Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft
File:                     USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft (raw, json)
Hash identifier:          zGSR4rjc5uXn0C1qdlGxNnZTAcB8lTET5mnr2ONoJ1g=
Subject key identifier:   2A:B0:95:5C:7C:DF:5E:9B:33:2A:19:0F:EB:73:6B:03:5F:97:B3:84
Authority key identifier: 51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E
Certificate issuer:       /CN=A91B9AF0/serialNumber=512619DE0C1D1BB3E577994EE0C5FF30D491CD0E
Certificate serial:       0715
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft
Manifest number:          22C2
Signing time:             Sun 10 Aug 2025 15:48:45 +0000
Manifest this update:     Sun 10 Aug 2025 15:48:44 +0000
Manifest next update:     Sun 17 Aug 2025 15:48:44 +0000
Files and hashes:         1: USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl (hash: DZQEpVeFZkAAIrjICXQ1zYFBBMPiNuivkigucR4uoSI=)
                          2: CCC98C06516B11EBB8942876C4F9AE02.roa (hash: oQ+XeX3QPr5MKR/Pv82IWUhiWxAkN4R4paMHXTKKeg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl
                          rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1813 (0x715)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9AF0, serialNumber=512619DE0C1D1BB3E577994EE0C5FF30D491CD0E
        Validity
            Not Before: Aug 10 15:48:44 2025 GMT
            Not After : Aug 17 15:48:44 2025 GMT
        Subject: CN=6898bf5c-c562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6e:b4:5e:6b:da:28:85:24:c3:92:ae:a8:40:
                    dd:58:14:45:16:c6:1e:31:aa:d0:80:1e:4d:76:94:
                    a6:fd:1f:4c:b6:53:37:62:88:d2:20:ba:59:6f:63:
                    53:48:99:3c:ed:55:2b:06:c5:82:4b:71:af:12:23:
                    fe:d2:b3:ad:0e:e3:d1:bb:44:b7:b1:83:d8:aa:9e:
                    4e:d1:09:3e:9d:3e:0b:bf:5c:b9:13:c9:e4:4d:7f:
                    17:12:aa:06:6c:e5:20:aa:1a:2a:82:45:3c:6c:cd:
                    6b:42:a5:aa:d2:07:3b:98:9e:e0:75:89:4f:ae:4a:
                    f2:9d:d6:26:1c:e2:58:ca:23:01:ac:a0:9a:d1:03:
                    45:92:dc:ef:4a:28:f9:fe:d7:82:96:69:f2:f2:a2:
                    09:46:a1:37:d3:b7:30:61:c0:0c:3e:d6:78:c7:2c:
                    74:3a:b6:43:39:5e:bc:c5:3d:ca:c2:3a:e6:94:23:
                    6e:4f:e7:1a:4f:e9:8c:c9:81:82:4a:b8:66:6e:ea:
                    aa:7e:0c:30:2d:a2:5f:08:4f:4e:ce:93:59:04:89:
                    0c:ad:b4:d0:d9:d5:d5:dd:53:f1:b6:84:44:9a:c7:
                    70:d2:5c:60:cd:c5:55:6d:27:9b:52:7f:00:cb:82:
                    85:b3:0b:8c:da:b8:eb:5a:3f:54:4c:9e:8c:76:08:
                    5d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B0:95:5C:7C:DF:5E:9B:33:2A:19:0F:EB:73:6B:03:5F:97:B3:84
            X509v3 Authority Key Identifier:
                keyid:51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:0b:0e:f1:b7:0e:6b:18:5d:1d:4c:bc:86:1f:63:1d:b6:a7:
         b5:73:be:c4:df:59:ef:c5:01:8f:f3:fd:10:7b:a6:54:18:5a:
         d5:f7:ef:81:46:19:b2:75:00:ab:c0:e6:84:3c:33:fe:eb:81:
         29:41:54:22:13:cd:94:a3:6f:35:96:39:d1:c7:66:1e:b1:be:
         2b:58:a5:cb:79:b2:4c:cc:53:a2:f3:8c:78:bc:04:94:38:8c:
         5b:e7:10:de:25:24:fd:33:cb:69:e6:6f:8c:9c:71:fa:94:9f:
         16:65:03:2c:1a:2e:37:71:bf:17:d4:82:31:a7:ae:b6:b1:5c:
         37:58:ac:44:85:02:09:41:74:7c:c4:f5:a1:49:f6:2e:43:27:
         6c:15:ba:d1:01:d4:f9:4c:cd:c4:d5:e9:91:07:14:f0:7d:44:
         35:33:c9:76:cd:67:b1:b4:12:f8:e8:b3:1b:a1:87:6f:e0:e0:
         e5:33:25:78:39:09:8e:16:2b:6a:4b:21:6e:d7:e5:07:67:2c:
         8e:94:af:82:10:54:77:46:ae:94:ac:ab:18:1d:c5:b1:3c:b9:
         9d:ed:53:86:c6:30:dc:f7:df:1f:75:a9:c7:02:aa:0f:24:d4:
         8b:64:0f:43:a9:c7:cf:57:f1:52:a0:09:81:ba:eb:22:d1:3a:
         0c:2e:f0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:08:04 2025 by rpki-client