Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft
File:                     0Ll9wB2J8jqAX75YYe43vwmcP_A.mft (raw, json)
Hash identifier:          g99FW89EWaJHZVZhUUD/lnn1fjAyFJ/LdImnXd1B0+I=
Subject key identifier:   27:17:22:CE:6C:AB:EF:A9:AC:AE:B2:FA:DA:C2:32:68:5A:B6:18:54
Authority key identifier: D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0
Certificate issuer:       /CN=A91B62BF/serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0
Certificate serial:       0C51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft
Manifest number:          0C3F
Signing time:             Sun 10 Aug 2025 18:38:47 +0000
Manifest this update:     Sun 10 Aug 2025 18:38:47 +0000
Manifest next update:     Sun 17 Aug 2025 18:38:47 +0000
Files and hashes:         1: 0Ll9wB2J8jqAX75YYe43vwmcP_A.crl (hash: TYAEu1zn6Sm6cYK+aPrW9CHKyXrrNtbAF1XHueSn51g=)
                          2: 498ED6046FD011EDA007D478C4F9AE02.roa (hash: lwkH9V+4ruYpDtKVAny/uyyCWO7r9GoTBPNu4gEXlEg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl
                          rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3153 (0xc51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B62BF, serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0
        Validity
            Not Before: Aug 10 18:38:47 2025 GMT
            Not After : Aug 17 18:38:47 2025 GMT
        Subject: CN=6898e737-a601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2f:74:fb:c7:4d:b0:14:c7:9b:9c:49:b5:05:
                    bd:4b:f2:c4:79:ce:1a:11:60:1e:08:b5:56:52:0e:
                    e8:03:30:83:8e:b1:f0:5c:90:28:a2:35:f3:f7:e9:
                    07:68:5d:c9:37:16:3c:eb:6b:e8:58:15:2d:37:52:
                    ab:75:63:f5:bd:18:31:af:95:9c:fb:0a:53:bc:0d:
                    f1:29:a5:6c:1d:33:f6:db:5a:98:20:b4:6a:a2:9f:
                    14:bb:e1:03:a8:24:3d:0c:2f:2f:bb:4c:72:70:40:
                    1a:71:53:ce:c5:43:50:26:d3:17:80:e3:88:ba:d4:
                    ae:23:c9:9c:68:f8:70:51:04:03:f7:7a:d4:51:0f:
                    0f:25:01:20:b3:81:b2:e9:01:c2:85:d2:88:f9:ae:
                    aa:bf:13:03:7e:82:7f:de:99:ab:45:97:d3:df:69:
                    21:c6:b5:a6:3b:4d:34:72:8c:96:95:70:dc:b9:30:
                    a4:e7:bc:50:fc:ae:63:bc:d4:ff:66:ba:27:8c:20:
                    cf:6f:30:65:d5:f8:ed:e3:8b:8a:a6:62:4a:2e:74:
                    ff:54:62:fd:fe:36:66:95:51:c5:8f:8b:02:1c:2f:
                    e8:16:66:02:9a:b0:3c:12:98:f6:1b:d9:f7:d2:58:
                    66:3c:02:19:07:03:73:2e:37:77:eb:7a:2b:e5:3b:
                    ed:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:17:22:CE:6C:AB:EF:A9:AC:AE:B2:FA:DA:C2:32:68:5A:B6:18:54
            X509v3 Authority Key Identifier:
                keyid:D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:68:fd:69:d1:54:7c:97:99:95:e3:28:ab:ba:75:14:83:f0:
         a8:cf:d5:3b:d9:6d:ab:0a:dd:57:48:d7:fa:03:61:83:c1:02:
         ac:70:83:19:98:6b:30:3d:b0:4c:f3:3b:f9:62:4d:4e:9d:de:
         55:db:e4:2c:76:03:3e:8f:78:9c:f6:6d:69:8e:ac:bc:fa:d7:
         28:8a:58:bb:52:54:f1:91:12:bc:97:46:a4:76:fb:39:b0:56:
         cc:74:c0:cd:d4:65:4d:42:e9:c8:22:16:06:c3:2f:97:12:b2:
         33:b2:81:8e:f4:e2:2c:13:85:cf:3d:24:17:00:3e:55:68:67:
         5c:a5:d9:b5:9c:85:eb:2b:ea:2c:95:d6:b3:e5:64:d6:3d:07:
         6b:f6:65:b7:c4:33:bf:7f:f9:d8:98:46:dd:56:02:73:37:30:
         50:5e:cc:86:a4:65:ef:96:20:7d:81:a4:9f:ef:96:29:d3:b6:
         5b:18:17:db:7c:ed:ec:0d:f8:67:2a:74:2b:ee:24:cf:3a:f1:
         50:01:41:20:57:cc:26:3b:d6:ba:04:cc:22:5f:67:66:6e:03:
         a7:4f:ba:47:d7:a9:65:b0:71:61:1b:04:f8:41:70:96:ab:81:
         92:83:b0:97:f9:e4:02:29:62:28:90:bf:12:8b:e0:c3:3a:e3:
         ed:90:84:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:08:11 2025 by rpki-client