Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft
File:                     AXCw4NBuMUc8rBZOSwttIb300jc.mft (raw, json)
Hash identifier:          FQJB1PoMTt7SpINrsqOSiE2RQ47nnpBcGnLtv9+CgW8=
Subject key identifier:   55:6E:84:4F:18:06:8A:71:21:4D:7C:8F:B7:91:36:95:3F:67:50:6F
Authority key identifier: 01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37
Certificate issuer:       /CN=A91AE9F7/serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237
Certificate serial:       0FFF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft
Manifest number:          0FF3
Signing time:             Wed 06 Aug 2025 17:36:24 +0000
Manifest this update:     Wed 06 Aug 2025 17:36:24 +0000
Manifest next update:     Wed 13 Aug 2025 17:36:24 +0000
Files and hashes:         1: AXCw4NBuMUc8rBZOSwttIb300jc.crl (hash: 6MqixhrH1gYbKeWCjLKIZN1Gi0cixNEPshpG7m3rryI=)
                          2: 1585570A544C11E9BDFF2B2DC4F9AE02.roa (hash: jZa47LQUiVvIxoLDSyE/2t1CJaYFtRO42+/jeT3MONo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl
                          rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 17:36:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4095 (0xfff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE9F7, serialNumber=0170B0E0D06E31473CAC164E4B0B6D21BDF4D237
        Validity
            Not Before: Aug  6 17:36:24 2025 GMT
            Not After : Aug 13 17:36:24 2025 GMT
        Subject: CN=68939298-b8d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:57:51:d0:ed:e8:9e:98:6d:e9:42:10:27:ed:
                    a9:31:a0:c7:82:db:60:c4:db:7b:a7:61:c7:34:54:
                    02:ac:92:91:d5:10:3c:b9:da:8c:a2:d0:63:d9:29:
                    54:79:c8:06:9b:f9:29:be:f7:e7:16:8c:ea:34:cf:
                    c0:71:46:9d:8c:ac:fe:10:01:50:f8:27:72:c0:5e:
                    1a:27:4c:fc:57:11:dd:3b:9d:35:61:b4:ab:7b:82:
                    3c:bb:94:98:bd:23:73:65:c5:21:18:d5:87:a3:59:
                    85:ee:59:4d:69:4b:ec:2b:22:40:3f:73:26:73:e0:
                    9a:81:b3:6d:34:d2:4a:a5:ef:ea:7a:19:b1:ba:64:
                    ca:27:4f:35:b6:57:f2:4d:22:c1:ec:05:d5:95:eb:
                    cc:60:c3:54:5e:09:1f:28:2f:84:a9:d4:b4:e0:2f:
                    43:95:e1:ed:65:7f:7e:c9:bb:3e:08:a8:ad:13:55:
                    fe:44:18:63:dc:5c:b5:96:0f:a1:39:44:48:ca:e2:
                    b1:89:1e:32:aa:79:42:49:ba:f5:d5:fa:64:b5:14:
                    77:46:ca:12:7d:9b:7f:0e:ac:22:c4:74:aa:14:c0:
                    24:e5:ac:a8:9f:b8:77:ac:42:cd:cc:0d:ee:dd:82:
                    be:d9:e3:da:89:e0:ed:d6:67:e1:b1:10:72:a1:cb:
                    bd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6E:84:4F:18:06:8A:71:21:4D:7C:8F:B7:91:36:95:3F:67:50:6F
            X509v3 Authority Key Identifier:
                keyid:01:70:B0:E0:D0:6E:31:47:3C:AC:16:4E:4B:0B:6D:21:BD:F4:D2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXCw4NBuMUc8rBZOSwttIb300jc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9F7/379EC742544A11E9A350C127C4F9AE02/AXCw4NBuMUc8rBZOSwttIb300jc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:9c:22:4c:3b:a5:59:85:52:ec:02:0d:f3:cc:4a:5b:75:db:
         de:cb:04:35:d7:a3:b7:e2:99:18:00:68:ed:13:2f:d2:a1:ca:
         42:e7:d9:13:85:4c:6b:66:77:b7:94:36:c0:4c:06:93:f0:ab:
         4c:68:ea:6d:60:14:9a:4e:d0:c5:e3:25:79:93:8f:71:73:a5:
         d5:ac:f7:09:94:30:70:68:60:6a:99:eb:1b:33:8a:cf:57:95:
         84:57:85:af:09:86:44:e9:d3:38:05:14:99:6e:f4:4d:a2:31:
         a6:98:71:10:c8:44:fc:59:fc:cb:ef:89:bd:85:7c:ff:08:b4:
         26:d7:e5:89:d7:72:fc:20:73:18:32:a1:92:ab:52:56:0e:48:
         03:2e:43:09:5e:b2:74:c5:7f:1c:68:29:65:d6:1e:f3:ce:30:
         61:92:9e:0a:ff:ec:d6:7e:df:90:88:f2:ab:5f:b2:f7:57:6f:
         38:b4:ea:e6:ed:d1:9c:75:8a:22:b7:69:15:29:31:0a:c6:53:
         dd:ae:ec:8b:64:bc:58:32:4e:67:ea:c1:d9:53:fc:ad:95:c9:
         77:73:24:cd:4f:ed:fe:52:c3:7d:ca:ba:39:2f:2e:71:03:55:
         8a:4a:86:37:87:a9:2e:f5:11:fa:46:f3:63:c3:b9:70:52:0e:
         44:74:e9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:41:29 2025 by rpki-client