Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
File:                     voUqizt-pcWsWlKqy4UqAaTN0II.mft (raw, json)
Hash identifier:          kJ8u8MTYJHwOYcGiKdB+mwcC4LiAYmlbXPuOnE1E++s=
Subject key identifier:   08:60:E2:80:33:EC:05:20:26:2E:77:38:5A:57:BB:55:B8:6F:17:81
Authority key identifier: BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
Certificate issuer:       /CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Certificate serial:       0485
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
Manifest number:          046F
Signing time:             Mon 11 Aug 2025 00:21:38 +0000
Manifest this update:     Mon 11 Aug 2025 00:21:38 +0000
Manifest next update:     Mon 18 Aug 2025 00:21:38 +0000
Files and hashes:         1: voUqizt-pcWsWlKqy4UqAaTN0II.crl (hash: onLwSpRTFPDJFhCnIGHFddutQOV6SLSSjlSgZZsyRww=)
                          2: D717B9F0B7E511EFB5F63E6DC4F9AE02.roa (hash: R/nnjeAR+tZePhFeIgEDIZOhg5pi4qQT+4iwQfx8ekU=)
                          3: D254B444679111EF8A2C9062C4F9AE02.roa (hash: KIM/sEwaQaYFPC8qF/5+qRUkUFtySui4RoXzgpLXzmc=)
                          4: 14F55DEAB7E611EF9B9D9F6DC4F9AE02.roa (hash: BIPMm9ibDgvfx7NU935+UV2sEA5f17RgI+qcbtg58kw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
                          rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1157 (0x485)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF428, serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
        Validity
            Not Before: Aug 11 00:21:38 2025 GMT
            Not After : Aug 18 00:21:38 2025 GMT
        Subject: CN=68993792-db0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d1:73:a4:8c:2b:b1:50:65:d3:55:17:0a:f6:
                    57:9b:2c:d8:f2:67:fc:e9:e9:9e:52:cb:a6:30:52:
                    7b:62:88:cc:d7:ac:04:89:0f:d1:74:7f:50:b6:7a:
                    18:12:8a:24:8a:84:2a:3b:25:87:f3:7b:9c:7b:45:
                    b9:4a:63:99:6a:4e:ec:d2:bf:a9:f0:48:cc:39:c8:
                    30:eb:90:8d:ee:f9:0a:b0:6c:28:47:91:17:5d:68:
                    b6:c8:f6:e3:f7:46:2f:2e:b0:d4:b1:1f:2d:52:61:
                    9e:97:c1:bf:96:4b:d6:d3:ca:ac:73:c6:f9:81:7f:
                    c5:f4:29:e5:9f:87:dc:60:59:91:6d:c1:2d:b9:04:
                    fc:52:ac:dd:c7:c1:c7:2e:2e:5e:8b:6f:f4:d3:bf:
                    7d:56:34:0c:77:8d:bc:a6:48:89:24:32:ed:31:4b:
                    e0:66:b5:e2:0a:23:55:da:4d:4f:1c:bd:b1:e7:5d:
                    91:64:c4:10:86:28:73:f2:1e:94:f2:c8:d2:b7:61:
                    b3:63:19:de:79:43:3b:10:69:c2:80:5a:0e:ea:0b:
                    41:24:7e:46:ec:7a:d6:db:c2:4e:87:9e:7d:eb:8a:
                    26:64:d5:22:75:35:06:f8:15:58:8b:f9:c4:f3:a9:
                    7d:c9:82:55:f1:3c:91:74:12:e5:f1:41:f7:97:f3:
                    83:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:60:E2:80:33:EC:05:20:26:2E:77:38:5A:57:BB:55:B8:6F:17:81
            X509v3 Authority Key Identifier:
                keyid:BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:67:6b:23:0d:c0:10:be:43:ef:47:47:5f:af:40:83:65:65:
         11:98:e4:67:08:d0:cc:c6:73:19:45:e9:79:f3:03:d9:53:61:
         eb:35:2d:30:b0:ed:b5:7c:e0:52:4a:22:bd:f8:ac:e7:f0:31:
         3a:4a:f4:a2:51:4f:96:17:08:ae:34:c9:e2:68:98:f3:20:e0:
         1e:43:33:41:d3:d6:6f:ed:f7:13:1b:b5:34:ab:5a:7f:1f:42:
         1d:21:60:f1:51:4d:27:fe:e0:dd:d5:b4:da:fb:9a:66:2a:08:
         07:ae:54:fe:46:3b:85:70:8f:e8:25:66:1b:9b:d9:ce:ee:09:
         cb:5e:cb:af:13:9c:be:e9:eb:62:63:4a:97:99:11:ba:68:74:
         40:eb:a0:77:f0:53:13:b3:1a:c2:94:2f:6c:06:10:20:32:cf:
         a2:0c:00:08:8a:53:ff:65:ed:21:52:84:f6:86:3a:29:6d:a5:
         27:11:9b:fb:23:84:b7:20:9e:f4:2b:67:21:85:e0:fd:6e:d3:
         2e:a2:6a:13:f9:dd:cb:3f:59:f4:56:2e:68:56:df:13:a1:b3:
         d0:e8:50:4b:b9:a3:76:e1:ff:3e:1f:79:93:f9:2e:ac:06:23:
         c0:a6:7e:79:8b:37:aa:1b:bc:de:c8:f2:3e:bf:e3:5b:8f:6d:
         d5:25:92:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:28:20 2025 by rpki-client