Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
File:                     0wlAzG8MECS4QLu309gBJjYGylk.mft (raw, json)
Hash identifier:          UXPfIVT4XCCh6C1YKjBqDU2ecVI4APJATf6h21B/2g4=
Subject key identifier:   B0:9C:D2:3A:4C:BB:E9:10:F3:65:32:A8:4D:19:36:D0:B0:A3:D5:1C
Authority key identifier: D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59
Certificate issuer:       /CN=A91412BC/serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
Certificate serial:       35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
Manifest number:          33
Signing time:             Thu 07 Aug 2025 08:15:37 +0000
Manifest this update:     Thu 07 Aug 2025 08:15:37 +0000
Manifest next update:     Thu 14 Aug 2025 08:15:37 +0000
Files and hashes:         1: 0wlAzG8MECS4QLu309gBJjYGylk.crl (hash: 4J8K7zWVAq0vhL5tkfkwBW5ltvlsXzah6pYxr84JVNw=)
                          2: 92F3063C248A11F0AD4B1179C4F9AE02.roa (hash: c/3j+UgCAX53wB26IYOnbYkzgiT6NkDiaAOsu5xJNDA=)
                          3: 936B147E248A11F0AD4B1179C4F9AE02.roa (hash: e85Q7MVp1iqFp29TDCzCSbcgnvU2NzugMJ2RSsP+LnM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl
                          rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91412BC, serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
        Validity
            Not Before: Aug  7 08:15:37 2025 GMT
            Not After : Aug 14 08:15:37 2025 GMT
        Subject: CN=689460a9-15f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:34:69:63:2c:3e:14:63:15:90:65:25:9e:62:
                    62:92:d7:6a:c4:9d:4b:da:00:d2:18:38:a9:42:3d:
                    55:7d:ec:84:2d:63:79:17:e7:a9:7d:26:97:0a:ed:
                    67:13:75:cc:d0:d1:3f:8d:09:94:02:43:0c:ec:e7:
                    31:98:7d:68:6d:fd:d1:c9:61:8f:5d:6c:ff:d4:fa:
                    ce:e6:cc:a6:f1:c9:94:57:2f:6f:e1:bf:8a:ed:ed:
                    09:78:18:e7:cc:eb:4e:9f:10:92:29:68:5b:0a:c9:
                    1e:51:4c:eb:ee:4d:17:1a:22:bb:76:98:f3:b5:89:
                    b3:87:c3:e5:55:50:25:62:63:12:78:8c:13:7e:32:
                    19:58:ec:04:d7:82:f7:99:0a:fe:95:11:47:25:a6:
                    b4:4e:eb:f6:fe:9c:41:7b:c1:20:bb:d9:8c:2a:d4:
                    d6:48:43:71:31:67:ff:67:83:d1:ba:98:c2:46:f1:
                    f8:fe:d0:7a:20:58:ba:3a:db:48:52:ad:dd:a3:ee:
                    71:90:d4:5c:06:8f:97:8b:f0:0f:4f:be:d6:66:30:
                    f3:13:b3:b2:62:ef:d1:fa:5b:ce:16:81:bf:ec:fb:
                    90:8e:e7:42:f7:7e:95:b3:26:fb:62:12:65:24:e1:
                    34:a5:48:52:9f:7c:ee:2b:34:c2:8d:db:12:ed:e7:
                    6a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9C:D2:3A:4C:BB:E9:10:F3:65:32:A8:4D:19:36:D0:B0:A3:D5:1C
            X509v3 Authority Key Identifier:
                keyid:D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:7b:7d:31:e5:c5:15:19:17:2e:24:58:03:a2:d3:fc:00:b1:
         c0:26:df:6b:75:77:aa:30:7b:8b:47:e4:9c:d4:d9:1b:ca:27:
         48:a8:63:a9:f1:c3:65:4d:ef:37:59:d5:86:02:7a:43:03:f4:
         fc:24:3c:ac:9e:fa:30:41:3b:0e:c5:42:15:2c:5f:1a:57:a5:
         80:7f:e2:fe:20:7e:39:66:4e:f4:64:52:5f:ff:12:5b:57:41:
         a4:75:8d:8a:01:c2:a5:a5:8f:e3:ae:bf:40:50:69:35:04:fb:
         3e:7e:a4:f1:21:4c:a5:b8:9a:29:9c:e0:4c:f1:aa:fc:05:2b:
         f9:1b:46:84:00:35:7b:6a:d2:40:bb:84:44:30:35:21:8a:17:
         85:43:d0:38:34:8a:24:0f:dc:92:99:06:a4:2b:43:58:d1:aa:
         b9:65:d8:f8:ec:6a:7f:25:9a:b0:80:58:36:16:33:bd:be:05:
         2e:a3:a9:14:a7:a7:d6:6a:25:4d:0a:13:d9:29:8e:ce:46:8d:
         7f:24:86:32:48:43:71:09:32:0c:83:ab:34:da:7b:d8:f6:a5:
         5c:32:fe:6b:cf:ac:ec:8d:92:cc:55:0d:76:09:0c:91:e3:58:
         ad:d9:84:a1:74:42:18:30:6f:f2:a9:27:fd:e3:13:9c:0d:82:
         da:8b:34:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:44:53 2025 by rpki-client