Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft
File:                     t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft (raw, json)
Hash identifier:          AHCNRRtMHl3B0PZRZLXlEgXMIbJrWX4HEA2Cq45NHAc=
Subject key identifier:   F1:33:65:CC:85:05:A9:DC:E9:07:2B:CA:92:9F:8E:33:3C:6F:D6:1F
Authority key identifier: B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5
Certificate issuer:       /CN=A91B4E11/serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5
Certificate serial:       E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft
Manifest number:          E3
Signing time:             Sat 09 Aug 2025 05:50:45 +0000
Manifest this update:     Sat 09 Aug 2025 05:50:44 +0000
Manifest next update:     Sat 16 Aug 2025 05:50:44 +0000
Files and hashes:         1: t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl (hash: 8CNAfLWWByjUoTzbwUvQYZ7oOVkGOY3VdAwDx+x+9ug=)
                          2: A2939A381CB711EF8F98240CC4F9AE02.roa (hash: h1iGqKYaoNj3rvyh2GNyWQUuRTq6Az6gkGmiqF75xZw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl
                          rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4E11, serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5
        Validity
            Not Before: Aug  9 05:50:44 2025 GMT
            Not After : Aug 16 05:50:44 2025 GMT
        Subject: CN=6896e1b4-5702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f8:36:1c:92:0d:5c:93:b6:02:d4:17:f5:68:
                    b6:24:6a:1f:d1:4f:6b:cf:4a:f7:b5:ff:4b:d3:dc:
                    cc:ba:b4:05:69:1c:bf:37:2d:1c:2d:e6:97:ec:00:
                    1f:ed:d0:9a:11:77:96:31:60:9c:58:e3:a3:57:66:
                    63:0d:fa:9e:2f:af:12:f9:78:30:7f:b7:2f:c3:6e:
                    ea:f1:d7:20:ac:9f:65:07:96:00:19:b4:8a:74:fb:
                    f3:d3:d5:bf:3a:be:10:37:af:cc:16:a7:aa:d7:d8:
                    3d:59:2d:9d:b2:db:fc:38:94:95:30:b8:46:b2:41:
                    05:2d:82:6f:29:35:03:f6:19:20:3c:62:73:73:5c:
                    f0:07:dd:5c:ca:36:d6:11:46:c3:1a:73:30:31:0d:
                    15:d9:a2:a6:af:82:9f:98:5f:05:85:98:3b:5d:c9:
                    c7:34:fd:58:29:df:a9:eb:8a:24:6e:19:3d:7a:37:
                    97:dc:b2:2b:3a:e5:72:e8:92:c3:c1:ce:e1:ba:69:
                    6e:a3:27:7b:32:ca:15:01:48:42:ca:5d:3f:41:c7:
                    7f:c4:16:9c:d4:be:58:52:01:52:23:18:ee:de:68:
                    94:e3:d2:55:77:e3:55:5e:09:93:4e:1a:fc:f7:f0:
                    01:f5:a6:5d:4a:46:37:1d:b7:12:72:54:46:70:84:
                    75:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:33:65:CC:85:05:A9:DC:E9:07:2B:CA:92:9F:8E:33:3C:6F:D6:1F
            X509v3 Authority Key Identifier:
                keyid:B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:a9:b9:77:5b:c2:ef:3b:db:94:05:9f:11:b6:91:08:b3:25:
         67:22:d1:95:08:6b:50:e4:d1:49:43:14:39:29:37:be:15:06:
         8e:62:1a:6b:95:d1:1c:af:ff:69:fa:e6:66:ed:97:bd:4d:60:
         73:e8:eb:65:6b:8b:0a:8b:46:1d:da:db:1c:83:09:b2:84:37:
         70:78:ac:d2:e4:82:ed:4a:57:19:b4:b8:26:f5:37:34:2b:c8:
         e3:18:73:16:a8:b4:0e:93:33:67:1a:eb:cb:d1:09:cf:73:64:
         02:11:d1:89:12:d5:03:78:7c:45:40:24:14:7f:31:88:0d:d4:
         ff:c2:9b:d5:6e:16:af:99:3b:37:c5:17:51:a0:a8:d1:3f:ba:
         bf:ea:92:97:3d:57:24:b0:a7:27:41:b3:7f:45:57:c9:89:db:
         cf:7c:0a:4d:0c:3f:11:bc:92:94:30:96:f7:e9:b8:e3:04:ca:
         33:43:2a:79:57:ce:24:1f:e3:63:99:f0:7d:cc:76:ee:ab:d5:
         d6:31:f5:35:3c:40:33:dd:e8:dc:0e:6a:42:7c:d4:56:43:2e:
         1e:1c:b9:63:ab:1d:2d:47:4e:51:9b:c2:f4:d7:b5:0b:35:89:
         15:7f:ac:80:d5:1b:72:c2:2e:b3:6d:37:26:79:2a:9d:38:90:
         0b:31:8c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:45:14 2025 by rpki-client