Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
File:                     Ae4IndSGeyyydlgqqXsxj1Cepu4.mft (raw, json)
Hash identifier:          8iiOKlbBxHLiXWYBvoLQI6RXgIld5Yu21Tqv0WNFDeU=
Subject key identifier:   D0:E7:D7:1E:8E:19:58:F1:75:E3:43:07:3A:49:B2:C8:6D:21:83:7F
Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE
Certificate issuer:       /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
Certificate serial:       0B69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
Manifest number:          0B42
Signing time:             Sun 10 Aug 2025 19:12:49 +0000
Manifest this update:     Sun 10 Aug 2025 19:12:48 +0000
Manifest next update:     Sun 17 Aug 2025 19:12:48 +0000
Files and hashes:         1: Ae4IndSGeyyydlgqqXsxj1Cepu4.crl (hash: aoUvnHH2dW9EvNddiMbcIHrK9m8XvEFvaKnp4a0dFX8=)
                          2: 3A883F284B3E11F0817E3C31C4F9AE02.roa (hash: v527tHPDU0uVPbXjXzW0KocA0xKJVkiNxeh4nwu9KSk=)
                          3: 12AE33B4419811EAA268D964C4F9AE02.roa (hash: WByJv+/0UWcFSBkuQVt24N8Bh5eeznOvZMkj35xeU8o=)
                          4: A5FE56B2596B11F0AF4BB31EC4F9AE02.roa (hash: zMHgm7bt75/SBr1Sd5c0nMj65bhLa3dcrx/80ou+gP8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl
                          rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2921 (0xb69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
        Validity
            Not Before: Aug 10 19:12:48 2025 GMT
            Not After : Aug 17 19:12:48 2025 GMT
        Subject: CN=6898ef31-afb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2d:61:87:d0:8c:e0:9d:c8:12:c6:77:74:f1:
                    9c:11:9c:de:b7:b7:8a:13:34:54:58:d1:c6:2d:fe:
                    82:d0:36:e0:cb:d0:49:e2:72:50:f6:d3:15:ef:8d:
                    6d:62:64:1d:4f:a7:4c:05:ef:af:f3:3e:79:36:3c:
                    60:3f:6f:0e:79:25:66:fb:13:50:21:6c:89:dd:84:
                    ca:60:1e:4b:ff:cb:f9:1b:1c:5a:5d:41:22:6e:c7:
                    f6:a3:1b:d7:34:ce:c1:b7:c0:60:b8:75:d1:b9:f2:
                    da:a1:9a:db:70:82:0e:a3:a3:0b:aa:04:a4:87:ee:
                    7c:fb:14:58:0d:e1:73:9a:2c:32:cc:21:72:e5:06:
                    97:da:7b:ce:1e:8f:36:27:2d:17:47:94:dc:20:ad:
                    6f:91:97:5e:e9:2e:41:c9:8c:68:19:f0:e3:5a:36:
                    cd:33:9a:ee:c0:84:75:29:a2:aa:1b:34:02:54:7e:
                    aa:5a:dc:f5:98:1f:4a:49:37:a5:86:83:44:af:32:
                    3c:48:eb:2f:a4:df:ba:87:41:85:d5:6d:e6:68:12:
                    51:27:e4:a2:c6:26:a0:3e:a6:a3:b5:57:34:51:27:
                    92:e6:69:d7:57:3e:66:87:4e:0c:60:8b:49:cb:81:
                    3e:d4:d2:65:a1:68:3c:c0:bf:16:77:ef:0d:f9:2e:
                    38:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E7:D7:1E:8E:19:58:F1:75:E3:43:07:3A:49:B2:C8:6D:21:83:7F
            X509v3 Authority Key Identifier:
                keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:d4:5c:9e:50:7a:86:98:63:61:e4:b7:cb:6d:68:15:ae:1b:
         e6:91:1d:c6:31:b9:fa:9d:58:ca:b8:55:b6:c7:2f:0d:70:96:
         32:95:b1:06:a0:84:45:85:a4:f3:7b:04:fd:16:91:c8:e0:29:
         28:01:ac:2a:df:12:38:01:d9:f7:68:a0:07:7f:78:79:22:61:
         bd:f2:c2:08:4a:f3:cf:1d:34:e5:7b:0a:8b:72:f6:d3:40:b0:
         d4:eb:96:92:7c:11:80:8b:72:60:26:9b:47:68:18:c1:58:d4:
         3b:22:5c:89:4c:38:ef:01:9c:4d:5f:c5:ca:d4:b9:d1:e7:fd:
         db:c0:25:45:bf:50:30:f6:27:2c:a0:f8:1a:dd:b2:67:0a:e2:
         98:75:42:c1:4e:74:08:b8:e8:c2:fe:e5:62:6c:f3:18:b2:fc:
         4a:cb:c2:19:b4:1e:9c:3e:e4:39:dd:45:71:0a:da:4f:e1:6a:
         8f:25:e2:d2:b9:c3:cf:eb:a5:ae:73:a3:47:df:ff:16:b0:11:
         42:b1:2c:7c:67:7f:1b:98:43:6c:32:28:8d:4a:5e:09:ba:c3:
         1f:29:16:79:96:31:12:af:75:be:55:0a:d8:0a:fa:41:f6:42:
         ac:ae:ed:4d:d0:46:01:51:ad:7e:c8:dd:8b:9d:ca:d7:92:54:
         53:94:d1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:43:28 2025 by rpki-client