Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft
File:                     R7V3ucir4sNgDFtOeT_01HtlBiA.mft (raw, json)
Hash identifier:          NsE1mTh2kD0bDkBC4eGR41w//o9cycjJLNeLaEKTqdw=
Subject key identifier:   20:A5:FB:C8:7C:48:A1:B7:89:0C:E7:5C:39:01:F9:E8:02:42:1F:07
Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20
Certificate issuer:       /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft
Manifest number:          1F
Signing time:             Sat 09 Aug 2025 08:34:59 +0000
Manifest this update:     Sat 09 Aug 2025 08:34:58 +0000
Manifest next update:     Sat 16 Aug 2025 08:34:58 +0000
Files and hashes:         1: R7V3ucir4sNgDFtOeT_01HtlBiA.crl (hash: sasM2EYyIOwnyrjTMV8gO7Dc98BVJU6Dfb712+cnVhg=)
                          2: 30B2E99E5FB611F089B44784C4F9AE02.roa (hash: negZFqmBMo6VKE4VUMOsRrfxv0TCnbtWxCJ6jQA2XAg=)
                          3: 10958AE05FB611F0BF84DD83C4F9AE02.roa (hash: 99rILg0lAp1MtFrGVsL1ZVmf1GEn+BZy/AOnEIUCEaI=)
                          4: C6811EDA5FB811F094135B2FC4F9AE02.roa (hash: +YrktxlVC+PsFpuKkXdgvfc2lY3YsjGZkj0Z7YYEcZU=)
                          5: C6EC548E5FB811F094135B2FC4F9AE02.roa (hash: vQxvyyxrHRBa4iZJFOrEvTxzuAri97r7swFzpbuyhQg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl
                          rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620
        Validity
            Not Before: Aug  9 08:34:58 2025 GMT
            Not After : Aug 16 08:34:58 2025 GMT
        Subject: CN=68970832-9c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d1:ee:3b:4f:90:8f:43:1b:1e:a9:87:7f:df:
                    d3:c4:0a:28:55:c9:a4:f4:5b:f8:be:55:da:41:e2:
                    ae:81:3b:6d:b3:42:1a:12:71:20:86:34:7a:e1:4f:
                    2f:75:b0:95:2a:46:c3:e3:c7:12:b6:52:b7:70:27:
                    2a:f1:be:5e:b1:1f:31:82:c0:f9:c3:03:ac:f2:4b:
                    ce:d4:6f:35:16:43:e7:62:ee:58:09:b3:b9:6a:78:
                    e3:1e:9d:2a:35:79:84:05:52:74:c2:52:b2:d7:3d:
                    19:3a:84:56:2e:dc:92:e2:a9:06:5e:1d:c0:63:38:
                    49:1a:99:de:10:bd:d0:a3:6b:30:e3:61:ed:8f:8a:
                    f0:1e:18:4a:e1:af:33:bd:91:ac:d2:d2:2a:e3:49:
                    f9:1e:c8:f3:45:ae:dd:4a:b2:94:fe:01:5d:1a:1e:
                    4f:1e:68:45:3a:c4:89:f0:e7:48:4f:d3:ba:4a:9a:
                    f5:17:80:c5:dd:12:07:aa:18:6a:f6:73:de:dd:e9:
                    f1:ce:81:55:5d:bc:82:bf:97:e0:ab:de:1c:9b:f9:
                    78:96:d8:ee:59:05:d1:13:a8:79:ca:fc:4d:04:a7:
                    a4:f6:89:66:a4:af:65:7d:e2:62:70:3e:d6:8c:de:
                    30:dd:86:c1:cf:57:f5:dc:96:e3:26:dc:90:3a:be:
                    fc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A5:FB:C8:7C:48:A1:B7:89:0C:E7:5C:39:01:F9:E8:02:42:1F:07
            X509v3 Authority Key Identifier:
                keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:fa:8f:e3:12:4f:f8:76:da:5b:e3:8c:ee:82:1e:db:78:6e:
         53:a9:1a:98:cb:14:73:f7:60:7f:9f:c3:e2:21:35:de:0a:c4:
         79:25:e9:36:dd:6e:ab:e0:ef:89:4a:ae:90:22:b7:ba:9b:08:
         55:81:99:8b:83:9f:fc:22:3b:31:79:a2:04:de:53:b5:a3:af:
         fb:ed:3f:55:f8:5d:88:6f:61:7b:ee:f5:fb:b9:4f:90:7a:45:
         e5:5e:69:d7:de:2e:68:65:b4:6c:9f:11:ae:b9:91:82:70:f8:
         fe:51:3a:ac:63:6c:59:76:20:50:3d:68:94:32:1a:00:5e:4b:
         ee:de:e0:f1:50:b9:5e:a5:d1:10:87:e5:44:ae:40:f6:2a:a0:
         7e:4b:27:5b:33:b6:37:a0:64:fe:17:dd:81:69:67:29:fb:a0:
         56:12:92:47:50:4c:df:b4:78:dd:18:ed:da:7c:34:03:fa:17:
         d9:62:8d:4c:5f:a7:cd:f5:f6:6a:62:bb:a8:9b:82:a0:ee:43:
         7e:bc:39:bd:e8:01:ef:48:f8:fd:57:06:14:17:ab:ee:f9:71:
         00:d9:9b:12:3e:68:51:fe:7d:f8:62:a2:ad:84:7b:83:cc:ec:
         ea:7f:dd:ac:68:ae:4a:1e:7c:3b:fd:0a:29:f1:ae:73:73:b9:
         bf:a7:c9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:36:42 2025 by rpki-client