Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
File:                     2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft (raw, json)
Hash identifier:          i0Ee8hdhfs3XUXFj1pG3KUVIlGXDUygoFhUU61nOABI=
Subject key identifier:   74:CD:B8:21:11:88:24:97:F7:D0:FD:A0:82:A7:08:2D:4C:2F:66:9C
Authority key identifier: D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D
Certificate issuer:       /CN=A91C2B93/serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D
Certificate serial:       F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
Manifest number:          F1
Signing time:             Sun 03 Aug 2025 05:37:56 +0000
Manifest this update:     Sun 03 Aug 2025 05:37:55 +0000
Manifest next update:     Sun 10 Aug 2025 05:37:55 +0000
Files and hashes:         1: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl (hash: eZ2ByvMWZzTmc9s0Czl/JRHXaw9Rj4h5dS6pZo9BwPg=)
                          2: B00A68E6014A11EFA8F03B5BC4F9AE02.roa (hash: F6IB2oLxhpfXXQwj/Kl3IJNncyOBKEOTP7G3C5XwQrk=)
                          3: E2037F8C019911EFAFFEEC5DC4F9AE02.roa (hash: yyKQJp3Cor943Y25Ya+6ME8Xl4xDZuaYL1jQZ9UiIZI=)
                          4: B0BE3042014A11EFA8F03B5BC4F9AE02.roa (hash: kGlkPBXGhK2HbK8wICTx12rG9bb9NpN/Iy7FI3DGEGY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl
                          rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 05:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2B93, serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D
        Validity
            Not Before: Aug  3 05:37:55 2025 GMT
            Not After : Aug 10 05:37:55 2025 GMT
        Subject: CN=688ef5b3-5738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f2:7d:86:48:cd:bb:60:13:3b:7b:f2:2b:25:
                    57:70:3d:ee:f6:3b:21:99:46:a5:86:df:a5:4d:bf:
                    46:6f:3d:e8:f7:ef:e2:8a:be:06:5f:c4:e7:96:68:
                    cd:12:3d:c4:72:50:76:b8:24:11:bf:ca:4f:f8:f3:
                    a9:7c:4e:1d:37:f0:58:e5:b8:25:55:67:39:de:9f:
                    dc:f4:4d:b5:79:62:06:2e:9e:16:7f:a3:99:3e:e2:
                    37:e2:9f:00:7d:83:8b:52:94:a5:64:6a:e8:26:73:
                    3e:dd:fa:39:c7:d0:af:d1:43:fd:5e:83:70:9f:38:
                    9a:86:15:58:27:ea:48:0e:0f:03:64:51:e9:5c:0b:
                    14:74:57:16:da:39:d0:f0:c1:72:bc:72:4b:e7:c9:
                    bf:e1:13:a0:09:fe:3a:64:53:42:03:e9:6b:d9:12:
                    18:38:0a:d7:08:15:76:f4:1b:21:74:a2:a5:1e:99:
                    e5:01:36:e2:6f:ca:66:5b:ee:97:f5:18:16:d7:af:
                    b9:3b:af:b0:49:67:43:f5:6a:69:d5:30:37:cd:26:
                    e8:08:30:96:d5:ae:a6:ee:c9:0d:a9:a0:25:80:14:
                    b9:9e:66:5f:f3:55:35:a9:9f:72:49:0d:32:23:3d:
                    4d:76:43:12:ac:f1:0f:0f:d7:85:0c:af:ec:c1:c0:
                    a0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CD:B8:21:11:88:24:97:F7:D0:FD:A0:82:A7:08:2D:4C:2F:66:9C
            X509v3 Authority Key Identifier:
                keyid:D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:4f:c1:fa:b6:8d:c4:7c:e1:96:09:b1:b7:81:45:db:99:13:
         2a:aa:d2:13:53:fa:c4:05:b8:28:1d:62:08:c1:04:f0:26:b9:
         e6:fb:03:fd:25:02:41:36:de:b0:1f:85:36:16:7f:c7:b1:0d:
         d1:90:9e:ed:70:17:34:a3:27:5c:91:ed:e3:a3:45:ea:3b:4b:
         22:56:fe:c1:4d:2a:c8:d9:8d:69:3a:06:c2:6d:b0:36:15:9d:
         bd:05:44:99:ae:3d:27:41:6e:10:6d:20:b0:c0:96:20:ac:de:
         a7:c0:0c:d3:11:8b:4d:9f:70:a6:f8:c2:16:bc:cf:8c:62:74:
         1d:0b:bc:18:f2:d0:61:52:5e:a8:fe:bb:56:8c:83:e4:5c:e6:
         c9:2f:87:b2:b7:ad:9a:2c:f5:ba:57:4c:fe:8a:31:9c:93:14:
         e4:c3:5d:94:22:c4:84:4b:77:0c:69:59:a6:d3:87:fb:aa:9c:
         dc:a5:8b:38:82:90:91:b0:81:5b:41:98:30:8e:21:40:ab:cb:
         a9:78:fc:e2:b9:d5:52:e5:f6:3c:a1:e9:79:54:d5:86:9d:af:
         33:c0:56:19:c0:f1:59:64:8f:6f:5a:e5:e7:46:6b:4c:40:14:
         5b:ad:bd:cf:3c:06:97:4d:ba:47:d2:ec:c0:77:04:db:f9:17:
         a2:9c:88:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:03 2025 by rpki-client