Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft
File:                     k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft (raw, json)
Hash identifier:          XXnDSHCbD7E6tui5v5lWROx1w5/OCcESJXkvkbJP53E=
Subject key identifier:   55:D5:E7:A0:38:46:8F:03:34:EA:95:4A:0B:9B:48:BF:02:EA:FD:DC
Authority key identifier: 93:57:44:41:B4:16:9F:5C:BE:33:1C:2E:ED:56:E8:83:DC:EF:45:23
Certificate issuer:       /CN=A91C4EE6/serialNumber=93574441B4169F5CBE331C2EED56E883DCEF4523
Certificate serial:       26AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft
Manifest number:          26AD
Signing time:             Sun 10 Aug 2025 15:37:48 +0000
Manifest this update:     Sun 10 Aug 2025 15:37:48 +0000
Manifest next update:     Sun 17 Aug 2025 15:37:48 +0000
Files and hashes:         1: k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl (hash: D6WELCdyVMe/a7C0MsY/Nwe37hbjqLz4Q8cWFfTdET8=)
                          2: 2E078068008111F0AB00F337C4F9AE02.roa (hash: VJHoTPQ0jea+ijUJEtlYJDCyIW2/0tYaKWZJwfLhYW0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl
                          rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9903 (0x26af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4EE6, serialNumber=93574441B4169F5CBE331C2EED56E883DCEF4523
        Validity
            Not Before: Aug 10 15:37:48 2025 GMT
            Not After : Aug 17 15:37:48 2025 GMT
        Subject: CN=6898bccc-c5e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c3:da:36:c1:cb:fd:b9:4d:f9:35:dc:94:4a:
                    dd:35:2c:3a:e1:72:20:7f:31:2a:d3:25:dc:4d:5a:
                    b4:a8:83:1f:20:e7:ac:99:1f:6d:c6:78:0a:b3:29:
                    97:8a:7a:9e:8a:6b:e5:e2:3d:6b:e9:a8:ad:64:9c:
                    34:43:bc:09:9b:22:93:8b:49:c7:0c:89:02:93:93:
                    eb:e9:42:2e:65:91:ff:45:04:8d:5f:6a:a9:91:87:
                    42:1e:83:e7:0e:69:51:3d:92:b8:38:5c:3e:8e:f6:
                    c4:ad:7c:f2:6f:f8:70:d0:85:28:c8:0b:93:2f:0a:
                    7a:11:46:a1:93:86:54:bd:b2:c3:32:23:c7:3b:3a:
                    38:c8:b6:34:5c:22:50:b7:97:99:63:c6:92:b5:65:
                    15:9c:df:33:fe:84:d1:a7:f0:c2:86:ff:f7:01:13:
                    ee:3b:65:9d:6e:bf:40:ce:a4:d0:fc:e3:44:48:08:
                    a1:c7:e8:a5:71:04:47:f9:5d:67:06:a3:06:83:84:
                    54:f0:38:5b:be:10:01:fb:ea:c7:04:f0:c8:e6:ad:
                    00:cf:bc:1b:2a:46:26:eb:d1:ac:40:e5:06:52:c1:
                    da:8b:73:ec:a7:97:9b:5b:a1:e1:b8:7e:da:dd:b0:
                    a4:de:d7:6b:96:13:c2:85:a4:5e:14:a5:f5:a7:76:
                    85:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D5:E7:A0:38:46:8F:03:34:EA:95:4A:0B:9B:48:BF:02:EA:FD:DC
            X509v3 Authority Key Identifier:
                keyid:93:57:44:41:B4:16:9F:5C:BE:33:1C:2E:ED:56:E8:83:DC:EF:45:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:89:03:8a:26:82:db:fb:c0:76:e4:81:e2:a0:43:2f:09:9b:
         9a:fd:50:ef:31:06:7e:53:30:41:c8:44:c6:00:3a:6e:5e:bb:
         cf:b1:1a:95:da:e8:52:f2:e8:88:f7:b2:dc:7e:d5:67:72:2b:
         63:a3:7a:ac:cc:7e:45:f5:3d:00:a2:66:9a:a6:f9:b2:ad:a7:
         58:8c:6e:1e:ef:00:3c:81:5a:6c:39:79:94:b5:4e:3e:e7:30:
         97:c8:cf:1f:48:d4:0c:6a:9f:99:79:52:c3:92:d1:cb:66:17:
         de:85:15:1c:8d:62:a4:47:09:b9:82:d8:77:3f:3b:46:03:99:
         6c:56:61:ae:96:15:b4:48:cd:ed:3e:49:ec:42:ce:b6:6e:a7:
         1d:78:1e:f0:a0:01:65:9b:73:0c:fd:9d:4c:a4:38:b1:06:6e:
         1b:44:5d:81:8f:76:6f:70:0e:3b:92:0a:a4:e6:5a:55:d5:ea:
         1f:3c:47:e3:60:52:a3:ee:52:94:b7:67:25:c8:1a:2e:60:aa:
         cf:c7:58:ac:4f:c2:ee:c0:dc:1a:47:c0:2b:f9:8c:9e:4a:91:
         48:e8:a4:ac:f3:e1:ee:7b:a2:ef:6e:9d:27:bd:ba:fe:88:76:
         bd:da:88:d6:2c:08:68:ef:76:82:b1:07:30:ec:15:ca:02:cb:
         f2:93:67:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:27:50 2025 by rpki-client