Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
File:                     kzrI56xL07WCmJ_Mty_JJ9cWQks.mft (raw, json)
Hash identifier:          bieYadi2XjWDBQZOw1aeUWH4vdJSRz55lC0y/v3dqhQ=
Subject key identifier:   F3:EE:0F:E6:86:51:31:41:09:2B:41:D5:0B:72:9E:63:C8:2B:A4:69
Authority key identifier: 93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B
Certificate issuer:       /CN=A91C79E1/serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B
Certificate serial:       0841
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
Manifest number:          083B
Signing time:             Sun 10 Aug 2025 20:45:17 +0000
Manifest this update:     Sun 10 Aug 2025 20:45:17 +0000
Manifest next update:     Sun 17 Aug 2025 20:45:17 +0000
Files and hashes:         1: kzrI56xL07WCmJ_Mty_JJ9cWQks.crl (hash: SNrpNW3wsUubkdkIQk0FOqUWirrALEBEjUYBVcgfIMM=)
                          2: 26D0F9B82A6611ECB12FB439C4F9AE02.roa (hash: o8uKSFAZOoKiAV/aw+gEXp611EqrXFJMlAGF3VnwD9c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl
                          rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2113 (0x841)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C79E1, serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B
        Validity
            Not Before: Aug 10 20:45:17 2025 GMT
            Not After : Aug 17 20:45:17 2025 GMT
        Subject: CN=689904dd-7520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0c:25:31:7b:aa:7e:2e:24:22:d5:d0:49:ab:
                    db:d2:f1:dd:8a:c6:9d:2f:77:3e:9f:8b:06:7b:bd:
                    e5:33:c8:4d:53:16:19:f9:dd:59:d6:06:c9:56:99:
                    fb:41:e3:d0:df:16:9d:8d:62:fa:bb:b1:49:50:95:
                    12:15:59:da:43:e2:02:5d:cb:a4:24:65:ee:6f:c6:
                    c2:d5:69:e7:42:4b:c0:d7:c9:1c:3b:25:7b:03:b4:
                    3a:a5:90:bb:34:ff:96:d4:0d:79:a0:b2:31:1e:51:
                    df:52:4e:bc:4d:5f:9a:ca:06:a3:83:7a:67:7f:2e:
                    a5:a9:43:d8:a9:e7:ff:41:8e:bf:aa:5a:31:50:97:
                    14:20:be:97:cf:13:04:1e:db:6f:c0:f2:11:06:a4:
                    45:65:57:3b:23:5b:b3:e1:56:7c:93:50:77:5b:54:
                    b1:c4:0f:37:19:b4:d3:4b:54:1f:91:96:60:ee:be:
                    5f:25:d0:76:95:3e:45:f6:fd:db:6c:19:53:df:50:
                    77:f6:08:af:09:8a:27:4b:30:bf:db:26:e4:b7:0e:
                    35:3c:1e:cd:d6:05:4a:be:df:3b:1f:22:81:7a:8d:
                    6e:68:36:d9:47:d2:cc:95:63:1d:ba:bc:98:1b:c9:
                    be:00:f7:b6:b8:13:b1:17:ed:d0:66:3e:f9:c9:0e:
                    34:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EE:0F:E6:86:51:31:41:09:2B:41:D5:0B:72:9E:63:C8:2B:A4:69
            X509v3 Authority Key Identifier:
                keyid:93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:d6:43:4a:72:ea:29:66:48:ba:3a:38:ed:e4:2f:46:d5:1f:
         16:ee:47:ab:22:1f:34:4b:d2:ac:d8:f7:f6:35:bc:4a:98:42:
         05:01:db:f5:8e:04:4b:24:5b:db:59:95:a5:fd:8b:c5:eb:28:
         4f:a6:c2:d8:52:b3:d3:be:de:ab:71:55:8a:98:8b:5f:38:3c:
         04:65:5b:d1:be:51:1e:dd:c9:26:ee:2d:6f:3a:d6:ea:ca:0d:
         d4:f2:4b:90:7f:b3:fe:9a:96:ee:49:ca:12:91:60:56:2b:8d:
         7d:a7:04:4b:7f:83:be:fb:7d:af:57:9f:cb:57:ae:fe:0d:fa:
         71:99:9b:40:76:37:4c:dd:f7:9f:7a:0b:73:e7:42:16:fa:f9:
         3b:fe:7a:c9:af:4b:a5:58:3d:3f:5f:f2:51:dc:5d:11:28:0c:
         dd:3b:6d:98:17:78:db:93:57:ad:de:4a:86:53:bb:1b:df:c8:
         72:16:10:92:b9:fb:17:6c:31:18:b7:4f:9f:cf:69:9d:cf:2b:
         fb:90:5f:d8:30:fe:94:cf:37:70:7f:76:9f:32:d5:ce:a0:1d:
         12:f6:6a:69:50:c6:9c:5c:61:20:8b:07:03:4c:f7:29:e3:ff:
         e6:cf:3b:19:78:d3:32:14:73:b3:ad:b2:d3:13:0d:2e:6d:c1:
         9c:e2:90:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:35:30 2025 by rpki-client