Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft
File:                     VFxHwOQxMzjcm0QCwSuty06YV8E.mft (raw, json)
Hash identifier:          yNN8xlE/b5XMDBbHMYsdImvN18TCjrGZx6qWr4ARFE4=
Subject key identifier:   9A:BB:FE:35:5D:AB:B3:5F:B2:8B:F4:D0:D1:06:97:83:24:98:C9:01
Authority key identifier: 54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1
Certificate issuer:       /CN=A91FB103/serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1
Certificate serial:       0130
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft
Manifest number:          0126
Signing time:             Fri 13 Jun 2025 03:46:12 +0000
Manifest this update:     Fri 13 Jun 2025 03:46:12 +0000
Manifest next update:     Fri 20 Jun 2025 03:46:12 +0000
Files and hashes:         1: VFxHwOQxMzjcm0QCwSuty06YV8E.crl (hash: +FOI6tqbJkJn/67x8m11xjNZLaDneIlRJZ5cwbVM2hA=)
                          2: 77F8EAD29CF811EFA2E0CD6AC4F9AE02.roa (hash: Ain3qdd9woinL4inH/8nG99VHakyMNpv4v8rmQWJ1Bs=)
                          3: 0F440AB26E7711EFAA4A1C1AC4F9AE02.roa (hash: O1np95hbIM7tMbwqTYjzC3DrWBrLxkB/hTITnk5MJww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.crl
                          rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 03:46:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304 (0x130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB103, serialNumber=545C47C0E4313338DC9B4402C12BADCB4E9857C1
        Validity
            Not Before: Jun 13 03:46:12 2025 GMT
            Not After : Jun 20 03:46:12 2025 GMT
        Subject: CN=684b9f04-cc7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ea:da:7f:c2:b7:7e:f7:1d:aa:bd:77:be:f1:
                    0b:9f:a3:08:e3:b9:28:fd:a2:38:cd:ae:3d:f8:22:
                    a8:0b:7b:f7:16:03:83:78:3a:9c:98:58:1d:e2:5f:
                    7d:0c:18:a0:c9:98:25:c4:8f:68:d2:d7:64:46:7f:
                    be:ef:38:bd:b1:8d:51:a7:f7:a6:11:30:e2:69:f3:
                    6a:0e:32:7c:02:4f:82:1c:46:07:34:e7:ec:bc:25:
                    fe:d3:03:04:b8:f6:fb:be:42:39:41:06:87:47:a3:
                    d9:99:0c:97:77:65:d1:65:e0:ea:bf:7c:bb:45:2d:
                    00:cd:2b:a9:e3:07:0c:44:b8:a3:99:84:90:a2:0e:
                    a6:76:0d:4c:ed:14:1b:98:65:ca:6c:09:88:e3:fb:
                    71:6c:c8:68:c9:4d:01:9c:ef:07:44:ca:d2:74:b5:
                    e4:ff:7d:2c:27:bb:f6:27:c5:ef:74:4d:91:00:ad:
                    c8:9b:9e:4e:65:86:a2:9c:9e:8d:43:00:d0:f3:59:
                    5b:7f:18:1f:4c:16:4e:c0:1a:d0:0b:5c:29:6d:ee:
                    5d:70:99:f9:da:63:71:14:c5:5c:8d:cd:aa:1d:73:
                    a0:55:42:c3:fc:7c:f7:af:64:99:a2:82:f8:d5:a1:
                    c0:ae:a6:cc:3d:0e:17:d8:a5:8e:28:db:50:c4:c6:
                    2e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BB:FE:35:5D:AB:B3:5F:B2:8B:F4:D0:D1:06:97:83:24:98:C9:01
            X509v3 Authority Key Identifier:
                keyid:54:5C:47:C0:E4:31:33:38:DC:9B:44:02:C1:2B:AD:CB:4E:98:57:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFxHwOQxMzjcm0QCwSuty06YV8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB103/2FB9850893FB11EE968EE442C4F9AE02/VFxHwOQxMzjcm0QCwSuty06YV8E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:81:5b:e3:26:a3:53:6d:68:ee:dd:c5:b9:53:7b:74:53:c7:
         09:16:b4:0e:5b:44:1e:db:db:39:61:e6:4a:71:ec:ce:84:09:
         d1:59:a6:5c:2d:7a:eb:7d:d8:9d:ca:52:1e:b7:b3:f7:f3:cb:
         b1:d5:09:ce:fa:45:73:fd:d1:04:57:7d:b6:e0:26:be:7f:50:
         1c:99:8d:9b:d4:12:6f:b6:13:de:5e:38:4d:d4:9d:aa:be:02:
         1e:b3:2b:69:0a:88:5b:f7:e7:0d:40:cd:f8:fc:c2:8f:52:76:
         ab:0f:5b:c0:94:24:a6:76:07:1b:0b:a2:45:8d:c0:eb:bf:20:
         34:ce:62:63:a7:cf:d0:4e:44:4f:df:93:b9:32:1c:7a:d4:8f:
         60:26:83:74:7d:e5:0c:c5:ab:d5:fd:e2:b9:50:62:0a:f8:69:
         ae:d0:46:02:11:5a:03:21:93:e4:8c:6a:42:c6:8d:3c:39:be:
         94:79:0e:ee:f3:6c:be:11:ce:5c:72:0b:91:4a:ae:40:a0:98:
         e0:6b:99:bd:31:cb:be:75:9c:cc:33:47:ad:0b:fd:10:78:81:
         51:9a:4a:b7:d4:44:61:1a:e0:f0:9c:0e:69:bc:e5:5b:64:4f:
         18:39:f1:e3:cd:1c:92:67:00:38:cd:6d:d2:e0:de:f4:a0:21:
         8b:67:db:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:37:55 2025 by rpki-client