Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
File:                     fBlP7bilyMl2697IST3zw_CMyOI.mft (raw, json)
Hash identifier:          fxmXFE1AZEnmWtuyK0ISHQdTRwdzn2H/hobsmkLc4+A=
Subject key identifier:   07:4E:F4:ED:F1:D4:16:C0:B5:1C:97:21:06:91:3D:47:7E:32:20:43
Authority key identifier: 7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2
Certificate issuer:       /CN=A91BE056/serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2
Certificate serial:       011D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
Manifest number:          0117
Signing time:             Fri 08 Aug 2025 23:51:12 +0000
Manifest this update:     Fri 08 Aug 2025 23:51:11 +0000
Manifest next update:     Fri 15 Aug 2025 23:51:11 +0000
Files and hashes:         1: fBlP7bilyMl2697IST3zw_CMyOI.crl (hash: maz4N6Y9fT7IA+djjcSk1E/Ruc+YTrVlW3MgRyp2JEM=)
                          2: C7AAEA76637311EF97465324C4F9AE02.roa (hash: 7qAgqeHaZPQYvPPHuv1+My9lZgN4hj2uJJ26C3QxuHc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl
                          rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE056, serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2
        Validity
            Not Before: Aug  8 23:51:11 2025 GMT
            Not After : Aug 15 23:51:11 2025 GMT
        Subject: CN=68968d70-51c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f1:fe:ba:ee:2b:d8:27:97:7b:08:68:fc:54:
                    de:68:32:02:b7:ea:fa:1c:57:0f:11:7a:07:df:31:
                    c5:56:70:f7:03:bc:19:c2:a2:a7:a5:34:24:32:30:
                    40:2b:84:d6:5f:1c:39:de:89:75:2c:78:43:bc:09:
                    3f:a1:b2:c7:94:2e:a8:35:e6:30:27:c6:23:bb:2f:
                    22:0c:70:46:49:1b:4b:4a:5d:be:08:74:d1:a7:51:
                    2f:ca:34:3c:35:58:3a:68:81:fc:b9:e3:70:7f:cb:
                    03:38:7c:df:5f:04:cf:e6:fc:0d:2d:ad:62:09:81:
                    ca:46:15:4c:f9:96:26:54:bc:da:cc:bc:c7:b4:14:
                    57:17:99:55:35:bc:99:ef:15:b6:f7:b3:a2:35:6a:
                    26:04:7c:61:02:5a:f5:2d:18:29:ce:00:a5:da:cd:
                    5c:00:33:ed:84:0c:cd:c0:df:47:c9:2a:4a:3d:90:
                    ed:84:3a:54:c5:be:9b:5e:4d:12:a1:33:05:61:7b:
                    0d:4a:81:70:19:29:dd:68:1e:4f:41:f4:ec:51:ef:
                    2d:59:3a:5a:79:94:a9:5b:7b:86:37:02:8c:6a:a6:
                    14:db:2f:d8:e8:da:a5:d7:50:56:85:c7:5a:f9:db:
                    84:5b:7b:28:0f:19:5d:d1:50:c2:f8:fe:b8:ce:cb:
                    de:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4E:F4:ED:F1:D4:16:C0:B5:1C:97:21:06:91:3D:47:7E:32:20:43
            X509v3 Authority Key Identifier:
                keyid:7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:60:a4:c2:90:82:75:d7:7c:0e:34:7b:b2:7e:ea:6d:17:ed:
         89:af:7a:c1:9e:d5:8e:38:2e:07:f3:b0:91:fc:82:41:c3:4d:
         4b:e6:ba:ac:ab:e7:28:1f:93:10:a8:46:a7:76:d9:9b:0d:77:
         50:2c:ef:31:2c:b7:8a:13:48:26:b2:ea:cc:29:e3:6e:47:1a:
         53:d4:08:ce:fa:cb:d1:3d:41:0d:e2:7d:13:7d:6d:29:5e:3c:
         69:e1:18:8e:eb:11:64:0f:f5:be:49:bc:8e:ce:ad:e3:4f:f5:
         a7:ae:cb:f3:2d:54:7f:1a:62:89:63:1d:99:f2:f4:91:8d:55:
         f0:2b:ea:9c:74:fb:13:8f:b0:a1:d1:1c:21:0d:3b:f5:53:5d:
         1a:86:9f:45:82:17:33:a2:5a:ea:64:82:9f:8c:44:d4:57:b3:
         70:0d:23:3a:77:fd:97:8b:9e:bd:71:18:07:7b:d1:e7:65:63:
         67:15:f7:ac:0d:c9:77:e6:2b:2c:9e:a2:67:b0:27:49:7d:55:
         e3:c1:4d:3f:2d:e2:39:55:7a:45:fd:94:23:cd:7f:e0:57:5d:
         3d:85:43:c4:18:46:7e:21:bf:a9:48:15:92:0c:8c:cb:7f:6a:
         ee:b6:7b:be:45:9e:32:66:f4:db:a1:82:76:59:34:ec:79:f6:
         58:f2:37:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:05:06 2025 by rpki-client