Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
File:                     G1Zt71944xm_wNFADedV4mSoK7w.mft (raw, json)
Hash identifier:          xF/nyirD6JoVoApmRqK5OgMIV66ql6QdPD5dMQWpaSs=
Subject key identifier:   1B:96:5C:D0:2D:3F:F5:65:21:CA:AB:89:62:2B:36:E7:49:6D:B1:48
Authority key identifier: 1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC
Certificate issuer:       /CN=A91C20AB/serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
Certificate serial:       090A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
Manifest number:          08F8
Signing time:             Fri 08 Aug 2025 20:42:33 +0000
Manifest this update:     Fri 08 Aug 2025 20:42:33 +0000
Manifest next update:     Fri 15 Aug 2025 20:42:33 +0000
Files and hashes:         1: G1Zt71944xm_wNFADedV4mSoK7w.crl (hash: r1xOATTu2ywbvxJRXqXtGatWonHthpzT6k+CvWpVkPE=)
                          2: 28D36892B09411EAA964465EC4F9AE02.roa (hash: UfAX/Fj0JrJleqfsMcMBvDOpsY+oWvOczsjEMDPs474=)
                          3: 2979BC38B09411EAA964465EC4F9AE02.roa (hash: NUYwvd8XbnzOJ3mNMJWywPbsBYEeOEcLsau7uMQ+orY=)
                          4: AB659244056211EBAE3DBC4CC4F9AE02.roa (hash: Ptv1d6l4zCzsDfAGIqW3ARxnruAqZbwm3s5WFQRyBpQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl
                          rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2314 (0x90a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C20AB, serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
        Validity
            Not Before: Aug  8 20:42:33 2025 GMT
            Not After : Aug 15 20:42:33 2025 GMT
        Subject: CN=68966139-f47f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:55:d6:1a:32:67:95:d4:89:f0:e0:9a:97:ed:
                    24:2d:57:ff:88:37:a6:d3:85:8e:0e:80:32:42:16:
                    9b:4c:1c:42:f0:0d:c3:66:d0:b3:46:4d:63:fd:1d:
                    96:5e:2a:ef:91:8e:f1:46:09:61:da:22:3b:a5:da:
                    51:08:ed:52:17:4d:22:78:67:c5:44:e7:39:73:37:
                    8e:26:e9:97:ea:79:aa:ba:4d:a6:ff:e0:cc:bc:c5:
                    63:20:e2:34:78:07:54:5f:4a:73:b9:c5:89:1c:19:
                    6f:88:c5:f3:01:48:4b:01:e6:55:92:b8:f3:3b:2f:
                    18:bd:a2:9d:2a:e9:e6:78:2c:be:20:11:d9:a1:30:
                    8a:aa:09:bb:5b:ed:9c:08:b0:62:58:1e:72:a9:80:
                    c6:2a:b1:40:fe:9a:70:9c:e2:7e:fe:af:51:59:1c:
                    c6:1e:0d:1f:59:1d:1f:1d:cc:65:52:23:a8:0b:d3:
                    d7:f3:e4:d5:bc:ea:47:74:43:54:99:ec:4f:3f:a7:
                    75:24:eb:26:5e:05:d8:a9:78:75:9d:15:04:6c:6c:
                    40:52:24:b4:4c:4a:8d:d7:d3:e5:49:33:d3:14:fd:
                    92:06:93:7e:ef:b6:e5:1e:1c:df:8f:03:02:71:93:
                    1b:a7:5c:71:72:68:40:42:08:99:06:28:b5:89:7a:
                    ac:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:96:5C:D0:2D:3F:F5:65:21:CA:AB:89:62:2B:36:E7:49:6D:B1:48
            X509v3 Authority Key Identifier:
                keyid:1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:d6:c9:53:7b:ac:9f:00:21:1a:94:f2:fc:10:c1:43:34:db:
         ec:e1:88:e2:90:56:4e:7b:2f:8a:21:96:88:95:42:90:06:ec:
         15:10:7b:bb:27:7b:f3:03:31:0f:df:f2:2f:0e:71:95:e1:7f:
         95:67:84:c7:d0:83:0e:a7:6f:1f:cf:3a:ff:3b:cf:1b:a7:42:
         e3:d9:1f:d4:bb:e0:7c:df:f5:a7:e4:1d:47:2d:07:2c:2a:d4:
         4c:9f:94:02:ba:e2:a8:4c:01:e1:04:ae:7f:46:31:6a:ae:62:
         b7:a7:20:05:74:41:ae:78:ad:17:fe:a8:e3:3f:56:41:96:6d:
         6f:38:d3:a8:cd:38:11:bd:f4:eb:2b:d0:22:81:35:33:48:fe:
         61:ed:5e:99:fd:92:68:3e:32:4b:42:cb:fa:47:8f:f7:52:a0:
         d7:70:cb:d6:e8:6b:b5:2c:b4:40:02:1f:ed:0b:b8:e8:cb:fd:
         68:90:2f:77:f4:e1:98:28:11:b0:e0:25:66:40:9d:7d:dd:a0:
         7a:fe:8e:eb:62:89:4e:79:84:6f:46:ea:85:10:36:90:0c:2f:
         4f:88:c2:4c:36:78:ac:74:33:b4:6e:88:52:9d:56:ff:9d:25:
         dc:77:55:dc:16:4d:b7:36:c8:df:5a:60:e8:59:00:5f:b6:e9:
         8d:31:e1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:13:48 2025 by rpki-client