Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
File:                     JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft (raw, json)
Hash identifier:          XohU9AkpIE3Sog9rZvIED0K2QeTZojahewspu0f3hd8=
Subject key identifier:   D7:B5:1C:96:50:4F:F3:8B:9F:17:5B:A2:4D:6C:DF:F0:2F:A0:AD:93
Authority key identifier: 24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F
Certificate issuer:       /CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F
Certificate serial:       075F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
Manifest number:          0745
Signing time:             Tue 12 Aug 2025 22:06:27 +0000
Manifest this update:     Tue 12 Aug 2025 22:06:26 +0000
Manifest next update:     Tue 19 Aug 2025 22:06:26 +0000
Files and hashes:         1: JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl (hash: eSuAhZEFwi9PEBYNKVDSD9GySrueQGhvBrWC2sH5s5w=)
                          2: A46317803F5211EBB1B1701FC4F9AE02.roa (hash: FMNZ9SsPDMaBsxCn7D6dqqqWjFTqP/F+Fz8blXpHCbk=)
                          3: C74B01CA3C3E11EBA08CAC72C4F9AE02.roa (hash: IWEwNMzAHK/ef+4K/t2BfxtQJgKm9A+qNvlUUfJjqyg=)
                          4: A50523F43F5211EBB1B1701FC4F9AE02.roa (hash: MXwTZ0HTMZgGNdBLgLlhrgI3zl9svxesevJasfZECFs=)
                          5: 65DA620C798111EBBD22251CC4F9AE02.roa (hash: /RISfiBtXbfKLP2ghs+Yyw4wfbS03k7nxtHus8aqX1g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl
                          rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 22:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1887 (0x75f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B58FF, serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F
        Validity
            Not Before: Aug 12 22:06:26 2025 GMT
            Not After : Aug 19 22:06:26 2025 GMT
        Subject: CN=689bbae2-6351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:58:4a:7c:a3:60:95:95:f4:4e:f7:0c:a5:3f:
                    50:c3:cb:7a:32:2f:f5:8e:b7:89:c5:b9:ef:40:c2:
                    5b:06:d2:76:dc:78:d6:f7:10:b4:af:c1:de:b9:9a:
                    08:14:c6:7e:14:83:ba:49:31:45:07:5d:26:16:cf:
                    0a:d9:a0:5a:ed:ef:12:6f:3e:17:69:03:9e:6d:d9:
                    ee:a4:00:2a:21:ca:c4:c1:06:1a:f2:65:89:18:d2:
                    11:ab:36:76:ab:b7:d4:75:d6:b8:f1:e9:bc:7d:dd:
                    b3:d6:82:4d:46:b7:c6:3d:f2:d6:47:7a:5d:81:b7:
                    9c:f3:34:09:d3:44:c5:f4:5e:57:94:7a:bc:2a:ec:
                    b3:3b:14:43:aa:a2:ad:06:f8:9c:30:39:67:b4:3d:
                    1a:05:93:cd:13:51:88:fa:a4:f5:59:96:62:21:84:
                    fc:f7:8d:30:91:0a:4a:04:74:fa:c8:b8:fe:ce:de:
                    3b:5d:40:88:5f:9a:7e:d1:f8:08:de:88:61:d9:09:
                    ae:71:84:f1:0b:c5:71:09:63:08:e4:59:70:3d:1c:
                    e2:4c:ec:91:32:9e:f2:f3:29:f4:54:bf:20:76:0e:
                    d4:8e:e3:30:2b:14:2d:f6:2a:10:a4:ad:c0:47:fd:
                    78:af:4d:c3:5b:42:3e:3b:cf:4a:07:86:e2:f6:17:
                    0a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B5:1C:96:50:4F:F3:8B:9F:17:5B:A2:4D:6C:DF:F0:2F:A0:AD:93
            X509v3 Authority Key Identifier:
                keyid:24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:f9:47:4c:73:ca:f0:85:cc:58:fb:05:67:0e:48:2b:e4:73:
         60:35:b9:94:42:13:cf:59:a1:2c:48:5e:7a:97:f9:7e:39:bb:
         a6:41:09:b7:54:9c:26:2e:dd:6d:9c:2c:61:5b:8e:59:be:14:
         04:c3:17:76:59:f7:99:f0:05:b4:7d:5d:38:f3:4e:df:43:fe:
         91:0e:74:dd:26:69:04:1e:92:fe:2d:95:84:61:ad:51:a2:ac:
         0e:70:4e:b6:e3:f4:af:f6:70:08:83:5a:ae:82:a6:a3:3f:ca:
         15:cc:94:64:72:ff:17:bf:66:6d:d3:bd:9c:a9:82:89:2e:a3:
         be:2b:5f:c7:d3:89:5c:88:a1:df:da:8e:8e:fa:ab:39:53:e4:
         39:c8:e6:d4:79:4e:9a:8f:23:d5:d1:a5:d5:0f:79:4b:ec:ca:
         6f:c2:d8:27:3c:22:02:6b:4e:13:4a:5a:3f:55:04:7b:76:48:
         ab:ef:76:25:48:22:28:cf:56:25:26:5e:fd:c2:14:b2:1b:3b:
         ec:7e:26:e0:b1:40:9b:f8:aa:b7:da:c9:42:5a:af:8b:8b:ab:
         52:7f:43:81:53:a0:9c:4a:3f:ff:d8:79:2c:4d:c6:25:90:7a:
         17:e2:c6:19:65:3c:8d:24:81:f5:97:bb:c8:ec:23:b9:a2:53:
         fe:21:15:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:49:14 2025 by rpki-client