Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft
File:                     CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft (raw, json)
Hash identifier:          oEDusySCw+MvMXuo4wAyA4K2NSUeMmdpbX/gByiAGD0=
Subject key identifier:   BF:4A:E1:35:13:7B:FB:29:8C:0B:37:9D:04:BD:CD:88:8E:33:6B:D9
Authority key identifier: 08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F
Certificate issuer:       /CN=A91B8D33/serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F
Certificate serial:       017B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft
Manifest number:          0171
Signing time:             Sun 03 Aug 2025 04:13:15 +0000
Manifest this update:     Sun 03 Aug 2025 04:13:15 +0000
Manifest next update:     Sun 10 Aug 2025 04:13:15 +0000
Files and hashes:         1: CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl (hash: VKmb25huPMkLKz8JWNXi4UgJGRZXAo/1Db2EKcA+zyE=)
                          2: E62F8796D1BD11EFBCCC0B68C4F9AE02.roa (hash: fNs1z1deex6fcIdqMxez0n/drhicpYWMQnLuUAo17fo=)
                          3: 86D7DAE6D1C211EF9AA9410EC4F9AE02.roa (hash: ygqqEQTyg2IH19vlQAL4kX0HHDThJX4eE1C7WPj4wYg=)
                          4: C698E13ED1BD11EF9C00D867C4F9AE02.roa (hash: xRbmb+/1S1f8++5LVT2TgnO4g2wWlkEYjHuBK2BLWRw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl
                          rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 04:13:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8D33, serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F
        Validity
            Not Before: Aug  3 04:13:15 2025 GMT
            Not After : Aug 10 04:13:15 2025 GMT
        Subject: CN=688ee1db-0a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c3:c6:45:6c:c4:5c:57:3a:0e:0a:ce:94:e5:
                    32:18:5c:fa:9a:7f:95:0d:8e:14:16:23:99:9b:f6:
                    86:c2:a1:20:1a:44:df:13:5b:60:51:17:bb:60:70:
                    4a:34:f5:41:b2:f7:3b:ce:05:8d:8f:09:e7:36:bc:
                    05:80:7f:72:52:48:94:92:df:15:02:3c:9d:d4:1a:
                    85:f0:28:ab:2a:e3:35:13:43:32:28:03:e3:32:80:
                    f7:a4:dd:03:74:25:4c:dc:08:1c:ce:d5:66:6f:d2:
                    50:72:9c:dd:25:29:ae:f4:52:5e:7a:7b:61:ab:f6:
                    82:36:9f:e5:dd:05:a8:7e:cb:78:b8:9f:05:2a:74:
                    95:0d:e8:09:cb:e3:3c:88:0f:00:17:15:72:2c:3f:
                    bc:f2:40:98:5c:90:7f:02:cd:dc:5d:ad:ea:07:7a:
                    d7:7b:68:f2:44:65:32:7e:b2:d5:d2:97:8e:47:c6:
                    9f:75:73:62:a4:5e:b2:14:02:9a:8a:3c:4c:14:ef:
                    11:c6:df:58:1b:c4:ad:97:b5:4f:32:dd:13:90:b9:
                    0d:ce:3e:22:d5:7c:c8:ab:e4:af:7f:9a:37:df:f8:
                    57:7f:7a:d6:33:00:a5:f5:43:e6:93:72:94:72:4c:
                    27:ce:53:3c:79:be:a6:05:a8:c6:e4:2e:88:8c:16:
                    03:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4A:E1:35:13:7B:FB:29:8C:0B:37:9D:04:BD:CD:88:8E:33:6B:D9
            X509v3 Authority Key Identifier:
                keyid:08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:c8:b5:4e:59:3b:c0:02:67:ef:62:5e:2e:f1:be:1e:22:61:
         87:29:76:90:7b:fe:9e:73:74:3a:1e:a9:ed:71:4a:c6:35:0e:
         5f:0b:5e:5e:be:18:ba:69:ad:02:68:38:b7:ad:33:ab:de:84:
         db:6f:aa:b1:6c:6d:41:3c:fc:e8:41:e3:29:3c:be:6b:32:5d:
         92:22:bd:27:58:6d:91:54:d3:4a:1a:87:cf:87:4b:65:45:8d:
         ee:bd:13:84:53:70:86:e1:e3:1b:cb:ca:3b:44:6e:b4:b9:80:
         d0:50:c3:3f:69:45:9a:84:cc:27:c3:a4:17:c8:04:5c:e5:4b:
         8a:55:fc:73:28:d5:f6:42:25:7a:f9:79:a7:0a:a8:c6:b6:ce:
         f5:44:bb:2e:16:88:bf:3b:1c:3e:bd:4f:8d:52:3f:83:c1:fc:
         18:80:25:3c:b4:c2:61:87:bb:8e:53:39:b2:54:af:70:76:30:
         8c:06:c3:94:c5:8f:67:2c:60:63:7f:78:96:d3:9b:44:bf:08:
         83:14:32:fe:81:26:3b:45:2c:46:e8:b2:13:cd:73:d5:62:f9:
         32:a2:28:50:06:85:e1:02:5c:91:17:a2:b1:73:c6:76:11:92:
         97:56:d6:fe:77:dd:28:a2:bc:aa:d9:b4:cb:bd:c6:db:8e:1f:
         6a:ee:98:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:23 2025 by rpki-client