Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
File:                     dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft (raw, json)
Hash identifier:          hnxCzr6C2EML6bvY+j7XOB9IkTc1nqS3hoJybh/KOWM=
Subject key identifier:   35:21:8C:95:78:68:C0:99:D8:CB:12:EC:4A:8A:1C:6A:F3:D5:8E:68
Authority key identifier: 76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11
Certificate issuer:       /CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
Certificate serial:       0691
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
Manifest number:          0678
Signing time:             Sun 10 Aug 2025 22:36:24 +0000
Manifest this update:     Sun 10 Aug 2025 22:36:23 +0000
Manifest next update:     Sun 17 Aug 2025 22:36:23 +0000
Files and hashes:         1: dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl (hash: 6mJ/dzRXCqfaAwpgmE+f99UdsBzBOS1JpwkeIH60Flk=)
                          2: 94F5846AE0D011ECAF88A30DC4F9AE02.roa (hash: Tkim0bj/DqFtnK3qLWdBDKeH3dbPF/RS93ZGfjewyNw=)
                          3: 9056CDF6A6D211EDA1D2862BC4F9AE02.roa (hash: l25nuyCLbxX8YszYNp7Lh0hCVKg/XaMvp8JSklUBmx4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl
                          rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 17 Aug 2025 22:36:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1681 (0x691)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B29F8, serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
        Validity
            Not Before: Aug 10 22:36:23 2025 GMT
            Not After : Aug 17 22:36:23 2025 GMT
        Subject: CN=68991ee7-58b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3b:5a:29:d2:53:4a:1b:38:f2:4d:bc:5f:b4:
                    fd:7e:23:7e:96:f4:c0:0f:e9:75:46:b4:f4:fe:b6:
                    5d:1f:90:12:1a:99:2b:f7:1e:8d:76:ef:f4:d8:f5:
                    fb:30:55:cc:25:47:a9:cd:56:c1:b9:a1:fc:00:4b:
                    04:02:c2:ec:8b:67:9c:01:81:a6:10:f9:2f:e4:f7:
                    e5:dc:d4:52:ac:ee:db:f5:d6:8b:a1:27:34:87:a9:
                    35:75:38:22:f6:7b:83:ad:14:74:91:77:78:55:ad:
                    10:bc:e2:ff:4a:71:1d:b1:b2:5a:5c:b2:da:15:4d:
                    ba:86:41:06:c1:c0:bb:44:d1:38:17:19:c2:91:15:
                    b6:62:09:c7:28:17:53:8d:87:eb:f8:4e:5a:30:34:
                    28:45:46:ed:9a:bb:4d:2a:90:76:8a:94:fa:fb:35:
                    c9:7c:b6:8b:1e:6c:58:68:70:74:19:c2:7d:c6:30:
                    10:fd:54:20:5d:99:aa:94:dc:7a:01:07:0b:89:69:
                    01:1e:cc:0b:fb:ef:77:ce:4f:96:95:66:2a:5d:6a:
                    4f:1d:ed:68:a9:ad:94:e6:27:3d:f7:24:4c:e0:e7:
                    9c:55:f0:47:0c:df:b9:68:be:3c:3c:3f:2f:9f:17:
                    ac:35:e2:5e:e4:98:87:15:b6:c2:14:6e:14:29:33:
                    95:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:21:8C:95:78:68:C0:99:D8:CB:12:EC:4A:8A:1C:6A:F3:D5:8E:68
            X509v3 Authority Key Identifier:
                keyid:76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:75:d6:c7:d6:71:d2:df:16:70:43:4e:bf:c7:22:0f:0b:15:
         9a:9c:6a:6a:9f:ce:28:8f:3b:b3:86:95:91:5c:c9:d2:88:49:
         99:e1:e6:86:cf:be:f5:cd:f9:fb:99:9c:af:39:6e:10:d9:79:
         75:17:05:05:80:4e:e9:54:e7:ca:c2:d5:16:cf:01:4c:c0:b8:
         1d:e4:44:72:bc:04:08:40:47:29:9b:89:cf:cf:12:ec:0b:2d:
         26:07:4c:b2:51:43:6a:f1:df:9a:36:b6:f4:cd:bb:56:d5:fc:
         f0:4e:6a:c2:97:10:41:48:44:54:15:40:aa:6c:33:77:0b:53:
         9a:50:25:4c:ad:5c:0d:e3:ad:6a:d4:3c:6f:0c:ea:df:b3:70:
         0a:7b:4c:3e:07:7c:a9:ee:fa:74:85:fb:0d:f2:a9:ed:d0:bb:
         79:7b:fe:16:8a:97:9b:1e:f4:95:4b:b9:fc:fc:06:03:1e:2a:
         b5:23:07:ff:29:f4:0f:05:ae:ed:98:ee:8f:23:7d:90:35:a4:
         b5:3d:d7:b6:bc:bd:46:0e:21:3d:90:39:95:e5:87:0e:1b:bc:
         51:34:73:26:bb:30:49:df:5c:67:eb:0d:96:73:4c:98:df:ee:
         06:05:d5:3c:1f:81:93:d9:02:cc:76:80:5c:b3:5d:cc:17:74:
         41:07:80:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 04:14:30 2025 by rpki-client