Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft
File:                     dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft (raw, json)
Hash identifier:          5DjHfL2fmqMrju29xdxcCxBnBHbzdxDDDqQjlibZmdY=
Subject key identifier:   A3:65:9F:0A:94:79:C3:49:74:E0:06:50:AC:E2:BA:38:21:88:B3:71
Authority key identifier: 74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86
Certificate issuer:       /CN=A91D76E5/serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886
Certificate serial:       087D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft
Manifest number:          0874
Signing time:             Sat 02 Aug 2025 20:58:35 +0000
Manifest this update:     Sat 02 Aug 2025 20:58:35 +0000
Manifest next update:     Sat 09 Aug 2025 20:58:35 +0000
Files and hashes:         1: dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl (hash: zqGKNKHmiIdC+anTWerH4dSO0al6IDW0D27DzYyZLzI=)
                          2: 94B101721B8B11EEACEA736AC4F9AE02.roa (hash: 8KEvrrkPqDZO6TToBnuRSPRZoDSK+MH3syDaDWUh+s0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl
                          rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 20:58:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2173 (0x87d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D76E5, serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886
        Validity
            Not Before: Aug  2 20:58:35 2025 GMT
            Not After : Aug  9 20:58:35 2025 GMT
        Subject: CN=688e7bfb-8a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:79:4e:39:67:ab:f9:be:62:26:87:a2:bf:68:
                    21:8c:f3:a2:1b:db:52:94:12:78:c6:14:00:9a:0c:
                    e7:e4:15:78:a0:51:c8:ae:1e:b6:ce:df:fe:36:13:
                    db:86:56:b4:29:3d:4f:8c:ad:23:88:02:01:14:17:
                    14:07:92:ec:47:6d:0b:fe:94:ef:88:42:cc:01:49:
                    17:29:03:a2:99:19:2e:41:20:c5:8a:c5:3d:0c:bc:
                    82:12:70:f1:41:e1:e3:68:b7:66:2b:31:ef:1e:9e:
                    3a:2f:db:0e:32:37:74:e0:ad:fb:7c:4a:92:f0:e9:
                    8e:1b:52:1c:ce:ca:0c:7f:99:9e:8a:02:37:cc:58:
                    8a:01:d2:fb:46:e9:95:bf:7f:ec:c3:f1:bb:27:eb:
                    08:36:e2:29:b7:ad:f6:2f:a3:74:d6:b3:42:ef:71:
                    4f:d2:5d:6c:a4:1b:12:77:54:5c:fb:36:d4:e2:a7:
                    ed:25:8c:14:42:1c:69:cc:13:32:c2:b9:ab:fb:c2:
                    37:80:a4:92:8a:a8:8f:ab:4e:eb:0e:24:32:9f:ba:
                    92:e3:ac:46:53:b5:da:0c:29:77:bf:de:d4:05:a8:
                    77:fb:58:c7:14:7c:71:ad:d9:9d:7e:0f:af:27:36:
                    14:63:c8:63:2f:11:fa:b9:76:4a:0c:c5:89:fb:12:
                    08:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:65:9F:0A:94:79:C3:49:74:E0:06:50:AC:E2:BA:38:21:88:B3:71
            X509v3 Authority Key Identifier:
                keyid:74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:0b:6a:e3:34:a5:20:47:01:a3:6f:92:1c:74:0f:cd:62:7d:
         44:21:c4:73:d8:c8:e2:76:88:ec:8a:bb:bf:23:3a:57:5c:45:
         0b:57:1c:e4:9b:d8:f4:82:19:64:06:83:9c:28:23:6d:08:76:
         ef:a0:06:76:c9:d8:b7:6b:ee:7c:e4:7b:8a:34:a4:c2:7b:9c:
         12:f9:23:4d:77:5a:eb:6c:b1:22:e8:71:5d:b6:83:24:2b:53:
         f5:7c:f5:69:e0:ae:57:89:79:ab:b2:13:69:e4:f7:6b:2b:e6:
         d7:54:fb:f5:90:81:98:f9:c7:e2:93:6c:2a:1f:88:2d:bf:d4:
         af:f9:b4:c0:60:29:42:b8:a2:05:bd:99:40:e4:f0:6e:b5:3d:
         8c:84:64:10:77:ff:b0:24:cf:91:57:42:09:76:e9:ef:f8:2a:
         bc:c7:a2:79:95:e0:04:e8:97:f5:30:40:ed:49:3b:d8:ac:9c:
         89:f4:f0:43:fd:2c:54:9c:14:ff:89:a1:ae:fa:72:99:7f:6f:
         bd:98:49:ff:f0:dd:ca:d0:47:d0:a9:5e:e4:e5:eb:29:1a:a4:
         bc:d2:26:a1:8f:76:88:8e:a8:2f:eb:a5:e8:5f:39:50:6d:f5:
         1c:0b:24:da:69:07:b6:df:4a:56:45:ca:98:0e:84:31:91:c5:
         ba:e2:09:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:33 2025 by rpki-client