Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
File:                     v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft (raw, json)
Hash identifier:          h245dTM8pD6FiluCtbFbtTfNS0chiH7p+2HutEy7UFM=
Subject key identifier:   DD:E1:39:69:68:9E:4E:A9:7A:CE:16:B5:E0:D6:ED:A1:F6:E8:E0:10
Authority key identifier: BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1
Certificate issuer:       /CN=A91324D4/serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1
Certificate serial:       065A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
Manifest number:          063E
Signing time:             Fri 08 Aug 2025 23:10:59 +0000
Manifest this update:     Fri 08 Aug 2025 23:10:58 +0000
Manifest next update:     Fri 15 Aug 2025 23:10:58 +0000
Files and hashes:         1: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl (hash: bospCw44dJA1CuFw9OvZPc04cb7TQt8L9QaqxIYoyh4=)
                          2: DD643EBCE00C11ED8C71C709C4F9AE02.roa (hash: tNDEmIxy5H25Y3zlO9rXFUC8hfA45BbpRsPK4rM8u7s=)
                          3: 8A88CCDC667911EE9D7DA167C4F9AE02.roa (hash: 9S57tdyd45wHLsInsTnI/GZly1K4hEDfcQJTNYuSOFQ=)
                          4: 236C6906A73F11EBA1751E33C4F9AE02.roa (hash: JyPetDHabfuANEcar/HU38MZvBtPYhC6A1gULHuakq8=)
                          5: 78345D00E01211ED8766DC5CC4F9AE02.roa (hash: CGANdjpj39CJWyCZVGb4EKEpCCBaXu9btf2XqDDOLY4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl
                          rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1626 (0x65a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91324D4, serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1
        Validity
            Not Before: Aug  8 23:10:58 2025 GMT
            Not After : Aug 15 23:10:58 2025 GMT
        Subject: CN=68968403-ae19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:13:b6:d9:e2:dc:7a:35:7c:0c:2a:0e:b9:d8:
                    1c:3a:a9:fe:52:9c:6d:c6:0a:b3:ea:73:56:68:c7:
                    97:52:fc:79:44:11:40:19:da:74:e7:52:a9:51:95:
                    c1:ab:ba:6d:c8:2d:fe:a5:ec:c4:d3:cd:2f:d4:dd:
                    7a:b2:8a:9a:33:c3:10:f5:ea:eb:4b:cb:19:2d:6f:
                    7d:09:e5:19:84:af:a4:cd:62:91:70:4b:0d:2d:c1:
                    19:91:8c:ba:11:90:12:f9:2c:c5:2f:25:8c:bd:32:
                    fb:65:cd:ec:6b:95:20:7e:49:16:3e:eb:57:d0:3a:
                    5a:20:a7:ad:dd:23:da:79:38:fd:47:40:4d:a7:68:
                    ae:4f:c6:49:02:00:c8:82:55:84:7b:b4:ee:e2:dc:
                    0b:43:33:08:30:00:70:cb:0d:9b:9a:7b:17:cf:a1:
                    15:86:55:ca:ea:f4:46:2b:36:4f:d5:e5:4e:a0:96:
                    a7:e0:ca:26:78:97:c2:01:cf:90:79:82:99:52:6f:
                    4e:e3:14:98:5b:7b:cd:42:54:c4:20:f0:37:0a:c5:
                    71:3a:a6:8b:2a:be:a5:16:f2:e9:a4:70:9e:1c:cf:
                    99:75:b7:0f:33:eb:fc:ae:26:ff:75:a4:d0:20:10:
                    a0:46:a0:0a:4f:08:83:69:34:f7:09:79:b6:a2:a9:
                    b0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E1:39:69:68:9E:4E:A9:7A:CE:16:B5:E0:D6:ED:A1:F6:E8:E0:10
            X509v3 Authority Key Identifier:
                keyid:BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:b0:f3:31:be:79:dc:f7:49:b3:74:90:17:da:e6:94:72:17:
         43:41:3c:a1:6e:cf:61:21:03:e8:87:8a:3e:19:57:bb:1b:c5:
         ae:91:8f:f7:dc:fe:9c:da:6d:a3:a1:bc:a0:52:0f:54:4a:48:
         d5:71:9b:50:c3:aa:cc:95:59:c7:7c:93:f2:ad:03:58:9c:28:
         36:09:40:ec:54:e2:1c:33:98:61:7f:64:51:07:fc:3c:91:ac:
         73:61:01:e2:ee:6f:25:36:0e:8e:52:ee:9d:d2:95:6e:05:7e:
         eb:dc:90:3e:68:9b:40:a5:3d:73:c8:85:32:d6:82:3b:f1:66:
         e3:71:a7:3d:eb:73:93:12:91:9d:05:9c:b6:2d:61:c3:09:16:
         cd:15:84:52:cc:5f:f4:b6:46:67:1c:2b:94:74:a1:45:d1:38:
         a7:ca:29:f7:8f:a1:b4:3a:85:c9:99:86:c1:47:8d:af:d2:69:
         ed:a0:9c:98:a2:9d:5e:bf:54:ff:f7:94:06:d5:25:e7:8c:05:
         95:b3:b8:56:56:a0:5c:7d:0e:38:56:76:a9:b6:cb:f0:cb:5e:
         9a:b7:30:06:9e:a2:74:d0:d3:43:0c:dc:8e:20:f2:cb:d5:a4:
         eb:ba:dd:7c:07:34:bc:78:e0:0a:6d:29:6f:66:dd:fc:54:6a:
         79:0c:e2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:46:05 2025 by rpki-client