Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
File:                     pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft (raw, json)
Hash identifier:          EFiARf0S48yQH1qLgBajzG+94pEBNw9i8cOnUWoBLVI=
Subject key identifier:   D8:3E:CB:A5:2B:2B:AC:84:B9:65:DA:3C:A3:B9:B8:9A:CC:D8:EC:5C
Authority key identifier: A5:EB:DF:98:39:19:C6:0F:62:2F:34:EF:8F:C5:21:E7:24:89:D1:CD
Certificate issuer:       /CN=A91A995E/serialNumber=A5EBDF983919C60F622F34EF8FC521E72489D1CD
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
Manifest number:          53
Signing time:             Thu 07 Aug 2025 07:53:18 +0000
Manifest this update:     Thu 07 Aug 2025 07:53:17 +0000
Manifest next update:     Thu 14 Aug 2025 07:53:17 +0000
Files and hashes:         1: pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl (hash: MxZX0jQuuOzzw+WYFVQtkNhuxhzul5/u9/j36E3qLUA=)
                          2: B3E4D03621B111F089CE216DC4F9AE02.roa (hash: VCQENYwleJhQRqqUILKpkln6ADdmKoB6HviWfuCE7i4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl
                          rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A995E, serialNumber=A5EBDF983919C60F622F34EF8FC521E72489D1CD
        Validity
            Not Before: Aug  7 07:53:17 2025 GMT
            Not After : Aug 14 07:53:17 2025 GMT
        Subject: CN=68945b6e-a7b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8a:43:bc:06:31:bd:df:23:ef:42:c7:92:63:
                    6b:4f:6a:6e:f2:b1:41:22:a7:cb:e0:e9:7b:cd:a9:
                    5f:cd:d9:c5:f5:ac:1c:e6:3c:95:05:1d:bf:9b:fc:
                    36:63:05:ff:f5:82:04:28:d3:de:a3:23:6d:e1:d9:
                    a1:ff:5a:4a:b2:3d:9b:22:64:68:70:0c:a5:49:c5:
                    79:01:c6:85:8b:1b:7e:19:06:a2:55:ee:dc:2b:8f:
                    be:d8:6c:c5:65:4c:7b:77:a6:1e:ff:b1:18:f5:07:
                    49:79:83:e2:22:70:96:64:0b:b9:01:5d:c6:61:d9:
                    43:2a:32:20:ee:0c:9b:e2:ce:1a:f1:ce:9f:65:82:
                    46:be:4d:6f:c9:98:c4:c2:5d:ca:bc:da:1b:53:94:
                    f9:20:10:8b:d7:4d:49:1a:f0:d4:19:1c:6c:17:15:
                    d0:ea:12:37:46:f6:5c:0f:c4:96:80:50:49:fd:35:
                    2d:91:75:a8:bf:75:20:57:64:31:e0:23:8b:27:4e:
                    7c:19:43:b3:fc:e7:c8:fd:16:b8:82:f0:8d:84:9f:
                    a2:69:79:3f:ae:ec:bf:93:25:a1:a7:a9:79:c5:e9:
                    11:43:7b:e0:62:60:3f:59:bc:61:59:ec:f8:74:88:
                    16:6a:d4:13:73:f1:7c:de:e4:1b:5f:31:6d:93:a4:
                    e1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3E:CB:A5:2B:2B:AC:84:B9:65:DA:3C:A3:B9:B8:9A:CC:D8:EC:5C
            X509v3 Authority Key Identifier:
                keyid:A5:EB:DF:98:39:19:C6:0F:62:2F:34:EF:8F:C5:21:E7:24:89:D1:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:fb:25:75:86:d9:86:6c:28:96:c1:c3:7f:8f:5b:28:d9:2f:
         b7:04:99:e0:67:b8:1f:3c:ef:e0:9e:8f:d5:d3:67:1c:d8:fb:
         a0:f2:3b:20:be:fe:12:97:7e:bf:59:f7:69:f8:3b:0d:c4:24:
         d3:09:3b:39:16:1c:3c:da:70:b8:08:d5:d0:b3:f3:ee:65:a9:
         30:f6:bd:47:f2:64:c9:13:de:6e:7d:b5:81:46:ae:41:22:dd:
         9e:f0:3a:96:34:56:39:16:ff:ee:ab:f0:c1:13:53:52:ac:98:
         50:ef:52:34:59:ee:dd:c4:b1:e1:6f:39:da:15:54:c7:5b:03:
         90:0e:35:a8:06:65:1c:6b:59:b7:bd:85:e6:2a:93:ea:87:83:
         be:44:92:01:9d:63:91:c4:8d:a8:b6:38:2d:d4:58:9b:bb:5a:
         54:0d:c6:dd:61:24:7c:a4:7b:ab:a3:dd:ba:34:a9:b9:d5:2f:
         30:1b:e8:9d:8d:b0:34:ff:2d:54:6d:ca:a3:34:41:ea:71:85:
         0a:a6:01:df:34:0a:d6:cc:ff:2d:d6:88:14:c3:4e:de:b3:d8:
         0c:74:82:dd:a5:b6:60:97:9c:3e:82:06:89:8d:df:44:9d:ed:
         3a:7e:f9:53:4d:a4:b7:91:ed:35:e2:35:e9:ac:df:08:d6:70:
         08:0b:f8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:56:16 2025 by rpki-client