Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
File:                     u6vT8W4QD9nJXUdIhOTanLb6do0.mft (raw, json)
Hash identifier:          gblr3SEQe44oNUSiwv7aFZHkjMlVuacFYiyc4BYgtc0=
Subject key identifier:   B4:C4:E9:3A:03:1F:88:34:A7:C0:9B:1C:65:B5:36:9B:66:3A:DC:EB
Authority key identifier: BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D
Certificate issuer:       /CN=A91886E3/serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
Certificate serial:       0204
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
Manifest number:          01FE
Signing time:             Mon 11 Aug 2025 02:26:46 +0000
Manifest this update:     Mon 11 Aug 2025 02:26:45 +0000
Manifest next update:     Mon 18 Aug 2025 02:26:45 +0000
Files and hashes:         1: u6vT8W4QD9nJXUdIhOTanLb6do0.crl (hash: Z/e67G6LibpHi9KAf28SOOD92ugSpJTf5aIZCTDlyNs=)
                          2: 60820A4271AC11EDAA89DE61C4F9AE02.roa (hash: d6lR5DCUUt64f3jfT2Upe1NvnvCxTNK9tDR0OuYVOnY=)
                          3: 61141C1671AC11EDAA89DE61C4F9AE02.roa (hash: Wx96a0pCwu7Is08OfwVpC7A3eb6MBe8Us9jhb4i3wps=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl
                          rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516 (0x204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886E3, serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
        Validity
            Not Before: Aug 11 02:26:45 2025 GMT
            Not After : Aug 18 02:26:45 2025 GMT
        Subject: CN=689954e6-59fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4f:2e:3d:90:ab:69:94:9a:2d:41:22:36:03:
                    18:85:5b:64:8a:37:82:37:23:a9:0b:f3:81:24:d8:
                    7c:58:fc:0f:ab:04:f9:7d:57:9a:2f:07:1d:d2:49:
                    0c:91:24:bd:c0:83:95:c4:e2:9d:55:36:50:fd:d9:
                    fc:2e:ff:c9:60:80:8a:bf:78:be:44:f7:bf:7c:b7:
                    98:dd:f1:b4:c1:23:84:ff:79:57:3e:c1:ab:59:27:
                    06:e2:1a:ad:10:2e:f8:be:f5:d1:3a:84:7e:23:2a:
                    b7:ba:25:fc:c8:33:c2:61:2c:10:e2:a9:55:c5:8d:
                    4a:ae:9c:e9:e2:52:86:82:eb:76:6d:c2:3e:b3:ab:
                    40:90:76:61:b7:49:96:91:de:98:37:48:cd:e9:01:
                    f4:02:11:54:be:b3:af:61:80:5e:aa:9e:85:a0:e1:
                    4a:4f:cb:c5:7b:a8:0c:06:eb:e2:07:ff:a0:88:cb:
                    45:90:5d:9c:fe:e6:47:65:cc:ef:21:1d:76:d3:26:
                    62:e4:b2:e9:10:dc:d3:94:02:dd:b6:01:9d:45:24:
                    72:f7:e1:b0:9c:b3:d0:62:59:97:9a:0d:cd:55:a1:
                    01:f4:88:81:d8:bf:0c:73:21:f6:87:8a:ee:1c:5d:
                    dd:54:71:5c:ba:d0:91:f0:ec:a2:4b:cd:fb:2e:10:
                    ae:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C4:E9:3A:03:1F:88:34:A7:C0:9B:1C:65:B5:36:9B:66:3A:DC:EB
            X509v3 Authority Key Identifier:
                keyid:BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:df:1f:63:15:df:02:e6:33:26:66:18:0b:c1:92:5f:60:8c:
         8e:bc:67:90:ab:66:96:44:40:9e:06:0b:8b:94:fb:38:0c:ab:
         84:bd:fd:98:c3:ff:26:41:1d:9f:f6:bf:a8:b4:73:36:08:ef:
         f3:d3:b4:c6:49:07:a3:02:d0:e2:01:7b:48:bd:06:a4:16:15:
         15:8f:e4:2f:30:86:54:63:3b:2d:4f:87:dd:72:b6:71:d3:65:
         84:59:dd:68:61:1a:71:40:94:2b:6e:c7:c3:96:b8:fc:0a:05:
         87:cc:b5:26:29:7e:b6:c3:83:d9:21:f4:25:26:ea:a9:97:b1:
         ea:72:fc:ca:3c:3e:4f:ce:01:cf:ca:de:68:fb:74:5f:99:06:
         a5:89:b4:44:4e:af:eb:20:66:b9:38:1c:50:2b:11:d1:86:7f:
         50:13:ab:0b:9b:dc:7a:f5:71:6e:78:8f:f1:fa:62:44:db:d5:
         d4:8e:1c:f0:ef:9f:88:77:92:80:54:3a:83:df:c7:e5:48:54:
         6b:7e:da:0b:39:fb:c1:45:e7:9a:99:4b:0f:92:49:a8:a0:99:
         54:4e:20:63:f9:88:af:19:98:fc:f0:54:e2:e8:dd:79:e6:aa:
         df:5a:c9:93:b3:39:d6:9b:31:24:3d:53:37:09:e1:b3:e6:ae:
         d3:54:eb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:15:09 2025 by rpki-client