Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
File:                     3M1VNVK6-KZcGgZrM0f3kyRPV14.mft (raw, json)
Hash identifier:          1iXyPjd7ejxD2obv+qJ6q4kB4KOhld36TfOCgz+9O9g=
Subject key identifier:   43:0A:5E:DF:CA:69:1F:C8:1A:D1:F0:4E:68:4B:5B:C9:47:FE:86:15
Authority key identifier: DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E
Certificate issuer:       /CN=A91BD829/serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E
Certificate serial:       0A55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
Manifest number:          0A4A
Signing time:             Sun 10 Aug 2025 19:44:14 +0000
Manifest this update:     Sun 10 Aug 2025 19:44:13 +0000
Manifest next update:     Sun 17 Aug 2025 19:44:13 +0000
Files and hashes:         1: 3M1VNVK6-KZcGgZrM0f3kyRPV14.crl (hash: j5fecRaQmkeWERzkTdOSur69W9ZJ3WQuZuqq8aIOSX0=)
                          2: 1D28516E70DA11EA957FDE74C4F9AE02.roa (hash: vFM8zP6/yZnn9lA/MIHAlH1VsJ7/4aQRYj46a02OHPU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl
                          rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2645 (0xa55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD829, serialNumber=DCCD553552BAF8A65C1A066B3347F793244F575E
        Validity
            Not Before: Aug 10 19:44:13 2025 GMT
            Not After : Aug 17 19:44:13 2025 GMT
        Subject: CN=6898f68d-b868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0c:55:27:f6:b7:fa:73:df:c5:a8:8f:f8:d2:
                    56:ef:78:0b:c3:9c:e1:fd:38:1a:59:48:60:92:ce:
                    a2:0a:84:90:27:d7:3e:b9:ca:2e:63:de:68:b6:1b:
                    1b:8f:09:85:da:c6:54:e9:7f:91:32:19:ef:17:d0:
                    82:bb:39:e8:0d:78:5e:e7:e1:31:79:92:e6:8a:75:
                    72:6c:79:27:f3:f2:66:a9:84:51:b2:4f:29:99:cd:
                    d3:51:09:b1:5d:01:53:9e:c9:1c:b9:c6:4a:af:0f:
                    07:bb:46:b6:84:cc:86:a9:08:ea:33:b5:88:10:8c:
                    7b:d6:b8:71:8f:69:6b:1e:7c:85:41:ca:b1:3f:a6:
                    a6:12:45:fb:a5:e5:d5:aa:13:cb:05:51:8b:10:9d:
                    9d:13:1a:f2:f0:d7:f9:8b:12:d9:ed:11:98:67:82:
                    e3:0e:74:dd:11:3f:47:4a:e3:3f:c4:d2:bf:c5:7f:
                    50:c7:6c:82:4c:c7:64:09:4e:72:52:11:33:93:3f:
                    9b:fa:64:ab:8a:91:33:ae:98:df:4d:28:48:b8:79:
                    dc:ad:09:9e:de:67:3e:e5:ae:3f:00:8d:64:39:b4:
                    1d:e3:f7:0e:60:89:f4:1a:f2:14:95:7e:61:cc:ef:
                    4d:1b:02:26:38:45:89:74:47:1d:64:a9:29:0e:06:
                    63:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0A:5E:DF:CA:69:1F:C8:1A:D1:F0:4E:68:4B:5B:C9:47:FE:86:15
            X509v3 Authority Key Identifier:
                keyid:DC:CD:55:35:52:BA:F8:A6:5C:1A:06:6B:33:47:F7:93:24:4F:57:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3M1VNVK6-KZcGgZrM0f3kyRPV14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD829/99D7C6A46FEF11EAAF227483C4F9AE02/3M1VNVK6-KZcGgZrM0f3kyRPV14.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:47:71:cd:8c:51:bd:d0:85:be:a8:75:79:19:fb:c9:b4:6d:
         2e:b3:23:d5:ed:9e:52:0b:7e:2a:05:e2:18:ea:84:0d:34:77:
         2a:46:81:73:42:24:8e:2c:47:bb:c7:ca:a1:ad:2f:f7:3c:fb:
         f8:cb:44:ce:08:78:dc:72:da:81:a9:fa:0f:45:ed:36:1a:b1:
         a1:c2:7a:a9:83:7e:f1:c3:2a:08:82:d8:a4:39:3b:b5:70:71:
         34:11:3b:dc:19:8e:09:ad:bf:13:11:65:29:b8:55:66:d8:81:
         09:82:30:f0:f4:70:7d:e3:c8:b5:ad:98:5e:7f:3a:da:c9:c7:
         bb:4a:ce:b6:8b:8b:94:70:24:f8:e6:0c:5f:b4:5c:7d:de:0d:
         9d:42:15:57:c2:72:bd:f4:01:c1:2d:45:4b:38:58:8f:f8:99:
         a6:5c:44:29:fb:4e:79:68:02:85:ae:e6:16:30:18:c3:68:da:
         22:72:02:71:c9:9c:73:53:df:76:e4:ae:d4:9f:55:60:47:7d:
         50:03:a9:41:cc:16:a0:ce:ac:58:80:bf:67:4a:8b:ab:9d:3f:
         fa:90:67:80:77:e2:6e:e6:82:88:59:9d:a7:66:d6:e8:56:12:
         66:56:9f:12:7e:2d:fb:8f:60:24:52:99:f0:31:52:53:88:dd:
         93:67:8b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:57:04 2025 by rpki-client