Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
File:                     zLjgj5mQp1Ux6TatsG26yqcxtVI.mft (raw, json)
Hash identifier:          qUNEApVflmZvR5qo9AQPC8qNnJfZh02F1kTmFRSm8kM=
Subject key identifier:   CA:82:32:40:B1:6F:BC:75:EA:A5:D5:92:38:4A:B9:6C:4E:0A:EA:BB
Authority key identifier: CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52
Certificate issuer:       /CN=A91364F5/serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
Certificate serial:       0120
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
Manifest number:          011B
Signing time:             Wed 13 Aug 2025 05:32:52 +0000
Manifest this update:     Wed 13 Aug 2025 05:32:52 +0000
Manifest next update:     Wed 20 Aug 2025 05:32:52 +0000
Files and hashes:         1: zLjgj5mQp1Ux6TatsG26yqcxtVI.crl (hash: IWG4ZXukDhhy2UD//sOon2v3pvPKyU6ErKaIPnrhcrg=)
                          2: 654E27420CA311F0A866C650C4F9AE02.roa (hash: tN4x9sv/6uNcQecpvfPEKROlYAyEzXXPm2NgvsfUw14=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl
                          rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 04:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91364F5, serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
        Validity
            Not Before: Aug 13 05:32:52 2025 GMT
            Not After : Aug 20 05:32:52 2025 GMT
        Subject: CN=689c2384-36f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d9:5e:eb:5d:36:3a:ba:b1:0f:f3:4b:cb:b1:
                    e0:58:7d:ae:e3:c2:0b:6a:3f:20:16:0d:3c:3a:c5:
                    2a:38:98:61:52:2a:f7:e6:aa:38:b7:2b:80:bd:3d:
                    8c:83:c8:97:5d:f8:51:c8:24:20:04:7f:c7:23:42:
                    e5:eb:4e:c6:77:c9:d6:61:f4:f0:f4:9f:27:d1:c4:
                    5c:87:17:97:81:e6:7f:3d:fb:ad:07:1d:92:c8:b6:
                    0e:79:45:68:6d:b4:a8:0e:bd:d6:5f:5d:59:1e:5f:
                    48:ac:96:f5:42:91:cc:90:8b:ef:33:49:29:f6:8a:
                    79:97:0e:17:a4:da:7d:9a:11:67:ef:9a:9c:82:76:
                    7a:44:2d:b3:f5:a0:50:8c:84:fb:e0:0a:17:bf:f3:
                    51:d5:8f:a1:34:ea:89:d8:85:8c:3d:1c:79:bf:71:
                    d7:e6:a9:e2:fb:36:06:1e:67:88:85:f9:bd:07:a3:
                    ad:21:cf:f5:f4:d3:97:ee:ab:66:86:56:ff:f6:da:
                    af:9b:1b:4c:01:47:58:b6:17:d7:59:cc:96:ca:87:
                    73:f2:3d:34:eb:13:31:bd:92:c7:ad:c6:85:62:12:
                    6d:71:1d:11:cb:d3:79:c4:92:4b:10:ee:56:41:9a:
                    04:01:d8:c6:c1:c3:1d:a7:e4:80:1f:7b:e1:3d:07:
                    54:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:82:32:40:B1:6F:BC:75:EA:A5:D5:92:38:4A:B9:6C:4E:0A:EA:BB
            X509v3 Authority Key Identifier:
                keyid:CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:83:6a:8b:79:8a:cd:63:46:68:f3:11:ab:9e:41:77:34:05:
         d9:48:b7:f4:1f:f9:c2:ab:05:52:e6:63:e7:d5:37:6a:94:ca:
         6f:df:37:df:3f:a5:61:b1:d6:4b:18:f3:d8:e5:56:f7:ca:1d:
         f8:38:23:af:7e:60:e7:44:62:7b:ae:1e:56:c8:72:91:24:ae:
         65:b9:a0:01:7b:16:3a:ad:d3:7d:80:3f:d1:67:25:f8:ef:3b:
         4e:4e:e9:56:02:be:04:39:78:97:0e:ca:d7:38:8f:21:a7:1b:
         f0:62:89:55:6c:0d:b2:ce:1e:b7:09:1c:74:16:44:23:16:47:
         d8:63:07:ec:4c:0e:96:e2:1d:47:40:aa:5d:c1:f5:3d:89:be:
         02:81:d2:39:9d:78:13:9a:c9:d1:03:60:1f:e3:b4:a0:6c:1d:
         bf:55:f1:f7:49:0b:89:c5:f0:6a:48:27:8d:cb:aa:b6:74:fe:
         88:cb:24:c6:2d:d3:94:13:ad:41:f6:4b:84:8a:69:66:00:02:
         64:99:4a:21:22:de:fa:98:d0:db:ea:0b:91:6d:97:57:f2:53:
         fb:35:02:23:79:a4:aa:93:88:29:8e:b5:3f:11:7c:3e:4a:2d:
         fa:8d:d3:fe:ba:57:ed:ec:cd:7c:1a:85:4c:09:9e:3b:fd:e7:
         34:5a:7c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:40:51 2025 by rpki-client