Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
File:                     4USmzKVqqTEokShNJidwYk784uw.mft (raw, json)
Hash identifier:          YA87izvkSNrHb6IqBQC7heHsfLiS/M6PtQHG/Ju80/Q=
Subject key identifier:   51:F6:01:3F:F6:C6:A1:D5:0E:F0:77:6E:86:25:86:7D:88:BC:88:10
Authority key identifier: E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC
Certificate issuer:       /CN=A91E3493/serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
Certificate serial:       04C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
Manifest number:          04C1
Signing time:             Sun 10 Aug 2025 23:59:38 +0000
Manifest this update:     Sun 10 Aug 2025 23:59:38 +0000
Manifest next update:     Sun 17 Aug 2025 23:59:38 +0000
Files and hashes:         1: 4USmzKVqqTEokShNJidwYk784uw.crl (hash: +iVMm+T4BJ+9Fgh8y/VfNuJpFDuFDF1tVODMzRbqNTI=)
                          2: E7BC076E368A11EC9109BC30C4F9AE02.roa (hash: KvBasDBfRwAoH2EYsCxUrezIZS6Rx7LxrBNPNRo5D98=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl
                          rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1221 (0x4c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3493, serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
        Validity
            Not Before: Aug 10 23:59:38 2025 GMT
            Not After : Aug 17 23:59:38 2025 GMT
        Subject: CN=6899326a-4975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:84:80:ec:1e:0d:73:b8:f4:db:4a:38:40:07:
                    d5:62:2b:e1:c6:86:f2:44:f6:30:7b:a6:02:bc:8f:
                    50:98:4c:01:7a:2d:19:ec:d0:bc:72:ec:06:e0:b0:
                    3a:b1:22:f1:19:95:01:8e:62:5f:b7:dc:05:7a:a0:
                    22:a4:56:41:44:c7:89:1c:38:cb:57:e0:52:f2:a3:
                    d4:ae:91:b8:96:5b:5c:4a:f8:d5:19:a8:b1:45:c6:
                    df:e4:ba:a2:83:3e:a9:9b:2a:f8:dc:a8:d8:95:d3:
                    ac:cf:ba:8f:ec:a6:7f:b9:05:84:f5:74:c1:09:42:
                    9d:0f:db:2c:75:b7:0e:bc:99:be:81:b7:19:54:1d:
                    df:80:e3:24:8d:d2:44:e2:68:b6:30:c1:cd:92:83:
                    9c:22:89:ae:53:71:41:c3:cf:63:d2:13:7a:8c:44:
                    db:b0:7c:8d:46:3c:51:81:fc:c7:8e:0e:13:91:8e:
                    41:38:76:bb:c0:67:50:29:77:cb:67:53:07:30:4c:
                    5b:02:b2:fd:93:bf:f8:b9:2e:af:90:68:ed:09:0c:
                    b9:69:64:75:a5:e4:2d:2e:2b:9f:9c:d0:c2:d9:2b:
                    5e:92:75:05:0b:83:e4:5d:8d:00:00:2d:80:f0:13:
                    c3:dc:94:49:55:7a:03:95:5c:42:52:bf:44:fd:ee:
                    04:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F6:01:3F:F6:C6:A1:D5:0E:F0:77:6E:86:25:86:7D:88:BC:88:10
            X509v3 Authority Key Identifier:
                keyid:E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:44:c2:4e:e6:95:32:8a:b1:a2:e4:75:a1:5d:68:78:6f:e1:
         be:28:20:fd:76:90:d8:86:d0:17:4a:d4:28:d8:f3:49:a2:6c:
         b2:4d:d4:98:eb:3f:84:66:1e:18:7c:2a:eb:70:25:82:f2:90:
         fa:fb:40:82:25:f4:93:63:88:e6:1a:9d:5a:a2:e8:21:2d:2a:
         d5:c8:80:cd:33:c0:0d:df:06:6f:82:a2:ab:cb:50:1b:de:ae:
         e9:54:0b:fe:f7:3b:fd:c7:61:4a:fc:e5:91:37:13:d0:af:0f:
         2b:20:2b:63:73:eb:0d:05:7f:45:98:2c:7b:de:e5:69:e8:d7:
         a2:d3:1a:9a:3f:5b:c2:0e:ab:bd:f6:e4:2b:2a:50:3b:cc:20:
         86:47:4c:82:4e:49:a3:76:42:d9:c0:4b:e9:02:4f:46:3e:56:
         ff:62:7a:6e:3e:6f:c9:3f:e9:82:a7:55:61:11:7b:9a:26:5c:
         06:0a:86:0e:c0:ec:53:55:bc:08:53:18:26:94:d2:0a:dd:ae:
         5c:b4:9c:dc:6d:24:cb:ab:2e:78:53:4f:a9:45:19:29:22:b7:
         6b:79:9d:b5:0d:f5:55:48:62:24:da:e9:bc:19:19:97:34:50:
         92:21:20:20:bd:57:58:d5:da:75:ce:28:34:eb:ba:66:39:0c:
         14:6a:04:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:39 2025 by rpki-client