Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
File:                     rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft (raw, json)
Hash identifier:          FtPRf92PE2eXHk0pBrZBrcHBY1AJHkbnskVX0uk3fHI=
Subject key identifier:   E9:30:70:D9:5F:D8:73:1F:51:CD:D3:7A:EC:3A:95:94:99:B8:09:2C
Authority key identifier: AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F
Certificate issuer:       /CN=A91A83B4/serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F
Certificate serial:       041C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
Manifest number:          040E
Signing time:             Sat 09 Aug 2025 00:58:56 +0000
Manifest this update:     Sat 09 Aug 2025 00:58:56 +0000
Manifest next update:     Sat 16 Aug 2025 00:58:55 +0000
Files and hashes:         1: rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl (hash: 235SPHlSF45shtM+Yi83E4PWRAI9NXtoBFymwUmZnao=)
                          2: E37002DA5EEC11F08928266FC4F9AE02.roa (hash: bP8QoLrN2cG+x9Zk4VLIpDMpINAZs4gBK6D1Lhe10Us=)
                          3: 2E82E686569E11F08015BC34C4F9AE02.roa (hash: X3/rru4+xefljKYMl46GF/bGOSAjEtyI1VDuB5H54Oo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl
                          rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1052 (0x41c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A83B4, serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F
        Validity
            Not Before: Aug  9 00:58:56 2025 GMT
            Not After : Aug 16 00:58:55 2025 GMT
        Subject: CN=68969d50-1aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d1:a9:3d:80:8f:3e:9e:c3:33:3c:36:95:c1:
                    02:da:3c:f8:a8:87:f7:9a:11:86:49:69:83:b0:5a:
                    19:f9:04:03:0b:e6:1c:1a:07:9b:ef:47:01:6f:fb:
                    ea:17:24:69:f3:34:57:22:6a:a6:0b:67:c6:78:ef:
                    05:b4:4b:8f:94:35:6c:f5:67:a0:5c:06:ba:e6:42:
                    ac:3e:7e:30:99:7d:f2:b7:38:bf:fa:ec:7b:46:dd:
                    db:9f:1b:5a:d6:f3:bc:29:d0:74:59:ba:a5:b9:67:
                    be:fb:2c:77:af:1f:82:3e:62:f8:e4:74:b4:5b:fa:
                    8e:94:17:91:57:e7:10:e2:8d:8f:e1:96:6c:29:5e:
                    8c:c4:4e:ee:d2:b3:b8:79:10:31:86:2a:c2:be:e9:
                    e9:3c:26:cb:99:46:84:e7:d7:9d:54:ad:2f:98:f7:
                    16:8f:16:37:e4:76:3f:68:b3:f2:07:cb:d3:ef:42:
                    4a:2a:5c:a1:a4:7f:80:e0:a1:11:de:4a:e8:d7:95:
                    7e:f3:1c:58:89:de:6d:af:60:c9:cf:05:d3:da:56:
                    46:b9:5d:fd:99:06:12:53:76:96:ef:ed:ee:5d:9b:
                    15:03:d7:59:dc:89:49:0a:8c:40:c2:4f:c2:f6:e1:
                    b1:26:f3:72:35:eb:2b:16:97:9f:f6:e7:18:01:cb:
                    49:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:30:70:D9:5F:D8:73:1F:51:CD:D3:7A:EC:3A:95:94:99:B8:09:2C
            X509v3 Authority Key Identifier:
                keyid:AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:1a:e5:f1:d4:f4:38:6b:40:02:cf:a3:ad:f3:8b:e3:cc:66:
         94:c6:b4:78:9c:85:5b:45:00:a6:68:76:ca:62:9c:16:8e:ec:
         ce:bc:9a:5b:38:4a:90:a2:8d:fd:80:a0:c4:ab:61:59:de:7b:
         1e:3c:37:9a:bf:e9:f6:b0:e9:f0:1b:01:b0:a4:93:83:fb:5d:
         5c:47:ea:2d:5f:a6:13:5f:29:42:73:b5:f7:25:03:9a:2c:97:
         b4:11:a4:2a:1c:74:92:ab:85:36:73:5d:0f:31:82:65:6c:b5:
         39:2f:08:fa:da:75:55:ba:f6:1c:11:be:58:f4:47:29:8b:a5:
         4d:e6:0d:03:de:55:15:c9:75:1f:e4:46:17:57:5b:66:c5:bb:
         02:2e:bd:00:2e:c3:ec:3a:43:ee:66:d5:da:91:b1:af:26:19:
         8f:ab:8d:cb:74:99:9b:45:01:85:be:28:61:27:57:08:cf:52:
         e8:ac:23:06:3e:1e:7c:aa:4f:51:65:a7:e7:db:cd:b3:95:d1:
         f5:c3:0c:34:d7:f3:62:5e:09:9b:33:cf:44:c8:30:68:c0:c6:
         3d:54:fa:26:a1:c7:f4:30:c8:bd:1c:dc:d3:3a:ec:0c:e4:1d:
         26:90:32:e4:32:6f:1a:d3:c5:84:90:b2:75:ae:83:7a:87:6f:
         b9:74:bd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:21:25 2025 by rpki-client