Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
File:                     _JvUY9Aun9Lfw8Oa5M1asyJljCo.mft (raw, json)
Hash identifier:          rbStSNcJbDHhAvC6BOVC51niGKtnxWKOpENsIGZgTK4=
Subject key identifier:   34:03:BB:0F:AD:31:AD:8C:27:FA:C5:2C:89:91:6E:A0:DF:1E:B2:5E
Authority key identifier: FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A
Certificate issuer:       /CN=A91AB6EB/serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
Certificate serial:       0AF8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
Manifest number:          0A3D
Signing time:             Wed 06 Aug 2025 20:19:53 +0000
Manifest this update:     Wed 06 Aug 2025 20:19:52 +0000
Manifest next update:     Wed 13 Aug 2025 20:19:52 +0000
Files and hashes:         1: _JvUY9Aun9Lfw8Oa5M1asyJljCo.crl (hash: y/I25FSZQLvl4tYphVBg5z+fMQYE0h0I0g9oxqQG9u0=)
                          2: 23A38F44D74C11EF9514995EC4F9AE02.roa (hash: cj/OytvVnHfcbk5Gia2XhIeg24Q5C0dlS7O/OI0qxz0=)
                          3: 22E7F194D74C11EF9514995EC4F9AE02.roa (hash: rqWS/3ICXDmKk/YhS9D0rPCVnaMDW+z6BaHmzEy88cw=)
                          4: 1517BF2ED77711EF8E6D7517C4F9AE02.roa (hash: vaFX8SCMmHEvr5Ib9mcWdU+hQiZLjmlJABjS+fsvvGA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl
                          rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 20:19:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2808 (0xaf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB6EB, serialNumber=FC9BD463D02E9FD2DFC3C39AE4CD5AB322658C2A
        Validity
            Not Before: Aug  6 20:19:52 2025 GMT
            Not After : Aug 13 20:19:52 2025 GMT
        Subject: CN=6893b8e9-3196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ad:11:aa:6a:4a:82:99:cd:5f:37:60:00:b0:
                    f7:b0:97:b4:63:03:56:8f:5d:ab:23:64:ef:b9:37:
                    34:22:d7:06:a0:9c:e2:2b:56:86:6f:7d:30:0f:01:
                    cf:27:38:12:7d:35:71:1d:3c:0d:91:d4:f6:15:4c:
                    8d:2d:26:67:f6:d3:be:3f:77:06:c0:cd:1f:0d:df:
                    a7:33:ae:1f:76:70:9f:0a:40:80:af:49:9c:23:5d:
                    b0:08:87:e8:ab:96:0f:e3:a2:2e:7e:c5:69:cd:85:
                    53:1e:8d:5f:9d:85:be:72:e8:22:ef:12:5d:3a:f7:
                    f5:b5:2f:5c:2e:d9:6d:bb:59:e1:94:c5:1c:84:ee:
                    04:62:d7:c0:d7:39:f1:26:7a:d5:0d:60:e9:4f:a5:
                    cc:80:07:a2:23:a0:55:cc:b5:5e:4c:a2:01:79:ab:
                    0e:1a:24:d3:f5:99:cd:51:ce:f8:2c:71:4d:3b:91:
                    b7:23:55:f7:5f:76:93:f1:85:ae:a0:6a:4b:b2:c9:
                    22:0e:cc:cb:1a:d2:fb:77:06:d4:52:7a:de:fc:44:
                    fb:f5:bb:cd:b4:1c:1c:b0:dc:63:aa:79:1e:a9:60:
                    de:d6:77:eb:66:cb:d3:af:18:ba:64:96:e5:ac:f0:
                    16:23:bf:54:78:47:a3:ae:28:37:aa:f9:11:8b:05:
                    37:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:03:BB:0F:AD:31:AD:8C:27:FA:C5:2C:89:91:6E:A0:DF:1E:B2:5E
            X509v3 Authority Key Identifier:
                keyid:FC:9B:D4:63:D0:2E:9F:D2:DF:C3:C3:9A:E4:CD:5A:B3:22:65:8C:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JvUY9Aun9Lfw8Oa5M1asyJljCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB6EB/01391B008E2B11EABF86DA4CC4F9AE02/_JvUY9Aun9Lfw8Oa5M1asyJljCo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:2c:19:56:0c:90:1b:fc:81:e3:3a:da:12:1f:8d:56:46:7c:
         2c:cd:5c:0b:fe:05:54:cb:2e:89:c2:13:7a:c8:ff:44:89:65:
         6d:f5:a4:2d:ff:1d:76:19:f7:1c:b1:a0:09:d6:1d:cd:8a:e2:
         f2:c4:97:8d:55:29:19:65:fc:c5:d4:bf:42:1d:76:4a:2e:bb:
         bb:84:c6:42:be:66:0a:30:3d:db:05:e3:41:94:f2:c7:d5:d2:
         76:fb:70:3f:7b:1e:2b:4d:89:fb:ab:9f:22:69:5c:e1:d7:4b:
         07:f1:eb:f9:e1:7c:26:7f:13:aa:bf:fa:29:7b:9d:77:21:91:
         44:aa:f4:69:d1:2c:7e:d6:35:0d:ad:49:d2:86:f9:5d:c0:b7:
         4a:48:bc:fd:e3:8c:a6:fd:d8:76:9e:6f:79:95:23:2a:b6:2d:
         29:4d:b4:4e:39:42:76:73:36:e1:59:91:d5:a2:11:02:80:b8:
         6d:7e:16:f0:cd:ea:01:ff:79:86:f3:d5:6c:33:30:b0:7d:bf:
         de:dc:e6:ba:f1:5b:3a:a5:99:74:52:26:76:77:a3:f6:04:d6:
         c9:32:95:07:fd:48:db:f4:a9:f2:68:e0:a4:94:1b:90:9d:44:
         6a:26:91:ce:12:1d:7c:90:7f:3f:ff:a8:db:bb:a4:93:73:08:
         ac:e5:e7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:20:16 2025 by rpki-client