Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
File:                     g-S8t2O4ztA2UZDnKA8KajSzW1E.mft (raw, json)
Hash identifier:          xbrMgVPb/6akjMmikw8AQ9oeZQCU/qiI/KFpiNImjNg=
Subject key identifier:   05:3E:2D:D5:08:00:0B:A7:ED:37:1B:22:62:DA:52:13:5C:F5:62:80
Authority key identifier: 83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51
Certificate issuer:       /CN=A91D4A3A/serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51
Certificate serial:       0106
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
Manifest number:          0102
Signing time:             Sat 09 Aug 2025 05:31:43 +0000
Manifest this update:     Sat 09 Aug 2025 05:31:42 +0000
Manifest next update:     Sat 16 Aug 2025 05:31:42 +0000
Files and hashes:         1: g-S8t2O4ztA2UZDnKA8KajSzW1E.crl (hash: 9Nat/otKlatoUfrgwxjJCuqXscKxesGRpmQ3n9BOZXE=)
                          2: 8A5FC86AECB511EE8DC7B937C4F9AE02.roa (hash: Vp6oIV4Kwe3FgHjDClftctReHYiAIs5p4BPX7qetipE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl
                          rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4A3A, serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51
        Validity
            Not Before: Aug  9 05:31:42 2025 GMT
            Not After : Aug 16 05:31:42 2025 GMT
        Subject: CN=6896dd3f-9a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f0:8d:e8:fd:07:b4:4a:c1:f4:59:2e:38:16:
                    b4:8c:ad:05:64:f6:e4:92:ed:aa:5f:99:78:8e:16:
                    ff:78:27:7c:9e:1e:79:41:47:a0:4e:8c:ae:cb:18:
                    04:58:75:e2:ad:7a:55:f2:19:20:6f:6e:d6:40:56:
                    d9:0d:22:54:a6:ff:6b:7a:dc:47:9d:cb:82:0f:c1:
                    a0:aa:a0:1e:3b:2a:b8:9d:76:51:85:51:cf:5a:91:
                    47:2e:1f:ff:c0:f9:95:29:52:92:c7:54:e8:a3:8f:
                    63:f9:ba:97:9c:9f:84:d2:e1:a9:5c:7c:af:19:32:
                    45:58:42:cf:d6:89:99:e4:f5:3e:58:89:8d:fd:bb:
                    fb:32:78:70:a3:d2:f3:3b:13:13:f7:70:8b:14:60:
                    56:5a:1b:90:5e:78:bd:a5:c8:8a:25:8a:1a:8c:1e:
                    5b:04:f0:c2:49:de:12:4d:63:6a:1a:a4:8e:cb:1c:
                    91:61:5a:4c:dd:16:d1:b0:0d:b5:17:a5:a7:b6:b0:
                    c7:0e:26:8f:7a:da:75:37:07:3e:32:1f:bf:16:30:
                    9a:07:fd:53:cc:bf:b7:c8:3c:7c:ff:d0:57:24:28:
                    87:ba:30:74:58:dc:17:39:67:d2:d9:9c:a2:d1:47:
                    e8:3d:f0:59:42:69:bd:37:ab:d6:5c:c3:c5:2b:80:
                    28:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3E:2D:D5:08:00:0B:A7:ED:37:1B:22:62:DA:52:13:5C:F5:62:80
            X509v3 Authority Key Identifier:
                keyid:83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:16:0e:68:98:df:1a:bd:d1:f0:b8:49:8a:11:7d:4b:0a:b9:
         8c:6b:7e:cd:15:5e:1a:65:a1:c8:5d:e8:e5:b8:3d:ef:29:ba:
         8d:fc:fd:fe:af:5c:76:06:05:5f:5f:b8:5b:24:5d:0c:c0:59:
         5e:8c:f3:55:2f:9c:80:e1:d2:39:27:fe:81:3a:17:1b:94:5c:
         25:49:b6:5b:bc:d1:ef:c7:9f:00:05:f3:7d:13:9c:df:05:06:
         93:cb:99:a3:9d:1f:e7:1d:95:00:78:7a:ad:10:71:e7:1b:f5:
         d0:d8:e6:02:1a:69:ec:c6:fd:77:38:b8:b2:b7:94:25:e0:24:
         d7:ee:31:bd:ca:55:6e:69:e6:c6:c1:6a:64:96:91:6a:cd:48:
         3f:38:ab:bb:ee:6e:96:60:7c:c1:39:d9:d2:1e:99:5c:e3:55:
         20:36:ea:df:57:f4:b8:ee:5f:9d:53:07:e9:f1:4e:d2:95:2b:
         8e:64:a2:c3:97:85:bc:2b:52:d9:d9:db:0a:0d:0e:44:1e:70:
         9f:a4:1d:67:94:40:8d:82:db:11:c5:d1:00:e5:73:52:6c:8e:
         2b:a8:bf:8e:f8:60:45:9b:52:ba:2c:4b:b9:a7:a8:98:f2:e0:
         a6:93:b6:ce:32:35:e6:ff:15:78:6a:2f:6f:78:db:61:e6:f3:
         ac:6a:12:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:59 2025 by rpki-client