Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
File:                     ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft (raw, json)
Hash identifier:          16hM1voZpt9p3n8szmomzeH+B7bx/X5nMd0hhUty8Es=
Subject key identifier:   24:F4:68:8D:6C:3F:85:EF:75:18:3B:E7:1F:D9:78:24:76:51:26:07
Authority key identifier: 6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32
Certificate issuer:       /CN=A91D4E45/serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332
Certificate serial:       067B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
Manifest number:          0673
Signing time:             Thu 12 Jun 2025 22:01:40 +0000
Manifest this update:     Thu 12 Jun 2025 22:01:39 +0000
Manifest next update:     Thu 19 Jun 2025 22:01:39 +0000
Files and hashes:         1: ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl (hash: kK4lJOVwJo7wAdGfiRiWUJ0q9oh5Z3GIj2qgLskFvxA=)
                          2: 1B25BF167FE111EBB6C0941AC4F9AE02.roa (hash: UCps9/WJGo9HkezcUcRKvCp07t2PRwHy6+kCIMyeCTk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl
                          rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 22:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1659 (0x67b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4E45, serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332
        Validity
            Not Before: Jun 12 22:01:39 2025 GMT
            Not After : Jun 19 22:01:39 2025 GMT
        Subject: CN=684b4e43-baba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0f:7f:fd:28:28:7a:48:18:d5:c4:b1:c0:57:
                    7e:8b:4b:63:3e:46:48:1b:b9:fd:ba:26:91:6f:b4:
                    e5:5a:56:a3:f3:e7:0d:44:8a:e4:f5:ab:d4:ba:52:
                    51:85:c1:b5:a8:c4:98:82:42:b3:d7:1a:b2:e5:99:
                    5f:1c:56:0b:60:59:f5:e5:e9:e8:20:b0:c0:46:17:
                    75:fa:b0:56:f1:29:50:a6:aa:5a:72:a5:8d:ba:aa:
                    49:1d:97:c6:44:94:58:cc:9a:48:82:13:7c:04:1a:
                    64:15:54:db:ca:54:0e:18:0f:cb:c2:9d:b1:74:9d:
                    ef:c0:24:d9:df:1f:30:1a:a1:42:0f:23:ff:35:54:
                    94:6e:26:d5:9b:05:cf:54:19:64:93:fd:f9:09:f5:
                    bc:09:69:0c:c7:44:e5:c1:4f:22:1f:c3:a8:df:c5:
                    e6:a6:25:ee:3c:3e:f3:aa:03:a1:bf:cc:45:8b:d8:
                    93:9e:06:08:dd:c4:ce:bb:29:60:8b:53:38:1c:f1:
                    78:f8:2c:d1:de:20:17:9b:90:27:d2:ff:8b:3b:37:
                    9c:63:58:26:37:dd:e5:b4:6a:eb:8f:c1:4c:46:e3:
                    01:7b:44:33:84:7b:42:0c:10:14:5d:32:1c:1f:93:
                    85:70:0c:65:cd:74:f9:0e:24:b8:66:0d:d5:1d:6c:
                    6b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F4:68:8D:6C:3F:85:EF:75:18:3B:E7:1F:D9:78:24:76:51:26:07
            X509v3 Authority Key Identifier:
                keyid:6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:43:bb:89:c0:c2:d0:67:d3:0e:6b:07:15:26:0a:f7:0b:bf:
         e0:6e:aa:b5:fc:9e:77:50:33:e6:51:ea:d1:5c:3a:f3:b8:2d:
         f8:10:62:93:95:1e:98:79:e8:d4:bb:ea:a6:f2:22:e4:d2:b5:
         d4:56:11:30:7e:0b:d9:69:f7:87:c7:7c:a8:8d:bd:c9:12:f0:
         9a:44:8c:3a:f5:67:a4:55:c2:d0:24:f3:f3:55:50:65:ed:aa:
         dd:8a:64:e1:f9:53:a7:6c:e5:5a:c2:fe:fd:81:8c:98:8d:ad:
         67:3e:f6:38:79:d6:5e:da:6c:05:4d:47:f5:c1:b3:d0:f4:54:
         e1:bb:ab:e0:e7:3e:de:b3:fc:b9:62:1a:ff:65:f6:7d:b7:06:
         b9:78:44:a5:13:02:fd:f4:01:0f:cb:3a:99:c1:93:c0:19:4d:
         3a:d6:9f:99:a3:d1:81:2a:91:34:cd:85:55:7c:4b:a9:2e:ac:
         6f:4d:95:c4:89:2c:e4:9d:a6:a0:2d:96:90:d9:77:09:26:cb:
         a1:92:60:0a:23:1b:b8:2b:ad:d4:b0:bf:6a:4f:26:1c:75:ac:
         ee:9a:46:bd:bc:d9:c0:e7:f2:9e:e7:2a:d3:d2:ff:94:eb:b4:
         c4:06:cc:dc:ce:93:81:ef:eb:a6:33:f4:53:71:25:ae:66:7b:
         38:b9:ef:d6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDRFNDUxMTAvBgNVBAUTKDZBQkZFRkM4MzQxOTExNkVGMzRBRjNBNUE3RkY0OERF
MDNCRTgzMzIwHhcNMjUwNjEyMjIwMTM5WhcNMjUwNjE5MjIwMTM5WjAYMRYwFAYD
VQQDEw02ODRiNGU0My1iYWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxQ9//SgoekgY1cSxwFd+i0tjPkZIG7n9uiaRb7TlWlaj8+cNRIrk9avUulJR
hcG1qMSYgkKz1xqy5ZlfHFYLYFn15enoILDARhd1+rBW8SlQpqpacqWNuqpJHZfG
RJRYzJpIghN8BBpkFVTbylQOGA/Lwp2xdJ3vwCTZ3x8wGqFCDyP/NVSUbibVmwXP
VBlkk/35CfW8CWkMx0TlwU8iH8Oo38XmpiXuPD7zqgOhv8xFi9iTngYI3cTOuylg
i1M4HPF4+CzR3iAXm5An0v+LOzecY1gmN93ltGrrj8FMRuMBe0QzhHtCDBAUXTIc
H5OFcAxlzXT5DiS4Zg3VHWxr/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCT0aI1s
P4XvdRg75x/ZeCR2USYHMB8GA1UdIwQYMBaAFGq/78g0GRFu80rzpaf/SN4DvoMy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEU0NS9GOEYxQzE5NDdG
REUxMUVCQTE4OENGMTRDNEY5QUUwMi9hcl92eURRWkVXN3pTdk9scF85STNnTy1n
ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FyX3Z5RFFaRVc3elN2T2xwXzlJM2dPLWd6SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NEU0NS9GOEYxQzE5NDdGREUxMUVCQTE4OENGMTRDNEY5QUUwMi9hcl92eURRWkVX
N3pTdk9scF85STNnTy1nekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBcQ7uJwMLQZ9MOawcVJgr3C7/gbqq1/J53UDPmUerRXDrzuC34EGKT
lR6YeejUu+qm8iLk0rXUVhEwfgvZafeHx3yojb3JEvCaRIw69WekVcLQJPPzVVBl
7ardimTh+VOnbOVawv79gYyYja1nPvY4edZe2mwFTUf1wbPQ9FThu6vg5z7es/y5
Yhr/ZfZ9twa5eESlEwL99AEPyzqZwZPAGU061p+Zo9GBKpE0zYVVfEupLqxvTZXE
iSzknaagLZaQ2XcJJsuhkmAKIxu4K63UsL9qTyYcdazumka9vNnA5/Ke5yrT0v+U
67TEBszczpOB7+umM/RTcSWuZns4ue/W
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:30:13 2025 by rpki-client