Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
File:                     R0Blek4vuGe_tE2_bLi8HdGywg4.mft (raw, json)
Hash identifier:          DS0bTBbl+s6338ePQfhZghIpqtlq2dcFNwGmo1hZZyE=
Subject key identifier:   93:64:EA:76:6D:AC:2E:90:6C:10:3F:8D:97:46:2C:49:92:C5:1C:11
Authority key identifier: 47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E
Certificate issuer:       /CN=A91BA733/serialNumber=4740657A4E2FB867BFB44DBF6CB8BC1DD1B2C20E
Certificate serial:       02A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
Manifest number:          029A
Signing time:             Sun 03 Aug 2025 02:11:07 +0000
Manifest this update:     Sun 03 Aug 2025 02:11:06 +0000
Manifest next update:     Sun 10 Aug 2025 02:11:06 +0000
Files and hashes:         1: R0Blek4vuGe_tE2_bLi8HdGywg4.crl (hash: H4ae+Lotpi3GIS7NOu2Np2EP6sKewuoE0ltMIYVVLfA=)
                          2: 7AD326AC663911EDA919A02AC4F9AE02.roa (hash: e4e/2weEWR9V4/NE3J2YPV05BSS+/w2P0bwX2/dmeeA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.crl
                          rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 02:11:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 672 (0x2a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA733, serialNumber=4740657A4E2FB867BFB44DBF6CB8BC1DD1B2C20E
        Validity
            Not Before: Aug  3 02:11:06 2025 GMT
            Not After : Aug 10 02:11:06 2025 GMT
        Subject: CN=688ec53b-00cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:de:1f:6c:06:57:11:31:87:57:58:bf:7c:8b:
                    eb:fd:75:ff:72:2b:7b:2d:13:aa:f9:e1:b3:96:e6:
                    e2:3f:a1:6c:ce:64:53:36:b6:c8:77:26:7e:d5:30:
                    d1:46:06:21:18:fa:15:22:58:a8:5d:86:aa:1d:8d:
                    02:f2:b8:32:d0:ef:30:61:aa:31:7e:0d:a7:ee:09:
                    44:e5:5f:d1:53:29:2e:3c:2d:11:d1:7a:d4:2b:a7:
                    ab:fb:31:0f:97:24:ff:b4:8a:e5:0e:41:b3:03:4c:
                    49:98:92:35:61:fa:f0:c3:6a:6e:5c:ff:bd:f3:82:
                    ec:45:f1:f9:ed:66:61:90:5c:f5:5e:48:fd:09:40:
                    04:d4:44:1a:52:33:b1:37:ab:cb:7b:0a:85:62:d5:
                    e6:48:ea:27:ec:dc:1c:a0:5b:25:65:c3:6e:bf:e2:
                    62:ef:4c:cc:f6:d6:7b:3c:a8:b7:81:41:d0:22:e1:
                    21:82:51:44:23:20:39:3b:00:c7:80:ac:c3:a3:70:
                    b8:80:37:9e:58:56:fb:63:0a:0d:22:cc:2e:e5:90:
                    3a:81:35:f2:67:e6:1a:f8:dc:7f:44:e0:b5:ae:92:
                    a3:7c:f2:d2:fd:8a:ab:9a:f8:c7:83:cd:30:d6:5b:
                    75:b0:93:ad:14:b4:7b:d2:f6:5b:2c:cd:97:56:63:
                    f1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:64:EA:76:6D:AC:2E:90:6C:10:3F:8D:97:46:2C:49:92:C5:1C:11
            X509v3 Authority Key Identifier:
                keyid:47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:fe:a8:ea:d6:b5:11:28:4e:cb:34:df:62:b3:0b:82:45:39:
         06:79:d3:0a:ac:91:8f:18:3c:26:5a:79:fe:5e:10:46:e0:ac:
         51:8f:08:d4:e0:8e:12:c1:0b:aa:c3:07:29:58:51:d8:1c:04:
         24:f8:5f:5a:38:69:9d:f9:3f:80:85:8e:c7:9c:1a:c0:a3:0e:
         43:4d:c1:19:78:83:b0:b4:6f:1f:01:73:a2:00:16:71:bf:a7:
         5d:23:15:1d:4d:03:90:89:7c:be:fd:fe:ab:c9:e9:2b:85:66:
         0b:ce:eb:b2:a5:44:56:35:9c:63:67:27:08:e0:45:3b:7e:09:
         d0:46:81:a3:24:63:45:32:d3:d3:8a:ad:e1:bd:c6:b8:b3:76:
         68:17:16:b3:81:5e:40:1b:8d:1d:f6:fe:a9:0b:c0:95:7d:ee:
         06:ca:e1:2d:f9:6d:2e:b6:7b:83:11:ea:af:9e:4c:27:17:7a:
         16:a7:2f:6b:69:ef:1b:e2:02:48:93:fd:bf:a1:76:6a:b6:e6:
         30:6c:d5:6f:13:69:c8:30:06:8b:43:5e:94:35:66:74:12:b3:
         f1:2b:bf:d1:e9:29:40:64:45:bf:c7:47:c9:65:0d:8f:e8:09:
         7a:4a:69:07:d9:bb:b8:fb:d7:ee:48:63:a9:6d:5b:31:77:79:
         f0:15:7a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:23:10 2025 by rpki-client