28:53:11:88:c5:
         61:2a:15:d5:9b:6f:26:6a:b1:07:1c:e7:f4:18:70:a7:22:9a:
         91:28:e1:3b:4a:4f:64:d8:fc:ed:23:fc:a1:c4:3b:4e:c2:a7:
         4b:ea:9f:00:a5:f8:40:46:b5:50:6e:01:a2:3a:d0:bb:8c:39:
         4c:b1:15:fe:a0:2c:67:4e:81:12:a6:08:dd:d4:49:aa:82:d9:
         de:f2:37:ee:27:d4:cb:68:77:80:f9:62:9d:35:fa:5b:73:b6:
         92:43:ab:b4:49:09:71:13:bf:6c:6a:c0:3f:d8:17:1a:6f:54:
         8f:63:32:a0:76:d4:62:7d:40:1d:5e:ef:25:5b:d9:a3:a4:7e:
         2d:70:81:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:35:48 2025 by rpki-client