Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft
File:                     CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft (raw, json)
Hash identifier:          1T6PdY/8eOu43qJ0zC/Fp+v7UvVmbk58aimPQC7jWv8=
Subject key identifier:   A2:3B:47:39:5F:8E:F6:25:4D:52:D4:91:A4:1E:C3:47:9B:90:98:03
Authority key identifier: 09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E
Certificate issuer:       /CN=A91CE533/serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E
Certificate serial:       196F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft
Manifest number:          1963
Signing time:             Wed 06 Aug 2025 16:30:19 +0000
Manifest this update:     Wed 06 Aug 2025 16:30:18 +0000
Manifest next update:     Wed 13 Aug 2025 16:30:18 +0000
Files and hashes:         1: CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl (hash: nuuZbpSK0cP8pkslOjM+zFMtZLu7ygDjNSNcgC1xmpo=)
                          2: 290732FC79A211E79F34D81FC4F9AE02.roa (hash: SR7eVnerj/ud7fW+5gtERIt5ClN7aXRbGYLPuzi6Nlc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl
                          rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 16:24:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6511 (0x196f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE533, serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E
        Validity
            Not Before: Aug  6 16:30:18 2025 GMT
            Not After : Aug 13 16:30:18 2025 GMT
        Subject: CN=6893831a-e229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:89:d8:4b:db:7e:25:81:5a:da:32:78:a4:55:
                    ec:b4:cf:40:71:8e:11:78:98:fa:90:3b:ad:33:11:
                    59:3d:4b:84:70:d4:14:eb:4b:38:b3:85:92:d7:48:
                    45:2c:76:91:89:0d:2b:91:32:ec:88:e8:cd:8e:7b:
                    69:1f:4b:92:94:50:68:cc:73:dd:48:d4:15:5a:f6:
                    70:2d:23:76:3a:08:e0:46:d7:8d:8f:2b:3b:61:8d:
                    9f:77:7a:82:81:cc:04:af:30:9c:eb:a0:34:71:c8:
                    cb:be:f2:56:a1:35:24:d7:6d:66:54:e6:91:94:46:
                    10:a7:88:f8:d7:37:2b:72:a5:52:b7:a4:c4:06:ee:
                    24:91:31:f2:81:01:11:4a:6d:fa:9a:a1:2d:9a:63:
                    f0:76:77:fc:4f:a1:84:cf:0f:b7:9f:f4:9b:c0:05:
                    05:7a:ce:55:d5:2a:b7:6e:e9:5c:12:7a:ff:ba:9b:
                    1f:a5:27:5a:43:7d:9c:16:15:ff:e9:9e:68:0a:db:
                    2b:3a:96:39:fd:76:3f:fa:a3:c8:da:b6:5c:93:ca:
                    ef:a9:a3:36:02:08:18:ea:4d:2a:c5:a8:79:e8:76:
                    88:c6:ac:d3:f1:e5:66:9a:fc:ee:14:82:ce:32:ca:
                    ce:83:9e:a4:26:b0:95:c7:77:39:0c:21:a3:b8:9c:
                    c6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3B:47:39:5F:8E:F6:25:4D:52:D4:91:A4:1E:C3:47:9B:90:98:03
            X509v3 Authority Key Identifier:
                keyid:09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:a3:c9:d1:03:4d:7a:d6:9c:80:3f:77:32:d4:4b:f7:a1:67:
         ab:5d:50:f3:e4:88:cc:54:69:93:72:ab:3e:ac:ef:cb:39:55:
         df:52:e1:e9:b0:4b:e8:f9:f3:20:66:90:37:5c:fd:98:4e:a7:
         6a:57:6f:c1:8d:60:03:f0:6f:99:f2:f9:8a:f3:64:c1:fa:09:
         a1:97:96:c8:9c:bd:09:80:ae:9d:b4:49:a0:9e:e0:ea:2c:52:
         f3:b7:fe:4b:bb:55:ab:1e:e5:66:39:cc:77:f4:60:05:e1:e4:
         cf:3e:12:d6:f0:d2:11:73:34:ff:86:bd:2c:d3:36:76:7c:89:
         49:08:ef:55:e6:2b:c1:69:19:3f:f4:ae:64:4c:84:0f:bf:d6:
         7e:9d:61:19:2b:13:24:8a:e3:b5:00:46:76:b8:1d:0d:8c:0d:
         74:c4:7d:bc:31:7d:a9:9b:b6:2b:aa:db:0a:0d:4f:07:30:f0:
         7d:16:ff:e8:26:d0:6a:92:5d:c9:b0:5c:a4:8c:f1:7e:c9:8d:
         50:04:f2:4e:f3:9a:07:ee:8e:f4:e9:67:74:bc:fb:88:00:40:
         e1:0f:f6:97:8b:9b:69:ad:d0:c7:87:7a:0c:b1:37:26:99:a3:
         b9:be:be:04:8e:15:fb:e2:b3:c9:1c:e5:f8:2d:73:c1:10:ad:
         fd:f7:3a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:31:36 2025 by rpki-client