Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
File:                     0y2jboghgi5r08gs_6mE56kJw_Y.mft (raw, json)
Hash identifier:          Wzu3vvOovhs1g3bFjaRGvHT/i5fAirwVpWqn7WqtXU0=
Subject key identifier:   16:A0:85:87:A9:A6:59:3F:E6:B9:82:44:D9:AD:C1:1D:5D:30:50:6B
Authority key identifier: D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6
Certificate issuer:       /CN=A91B8EF9/serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
Certificate serial:       33F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
Manifest number:          33E6
Signing time:             Sun 10 Aug 2025 15:18:42 +0000
Manifest this update:     Sun 10 Aug 2025 15:18:42 +0000
Manifest next update:     Sun 17 Aug 2025 15:18:42 +0000
Files and hashes:         1: 0y2jboghgi5r08gs_6mE56kJw_Y.crl (hash: ikQLDJJ91JmPf2a2aZZtO1yWu7OE/btmPQp5KTWlmLw=)
                          2: A1C2C79680FE11E985D53F55C4F9AE02.roa (hash: Ko3Luk3NXRMVTdrKjxB+T1Aq5Rz7BTBaPzcxuwLSdz4=)
                          3: A30DC17880FE11E985D53F55C4F9AE02.roa (hash: FAySI2su8cL3vKBRY/mDcgCBdpz6IW+fV0g4HW92eb8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13300 (0x33f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8EF9, serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
        Validity
            Not Before: Aug 10 15:18:42 2025 GMT
            Not After : Aug 17 15:18:42 2025 GMT
        Subject: CN=6898b852-be99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:af:3b:af:13:6f:73:54:5b:81:17:ad:18:e8:
                    51:02:19:4d:2a:b2:55:c8:07:29:86:13:69:30:7b:
                    aa:95:dc:5a:9f:76:56:a4:15:de:a1:68:00:ee:7c:
                    06:20:10:45:d2:b4:0e:de:87:8b:27:c5:4e:46:5b:
                    3c:dc:d9:c5:71:ac:d8:79:d1:9c:ea:d8:b4:56:1e:
                    96:de:09:3f:aa:2d:29:0c:ba:bf:5e:93:5e:a2:58:
                    ba:4f:ff:f7:b0:b4:22:65:15:a5:1e:c9:9f:e9:83:
                    9a:f7:d7:7f:f5:82:71:04:3d:64:f6:34:59:7f:92:
                    9b:2b:c1:56:32:67:65:5f:1c:fb:8e:14:c5:d2:2c:
                    83:06:01:4d:23:05:a9:34:12:8a:cb:ab:5c:f3:9e:
                    16:11:03:9b:e4:39:b1:8b:4a:87:dd:d7:05:a6:53:
                    59:49:c5:28:b0:43:09:1d:2c:30:a8:1e:c5:32:eb:
                    5e:1c:1f:55:8e:cd:b1:f3:ba:50:11:fb:4b:33:b5:
                    9c:fc:78:ce:b8:a5:e3:a1:cf:64:3c:1a:9c:95:cf:
                    59:32:fa:c8:68:5a:55:7f:52:5f:bc:8f:1a:93:be:
                    38:32:d4:19:1e:25:44:16:66:73:b3:b1:da:5a:76:
                    2b:61:c2:e1:59:be:56:d7:68:f5:a6:e4:04:79:d4:
                    bf:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A0:85:87:A9:A6:59:3F:E6:B9:82:44:D9:AD:C1:1D:5D:30:50:6B
            X509v3 Authority Key Identifier:
                keyid:D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:97:5c:a9:21:b3:40:41:8a:b3:42:db:ce:a5:58:1e:c6:16:
         4b:fe:08:8c:ee:5b:ba:24:29:64:90:c1:1e:9d:d5:51:fc:78:
         91:9f:bd:55:63:92:e5:76:68:a6:7e:02:bd:8d:29:f7:ac:dd:
         9d:6a:cc:ba:78:3c:34:75:e2:ee:68:c7:4a:aa:aa:e0:59:55:
         f2:64:7a:0f:98:d3:c4:3a:c2:74:2f:9e:40:06:cd:cf:dc:ac:
         fa:cb:c1:eb:f4:e2:bc:50:2e:a3:16:02:bb:72:66:c6:63:2b:
         e4:64:1c:55:78:0c:2d:1d:44:4d:40:1f:48:90:28:63:5d:61:
         c4:4b:f9:5e:69:23:60:1b:87:48:bc:0d:67:0a:c9:fa:ad:18:
         73:97:6c:e9:46:1b:af:94:42:e9:cc:e9:0f:dd:9e:a0:02:d4:
         85:fe:a6:df:80:d2:c5:33:83:34:d1:4f:a1:09:e8:44:5b:3d:
         66:5a:57:26:9e:e3:61:ec:0c:1c:5a:01:1e:ac:81:0e:44:ed:
         91:05:f5:c8:c8:52:15:ae:3e:f4:2b:56:1e:68:d0:cb:72:ef:
         00:16:39:55:04:77:1b:de:e9:f8:59:c5:f1:f5:f6:48:99:e0:
         cc:3d:56:2b:8b:5d:1f:27:fb:ec:94:a9:ba:84:81:63:3e:85:
         5a:87:ee:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:11:21 2025 by rpki-client