Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft
File:                     cZYTj9n8jHj-hDolPLBICtzFfw0.mft (raw, json)
Hash identifier:          5Rez6SX6g7kmn1T0g3X11qO+YvB69YrX06ZND49ZHDk=
Subject key identifier:   0B:40:A3:20:73:5A:E9:44:9A:D4:CB:0E:17:98:5F:84:54:6F:12:88
Authority key identifier: 71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D
Certificate issuer:       /CN=A91D5590/serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D
Certificate serial:       07ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft
Manifest number:          07E3
Signing time:             Wed 06 Aug 2025 21:21:29 +0000
Manifest this update:     Wed 06 Aug 2025 21:21:29 +0000
Manifest next update:     Wed 13 Aug 2025 21:21:29 +0000
Files and hashes:         1: cZYTj9n8jHj-hDolPLBICtzFfw0.crl (hash: keiF7kvWRmzIgO5/1ogVC+mYoZCrWrmIf3dW/8EJYlo=)
                          2: 986F0854F7C611EA8B23C30CC4F9AE02.roa (hash: F2B6eTQtjw4DMTGhIIRc21e5xRW7fmJOpub38olCp9w=)
                          3: 9920D2E6F7C611EA8B23C30CC4F9AE02.roa (hash: d0oN/FUNzNpOKmQI6ds/0v5d1ZE90v5NzlRPE14knFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl
                          rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 21:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2029 (0x7ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5590, serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D
        Validity
            Not Before: Aug  6 21:21:29 2025 GMT
            Not After : Aug 13 21:21:29 2025 GMT
        Subject: CN=6893c759-6593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:32:ac:0f:37:3f:a8:8b:c6:9a:1b:22:a1:63:
                    4a:c7:51:29:d3:db:69:16:3a:59:85:71:12:6c:dd:
                    19:6e:4f:4b:dd:9c:30:68:a1:86:d5:43:e9:46:13:
                    b2:34:13:ad:ce:3c:a4:9a:e8:ac:28:8e:ac:f1:6d:
                    00:44:d4:5b:b5:a0:35:37:00:b8:e0:75:17:68:3a:
                    b8:9f:5a:d9:bf:d0:0c:9f:0e:84:8c:1d:9a:61:12:
                    0b:f4:6e:97:2b:7f:f8:d4:3f:e9:d6:0e:2e:3e:f4:
                    52:da:a8:ed:ae:bc:20:54:ab:cf:e8:89:45:4a:52:
                    ea:ec:26:37:ff:dc:59:32:3b:b9:5d:17:90:0c:5a:
                    dc:6b:ba:f9:5e:83:50:07:d4:a0:12:0f:cf:ed:44:
                    e4:6b:b6:4c:71:45:a5:f5:0c:97:1c:af:4c:76:52:
                    a4:c8:d1:f6:ff:8d:bc:d4:43:f8:fb:1c:02:e5:1a:
                    13:02:40:2b:4c:74:a3:3c:7f:54:14:8d:8f:c8:89:
                    81:da:56:e7:0e:7b:35:35:e5:a2:ef:be:91:f9:e4:
                    aa:b7:be:e8:3c:22:b6:b0:2e:15:6c:e3:3f:e4:43:
                    0e:d5:f5:27:96:b5:3c:50:70:ed:5c:51:eb:70:57:
                    1b:ca:ed:c8:61:5c:99:39:8b:a3:5a:fb:2a:63:ce:
                    80:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:40:A3:20:73:5A:E9:44:9A:D4:CB:0E:17:98:5F:84:54:6F:12:88
            X509v3 Authority Key Identifier:
                keyid:71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:f4:ec:58:0a:bb:b3:6c:76:ec:80:30:ed:c5:55:e1:1b:98:
         97:8d:ec:3c:f6:8e:e0:5a:68:f8:1c:10:ba:4b:63:07:3d:be:
         34:1c:35:f7:1a:0c:b5:84:4c:a5:8a:b1:0b:14:5d:83:ba:20:
         6b:82:fc:2d:89:34:63:f3:e2:ca:a7:09:f7:b5:5d:08:33:91:
         2d:25:fa:9f:a7:22:37:d4:f6:f9:98:f2:ba:eb:90:1e:e9:1c:
         4f:b3:90:82:b7:c9:ae:df:6f:83:4d:90:2c:fe:6c:36:82:1f:
         fd:95:63:14:e6:67:d1:36:91:fc:68:0e:27:b5:e2:56:9a:53:
         e9:3c:08:10:a5:a1:2c:cc:50:3d:91:8c:81:80:95:ab:18:78:
         4c:9f:90:e5:ec:d8:1f:db:e7:ca:f9:31:93:b0:4a:7d:b0:8c:
         b8:f1:07:5c:e0:e7:91:68:d9:71:37:dd:65:fd:58:ba:ed:5b:
         e0:34:ec:65:df:34:7b:dd:96:d9:b4:0b:41:1c:5a:c9:69:f7:
         29:7a:41:11:82:43:e0:9b:2c:70:b1:07:9f:be:d7:3c:bd:4d:
         08:88:ff:68:ee:72:d0:23:68:17:bb:17:f6:9a:6f:ee:fc:44:
         37:34:8b:7d:c0:42:2a:55:e2:3b:ae:31:6c:00:02:56:0f:97:
         db:f9:aa:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:04:13 2025 by rpki-client