Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
File:                     awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft (raw, json)
Hash identifier:          OF3GplvNzKu/w1hm8biEyAASTQPETEnt++hczsVfxaY=
Subject key identifier:   98:55:40:9E:F5:D5:9D:E6:DE:E9:5E:64:7A:2F:C4:8A:58:50:73:FA
Authority key identifier: 6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9
Certificate issuer:       /CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9
Certificate serial:       0C5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
Manifest number:          0C3D
Signing time:             Sun 10 Aug 2025 18:39:37 +0000
Manifest this update:     Sun 10 Aug 2025 18:39:36 +0000
Manifest next update:     Sun 17 Aug 2025 18:39:36 +0000
Files and hashes:         1: awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl (hash: D1l6mlX3TdbPKyn5L6joSxecfAxvKASSk+EW8CNz/w0=)
                          2: 1ECA8050696211EC8A05D115C4F9AE02.roa (hash: TDJGQsW2NIk73+noi3yai+lnEcUS65iyjDduaFF8MsU=)
                          3: 7A0359125C0E11ECA36CBF0FC4F9AE02.roa (hash: o+CZ7fn0neERiRGT74H4pMCJhxb2efrn1ZqyAv5eZQ0=)
                          4: DF1E2FEA97D611EB8BEF8223C4F9AE02.roa (hash: +Z1f48sI1Kz7JI6qJ55JG0SRXt9VC0MvWpOU7eCKqS8=)
                          5: 884C5FB8E60411EFBF5A7957C4F9AE02.roa (hash: lJpIF/DoFI3JvxRyvCQySFIPNE83lEmMNZBRdgQLMfI=)
                          6: 84CFF0D6D2F311EEAFCF3273C4F9AE02.roa (hash: lwAwrTafRErL3moVwMNPzUjYlQsMQhM9S9kLt9SAVBg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl
                          rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3167 (0xc5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A45E0, serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9
        Validity
            Not Before: Aug 10 18:39:36 2025 GMT
            Not After : Aug 17 18:39:36 2025 GMT
        Subject: CN=6898e769-bdbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b4:74:ab:f4:03:10:5c:c0:b3:85:71:e8:46:
                    ef:49:b4:c3:fd:b8:95:d7:58:e3:ab:70:be:b6:0b:
                    f6:58:31:8c:77:aa:43:2e:d4:61:54:86:44:15:38:
                    91:fe:1e:0f:3b:03:6d:86:74:94:bc:32:41:0b:c1:
                    05:70:19:06:10:fe:cc:b5:c6:2e:5c:f0:1a:c7:a8:
                    0a:ea:6b:d0:52:7f:ad:75:0b:40:3c:47:8c:6b:93:
                    40:d9:02:43:c7:62:c0:de:18:ba:97:97:63:80:b5:
                    b5:ab:f0:af:62:7e:cc:03:29:84:2e:5a:bb:43:64:
                    33:c5:09:9d:38:87:32:25:a3:16:d7:aa:71:b2:2a:
                    47:20:f9:d0:c5:ec:00:50:07:2f:ad:b2:88:f7:8f:
                    4d:8b:85:97:18:bd:89:60:9e:12:f2:56:6a:f8:7f:
                    e4:d0:af:74:db:6f:37:07:38:4f:39:2d:04:31:35:
                    34:82:aa:be:fb:a1:71:e6:82:e5:c7:b5:9c:e1:d0:
                    d1:05:2b:00:cb:0f:c3:9d:5f:70:d9:81:d4:36:08:
                    bb:ef:66:13:48:3d:de:31:a0:ca:ce:49:27:ff:3a:
                    16:be:1d:3d:6a:5e:f1:0e:24:ca:92:bc:d5:1b:d2:
                    2e:7e:f8:02:46:f4:e9:b2:be:a8:e6:41:38:a4:e0:
                    63:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:55:40:9E:F5:D5:9D:E6:DE:E9:5E:64:7A:2F:C4:8A:58:50:73:FA
            X509v3 Authority Key Identifier:
                keyid:6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:8c:24:94:86:37:e5:82:7d:49:a1:4b:a5:0c:51:14:a3:5b:
         87:3e:68:de:74:c9:9f:54:e8:03:e7:5b:ab:66:2a:02:c6:08:
         9c:be:04:2c:68:df:41:0c:af:f2:06:a1:93:a4:9f:08:ce:d7:
         21:88:62:fb:5f:fb:1c:bf:27:b4:70:7a:1d:b7:d7:ab:e1:b4:
         3d:9f:49:fd:ef:3d:d4:dc:7c:25:6b:72:37:f3:7a:e4:55:04:
         0d:bb:d5:4d:2b:d9:b8:56:50:c0:c0:c7:6d:92:67:9a:c7:37:
         5d:f4:9e:5e:2d:80:9d:c0:f3:88:b2:6c:7c:fd:46:2d:4e:4f:
         b0:a0:5a:28:68:a1:32:f2:f3:09:8d:91:86:a1:69:bf:70:2e:
         3a:af:c7:1d:b0:e9:d9:0c:ea:50:54:4a:1c:f8:ab:28:ff:69:
         83:98:5b:c7:2e:75:57:3c:67:47:cb:e2:64:9f:40:a0:ce:3f:
         40:60:4e:4f:bf:5a:e4:e3:42:c8:68:0e:6d:af:f6:85:cd:6a:
         5a:05:b6:e1:f4:67:a5:60:8e:18:3b:f7:5c:93:54:e2:00:38:
         6a:49:51:c9:b1:11:9d:5a:63:e1:b6:0a:be:b3:f3:6f:55:ce:
         50:b3:f8:1d:a6:94:da:47:c5:b5:96:44:f0:26:2e:b9:fa:57:
         b0:59:7a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:02:53 2025 by rpki-client