Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft
File:                     eFfRGlHcrpwuCIahDOBvVfW4QwA.mft (raw, json)
Hash identifier:          9QBQSq1vI4+rHEgv5Zfemy1iEwQx69TTJeO5OWjsqpg=
Subject key identifier:   8B:E3:BD:04:20:01:C5:4A:0A:36:54:D1:C6:BD:11:D5:E3:33:8A:FB
Authority key identifier: 78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00
Certificate issuer:       /CN=A91A5D8A/serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300
Certificate serial:       05D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft
Manifest number:          05CF
Signing time:             Fri 08 Aug 2025 23:29:47 +0000
Manifest this update:     Fri 08 Aug 2025 23:29:47 +0000
Manifest next update:     Fri 15 Aug 2025 23:29:47 +0000
Files and hashes:         1: eFfRGlHcrpwuCIahDOBvVfW4QwA.crl (hash: g6/AIHQnPtp4z7EFsG38U8qM3krrusjEf7/o4IlJW1w=)
                          2: 8183B0FACAF111EBA40AF15BC4F9AE02.roa (hash: 2FiQQsbz3nt2u/cekKkmnmxwVKcgAmIxkizQKnpeMp0=)
                          3: 18981398329B11EDB9F09862C4F9AE02.roa (hash: dJlRsSYRiHAfXA1Nnt7jiiGzcupZLCHRX4H/d6aCfuU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl
                          rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1496 (0x5d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5D8A, serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300
        Validity
            Not Before: Aug  8 23:29:47 2025 GMT
            Not After : Aug 15 23:29:47 2025 GMT
        Subject: CN=6896886b-4db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c7:2a:b2:5d:6b:ca:3a:95:2a:31:53:58:5e:
                    64:05:6d:3f:6d:bd:05:ec:55:42:07:c9:3d:84:90:
                    77:de:d5:a9:f7:7b:8b:3d:4c:48:cd:e7:8f:21:4f:
                    03:fe:c2:6d:ea:bd:75:b9:2e:11:f4:07:24:ad:1b:
                    c9:e8:d5:c1:66:28:59:61:fd:f9:e6:e1:15:ac:23:
                    e5:ef:ff:6e:e1:56:9a:3f:4b:2e:35:ea:ae:dd:7c:
                    2e:15:58:d7:c9:33:a1:3b:bb:a3:af:f6:29:f2:28:
                    88:0d:03:b1:b1:eb:d3:54:98:70:a3:a6:7f:2b:9c:
                    3d:48:23:c1:82:ff:2f:06:0c:a5:1e:88:72:51:f9:
                    a9:7f:8c:e8:83:f5:41:1c:5c:09:fb:d3:e4:dd:d1:
                    e1:59:a3:b0:30:57:82:67:75:9e:3a:38:43:7e:f4:
                    f2:34:f5:25:64:3b:28:ea:f4:7d:ec:11:8b:be:1f:
                    2b:fa:61:78:81:b7:00:d5:f3:7b:26:97:57:61:7c:
                    b0:bb:b7:bc:eb:79:e0:8c:eb:a2:8e:21:7f:a8:40:
                    a4:fd:b4:f1:3e:58:46:88:6b:0a:ea:e9:85:27:b0:
                    1c:66:47:7d:92:3f:55:b9:6b:21:64:01:a7:61:bc:
                    63:1c:68:b8:4c:94:e5:9d:9f:0a:82:f4:b8:0b:df:
                    d3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E3:BD:04:20:01:C5:4A:0A:36:54:D1:C6:BD:11:D5:E3:33:8A:FB
            X509v3 Authority Key Identifier:
                keyid:78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:48:1d:ea:ba:49:39:e2:58:2d:a9:6c:1e:7f:5d:55:2c:3f:
         a7:29:31:57:42:fe:4e:ec:8d:b8:38:f0:dd:39:c1:09:73:94:
         f1:a2:09:67:10:b8:07:e0:46:79:03:76:6d:65:a2:2d:22:82:
         6d:fc:df:7c:ad:5f:98:52:40:9e:32:f0:c3:8b:5e:fc:b8:85:
         c2:ac:1d:c9:0a:d2:91:76:44:38:55:7a:4d:0a:c5:74:86:cc:
         7e:0d:b4:7a:db:41:ab:b8:38:0e:d1:a9:0c:46:ed:47:8a:15:
         bd:c0:24:19:ed:2c:63:b5:90:57:79:b2:21:3b:9b:39:8c:a4:
         88:42:03:3e:ea:fc:7f:0b:7a:ae:72:ca:21:1d:25:ca:98:af:
         f9:54:93:6c:e5:15:45:88:07:90:80:fd:0b:95:44:bc:10:ee:
         0e:8c:9b:d1:f7:a2:18:b8:93:f7:e1:8f:e8:25:32:e5:7f:76:
         f0:a3:4c:cd:68:77:d6:bf:09:2b:8b:00:11:63:ef:4b:55:8d:
         cb:42:2d:b1:ca:03:6b:3e:0e:10:a2:3c:d9:fc:39:75:2f:8f:
         2e:59:97:e2:e8:8c:e3:4b:5a:b8:22:61:f4:7b:4b:34:da:64:
         56:d2:24:c5:80:93:6c:b3:30:f2:22:35:ad:fb:2b:88:fe:34:
         17:ca:ea:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:09:35 2025 by rpki-client