Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
File:                     i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft (raw, json)
Hash identifier:          5fOTfb//XkaLVZNQPAqrjERFRTqMRwr4xDxixaHfLxc=
Subject key identifier:   DC:2B:EF:26:C1:21:46:B5:7D:D8:57:01:17:AC:4E:97:0D:FF:60:52
Authority key identifier: 8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D
Certificate issuer:       /CN=A91D37E4/serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D
Certificate serial:       0794
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
Manifest number:          0787
Signing time:             Fri 08 Aug 2025 21:52:08 +0000
Manifest this update:     Fri 08 Aug 2025 21:52:07 +0000
Manifest next update:     Fri 15 Aug 2025 21:52:07 +0000
Files and hashes:         1: i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl (hash: BAOzksek42U1ljxNU9Ut6Hw59IBGXPBKOXKUR1T2V5Q=)
                          2: D933655E23B511EBA7BDD50FC4F9AE02.roa (hash: 8WBXx40LoIwub2WeF3ccrcQG4fq4wKZ7IVrDku/6ikQ=)
                          3: BD764EAE1D5B11EBAB008D19C4F9AE02.roa (hash: faL6wM9GsLMo9++JSpEkUSiwl7+QPEuIOOkR0NTNngU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl
                          rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1940 (0x794)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D37E4, serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D
        Validity
            Not Before: Aug  8 21:52:07 2025 GMT
            Not After : Aug 15 21:52:07 2025 GMT
        Subject: CN=68967187-9769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4b:99:06:cb:21:55:91:a9:e4:84:14:33:83:
                    e6:b6:89:d1:0b:96:12:d2:fe:80:9b:a4:c9:2c:e4:
                    c1:86:27:a6:7e:28:ab:14:80:f5:c4:d8:1c:fc:fd:
                    80:5f:40:f4:e8:d4:74:ea:83:d8:a5:5c:ea:9e:78:
                    da:2f:46:48:a5:c2:52:92:b4:40:3f:9f:f3:1e:43:
                    cb:56:41:a3:8b:ad:92:26:85:4f:d8:ba:83:b7:5f:
                    3a:7b:bc:c4:bb:02:00:97:25:49:ef:cc:32:49:dc:
                    20:ab:37:2d:dd:85:6b:a8:41:5a:0e:3d:67:98:71:
                    c3:3d:b3:31:88:6c:d0:38:47:76:91:43:91:83:a8:
                    9c:e3:2e:b0:f6:b8:45:78:61:76:2e:b5:ba:94:58:
                    0a:79:49:78:ef:36:31:65:ac:0f:b4:8b:df:ad:80:
                    fe:4d:74:f5:28:18:34:a2:75:b7:c2:d1:c0:13:97:
                    2f:42:11:f1:6b:a1:ad:58:09:c2:ce:7b:e7:82:c2:
                    41:ac:ba:12:79:41:77:fc:bd:96:38:97:03:f7:9b:
                    c9:be:03:57:bd:a1:5c:98:5c:9f:fa:4a:44:52:21:
                    c5:4f:14:54:2e:00:47:99:81:1d:a4:42:e9:49:5d:
                    fc:b4:b1:4a:07:d0:ed:21:94:03:24:b9:f2:12:99:
                    0a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2B:EF:26:C1:21:46:B5:7D:D8:57:01:17:AC:4E:97:0D:FF:60:52
            X509v3 Authority Key Identifier:
                keyid:8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:3e:ee:e0:d1:58:85:96:d7:15:2b:15:f5:2f:ad:59:ed:7a:
         1e:92:84:4a:19:03:9c:91:4c:09:e2:27:88:c4:4b:0b:14:d7:
         59:43:89:69:a9:b1:3f:91:36:23:64:a3:0c:da:c1:c9:34:fe:
         d6:77:c2:3d:ba:c4:a4:c5:b4:ae:17:4f:a6:13:96:88:dd:bf:
         bf:60:66:72:43:ed:5d:a9:55:c1:2e:b7:33:a8:08:3f:f3:32:
         53:3a:e7:5b:3d:bb:60:c0:62:fd:6c:48:0f:f3:4c:6c:2f:5b:
         19:8a:1c:8d:13:e4:9a:d3:17:b4:08:44:a7:0d:a2:fe:95:68:
         72:56:65:12:26:50:92:c8:79:02:a6:5d:53:43:55:37:7c:5a:
         03:0c:9f:8f:c9:d8:7e:02:f8:ec:0b:55:08:be:b5:f3:ee:29:
         14:7c:ab:07:89:e8:f5:e5:d7:14:06:87:9f:8b:32:3a:a1:ce:
         e5:82:ef:0e:13:3e:5d:eb:ef:2e:81:59:41:3f:e3:ca:84:23:
         c5:b8:ef:97:ca:ab:79:f4:b0:9b:67:4e:db:c2:29:fe:ba:6d:
         48:a1:3e:cf:33:5f:02:0e:4a:e0:27:f4:a4:2b:fb:d9:68:a3:
         d0:b8:f5:e8:7b:f9:96:45:28:8b:49:7e:51:d6:9e:56:68:c6:
         d2:dc:cd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:45:11 2025 by rpki-client