Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
File:                     Xs7vXyjy82UFPfuM780W4cPehK4.mft (raw, json)
Hash identifier:          1y7FPAuliB3GSFiHtW6TKFMSGVvvgLBFC07CYD6YR4U=
Subject key identifier:   45:44:B6:9D:DC:94:50:75:C9:83:85:C3:AF:E6:AE:72:1F:AE:50:04
Authority key identifier: 5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE
Certificate issuer:       /CN=A91DB8D9/serialNumber=5ECEEF5F28F2F365053DFB8CEFCD16E1C3DE84AE
Certificate serial:       03D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
Manifest number:          03C8
Signing time:             Mon 11 Aug 2025 00:49:44 +0000
Manifest this update:     Mon 11 Aug 2025 00:49:43 +0000
Manifest next update:     Mon 18 Aug 2025 00:49:43 +0000
Files and hashes:         1: Xs7vXyjy82UFPfuM780W4cPehK4.crl (hash: CSxzuw5HUnNTDkPia9bS+hY4UYO7OX5R2G30sEuu85g=)
                          2: 728139D62FA311F0A9129814C4F9AE02.roa (hash: guIJtqQN+EFa/f6cWPw4iUlLONR7odnIq46PWDEQXBE=)
                          3: F31E86967B2311EF93801A72C4F9AE02.roa (hash: Um+5nEX9UGWaeunNGOXHeeYETiEJM95laBvW70lUPDE=)
                          4: 7E044E58A06B11ECBF29B644C4F9AE02.roa (hash: EglzY5P8gEG+IosP670+janTnu12u5QYgDoCSiDyeR8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.crl
                          rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 977 (0x3d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB8D9, serialNumber=5ECEEF5F28F2F365053DFB8CEFCD16E1C3DE84AE
        Validity
            Not Before: Aug 11 00:49:43 2025 GMT
            Not After : Aug 18 00:49:43 2025 GMT
        Subject: CN=68993e28-0870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:96:c0:c7:d3:cb:91:4a:63:21:80:a9:68:9e:
                    be:eb:63:69:b1:ad:d7:13:62:89:b5:c8:c6:f8:5b:
                    f2:05:04:6b:f0:26:e7:fb:94:f9:d1:ad:b0:e8:12:
                    1e:e2:6f:b2:fa:f9:02:8f:a2:23:c5:71:62:0a:02:
                    53:6e:cf:f9:e7:d2:28:b6:4f:b8:79:6d:e1:35:a1:
                    cb:5e:91:9b:84:48:23:1b:fa:05:cd:07:73:67:ad:
                    10:a8:af:dd:46:7e:94:73:c7:f0:31:19:c1:a0:0c:
                    32:be:68:62:bb:f0:e1:20:e9:b6:2f:8e:f9:a1:06:
                    ae:9e:55:40:20:c3:75:b6:d5:2b:49:f6:45:df:c0:
                    8f:35:70:25:b3:44:f9:01:c0:b0:8a:f7:69:8b:19:
                    13:1d:8a:3a:ca:5b:d8:48:80:7a:3c:e8:d7:0d:ee:
                    d2:15:55:54:d2:51:f8:aa:77:37:25:b9:23:2c:59:
                    2f:36:84:cb:a8:29:3c:1d:f5:df:e8:7c:ab:3a:fc:
                    f6:81:48:4e:f2:8a:b5:c2:aa:07:5d:a4:a2:14:e2:
                    b5:b6:73:e2:43:6a:e1:04:71:d7:ba:c4:e8:2a:15:
                    67:8d:88:51:98:01:69:f6:a9:20:8f:bb:86:39:af:
                    b7:53:5f:68:d6:16:c3:26:b8:db:9e:b6:6c:0e:6f:
                    dc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:44:B6:9D:DC:94:50:75:C9:83:85:C3:AF:E6:AE:72:1F:AE:50:04
            X509v3 Authority Key Identifier:
                keyid:5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:cb:32:f4:74:d6:aa:23:fa:70:86:a3:b2:82:45:dd:5a:8f:
         d2:d1:cd:e1:f7:5d:e8:d1:98:1f:82:51:6d:e0:fb:9b:14:49:
         90:73:0a:15:a7:53:d8:f4:59:bb:d3:12:4b:e0:85:04:7f:bf:
         bc:64:98:71:2a:b1:61:bd:60:ba:b0:21:35:4f:f3:bd:08:cc:
         ce:2c:13:29:d4:95:83:4d:69:ff:6d:cb:81:85:8d:52:4b:d7:
         9d:cd:2b:d7:0e:b4:ea:20:2b:0f:95:b9:15:52:5d:17:c6:b9:
         d4:7a:33:51:52:95:fa:98:4c:72:b8:84:44:49:25:59:be:ae:
         2a:cb:20:f8:21:30:31:1a:94:21:34:93:e3:8a:42:e4:be:b0:
         f4:14:fa:4c:46:e2:f0:ae:b0:77:c7:7c:30:c4:ed:cd:bf:52:
         9e:56:6f:ae:80:b1:83:60:1c:19:c8:24:3d:98:ac:b7:bb:ef:
         8f:a2:48:8a:51:6d:d6:7e:6b:ea:06:17:c4:b2:44:4e:06:74:
         3d:99:3b:d2:c1:60:db:60:d1:3d:84:cc:06:f5:d6:d8:b5:39:
         73:60:10:0b:99:b3:be:c4:d4:85:ad:c5:9f:1e:1f:80:4b:2b:
         40:7f:ea:1f:49:8c:02:93:b5:78:3d:9a:33:a6:eb:ab:95:ed:
         f4:14:04:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:05:25 2025 by rpki-client