Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
File:                     T191psKYj1i2AwEqjbRFofN9XXI.mft (raw, json)
Hash identifier:          THOY7i3b1oKVCL3olgd9VKMjdIzyrcy/kRYQ6QhDrzI=
Subject key identifier:   E7:4F:2C:50:A5:A4:7E:97:9D:A3:78:73:5C:C1:DE:4E:A5:B4:D8:24
Authority key identifier: 4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
Certificate issuer:       /CN=A914C3FB/serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Certificate serial:       60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
Manifest number:          53
Signing time:             Sat 09 Aug 2025 07:56:02 +0000
Manifest this update:     Sat 09 Aug 2025 07:56:02 +0000
Manifest next update:     Sat 16 Aug 2025 07:56:02 +0000
Files and hashes:         1: T191psKYj1i2AwEqjbRFofN9XXI.crl (hash: vxuo6O0V5mujUng8QjSffCe/u+Kd7xyX6u4WtcZj4Ec=)
                          2: 41E7BB1C0BA211F08457541BC4F9AE02.roa (hash: SLWKUoxyCCrW041ENZCKTkuF3OJqQTSoY0CsLhDIP04=)
                          3: 850942E4325311F081E87832C4F9AE02.roa (hash: YKfa7XcZECRGtp0hZwgH99jMIjA/4Bdgt+cMhZRSKcQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
                          rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C3FB, serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
        Validity
            Not Before: Aug  9 07:56:02 2025 GMT
            Not After : Aug 16 07:56:02 2025 GMT
        Subject: CN=6896ff12-1cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f2:61:c7:a5:f0:a6:f2:19:66:e1:a0:cf:56:
                    c0:4c:81:ea:55:d4:0f:05:96:ba:81:6f:4a:cc:16:
                    9e:a5:9d:da:38:51:a1:6d:d8:b4:dc:88:94:c2:42:
                    19:9a:dd:88:2d:4c:14:3d:58:80:2a:1f:6f:30:ef:
                    b6:92:f8:cc:01:c7:2f:76:d9:1c:1b:1f:87:74:bc:
                    1d:49:a6:76:7b:89:fb:4b:73:5b:f1:3c:d9:39:a3:
                    37:1e:28:fe:33:36:65:cd:cf:b7:0a:98:3a:6a:44:
                    48:0f:51:5e:15:69:87:c4:8f:88:10:6b:94:ae:d1:
                    b2:49:f1:30:d4:26:39:fa:74:2c:d5:c2:a4:d8:d4:
                    01:83:11:b3:c5:67:d9:b3:56:cc:ef:56:cf:13:71:
                    52:e6:83:ca:91:2b:34:7e:78:a5:4f:9a:bb:cc:bb:
                    5b:44:b1:da:d4:69:7b:e2:59:00:d4:27:2b:f8:a7:
                    1d:bd:4f:e4:5e:c2:e0:3e:a1:c9:36:98:f6:be:9a:
                    62:ab:d6:b8:31:94:5a:42:39:5e:26:3b:6e:0d:97:
                    b3:bc:a0:22:d9:63:f6:e8:9d:f2:68:13:44:8f:cd:
                    3b:9d:3e:0d:1b:54:1a:68:64:ce:03:9d:d1:4b:57:
                    22:37:e6:29:8b:30:da:59:3a:bb:29:66:0f:03:ca:
                    72:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4F:2C:50:A5:A4:7E:97:9D:A3:78:73:5C:C1:DE:4E:A5:B4:D8:24
            X509v3 Authority Key Identifier:
                keyid:4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:3b:c7:d7:e2:15:44:5a:98:06:84:e9:3b:89:a3:f9:e7:45:
         95:df:48:71:77:c5:38:f2:5d:e4:d4:24:7f:a9:cb:be:ab:20:
         4e:ae:23:78:7a:b0:31:26:13:2c:bf:8a:ac:20:29:01:28:84:
         cd:e5:d5:c3:6f:fa:51:9a:6b:cc:58:7a:0e:f5:42:b1:6f:cd:
         48:2c:c6:26:cf:6b:8d:b7:ea:65:b8:65:81:32:47:c5:c2:68:
         33:36:58:7d:65:97:69:50:5c:9c:0b:46:16:c1:67:ac:c2:43:
         45:bd:12:92:6d:fd:a4:9d:c8:94:6c:fd:b4:ee:7e:4f:dd:d6:
         32:98:fa:69:75:26:77:63:86:d9:b9:77:ea:e9:a3:9a:a3:5e:
         f0:81:48:95:25:95:08:8a:b9:8e:6a:7b:7e:f8:59:88:43:b6:
         cc:4e:c5:fa:d0:e3:79:a1:8b:f0:73:98:83:71:2c:8c:40:46:
         f2:04:f1:30:30:14:02:27:4f:16:d2:5b:6d:d3:09:56:4f:f1:
         c5:96:6a:9c:c6:7f:2b:d8:e7:e3:18:fa:89:15:b0:bb:82:f7:
         e2:78:f0:15:61:c0:fe:7f:3e:13:2b:fd:74:db:b5:ff:79:7c:
         56:b1:e5:ea:e9:a0:bf:b8:8c:25:84:50:3f:9a:e9:c3:1b:7a:
         7e:8e:b5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:50:02 2025 by rpki-client