Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft
File:                     k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft (raw, json)
Hash identifier:          AjLU3tI3TE5glKqdtmgzCa/vP73CpGj9E4sTHSPZqkY=
Subject key identifier:   50:9B:0A:28:19:6E:2F:A8:19:26:AB:34:A2:AE:D8:15:D9:DB:0C:3B
Authority key identifier: 93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA
Certificate issuer:       /CN=A91E473F/serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA
Certificate serial:       0643
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft
Manifest number:          063F
Signing time:             Sun 10 Aug 2025 22:44:20 +0000
Manifest this update:     Sun 10 Aug 2025 22:44:20 +0000
Manifest next update:     Sun 17 Aug 2025 22:44:20 +0000
Files and hashes:         1: k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl (hash: w42ssBMrno9KltcQFzADcBaZXGaOUXjbGdRcdtqq3x4=)
                          2: 4816D7F0327A11EEA132B74CC4F9AE02.roa (hash: vwAWNkOECPjjWatP7CXVkY05vRy7dP/taTedzApQJgw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl
                          rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1603 (0x643)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E473F, serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA
        Validity
            Not Before: Aug 10 22:44:20 2025 GMT
            Not After : Aug 17 22:44:20 2025 GMT
        Subject: CN=689920c4-0750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:89:40:65:ef:46:72:ae:6e:f0:aa:ed:16:ee:
                    11:d6:ea:86:8d:c7:07:d2:df:86:d4:a5:2c:b5:20:
                    c3:93:c8:30:79:6a:30:2a:5e:53:42:8c:3b:12:8d:
                    ff:5c:93:37:84:12:e2:c1:40:4c:7f:80:3b:73:b5:
                    1c:b7:c8:dd:72:48:99:f5:a7:b3:36:45:8b:83:f9:
                    af:75:5d:b7:6b:46:d5:ad:72:32:0a:3b:6f:e5:6c:
                    01:29:20:7a:c8:9e:d7:c1:a5:74:89:e8:9f:ad:27:
                    4d:52:c4:a1:78:f6:3c:28:2b:d8:20:fc:c3:c3:51:
                    2a:e4:57:5a:45:45:80:c7:50:0f:65:8f:ab:93:ac:
                    9c:d8:88:27:0e:33:4c:31:17:b1:5b:ef:88:08:14:
                    f1:f7:52:ff:e0:4e:02:f0:82:55:13:ef:93:87:31:
                    88:8f:e5:9c:93:c1:91:05:ad:78:62:fa:08:42:8a:
                    2b:8b:b6:45:83:c4:f4:41:03:25:07:7a:7e:0f:cf:
                    92:3c:b4:66:97:ce:3c:c9:98:c5:a3:e2:50:61:ab:
                    28:b4:1d:7a:bd:0a:60:41:8c:de:68:6a:5d:02:dc:
                    c3:1f:a5:44:74:d3:b2:16:77:59:d3:02:8a:4f:aa:
                    55:0e:63:38:6f:ea:e3:cc:f3:33:43:4c:ab:a6:a4:
                    75:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9B:0A:28:19:6E:2F:A8:19:26:AB:34:A2:AE:D8:15:D9:DB:0C:3B
            X509v3 Authority Key Identifier:
                keyid:93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:57:4a:a0:69:38:55:21:9a:07:24:36:4c:70:d1:84:b9:56:
         80:81:b4:7e:28:ed:e9:6c:6e:ff:30:79:a8:1f:e3:af:40:53:
         c0:70:5e:94:ca:ee:fc:f8:84:61:23:c2:7c:59:60:2a:ab:19:
         3a:9b:b3:78:70:e7:18:92:ca:54:f7:69:57:97:df:8e:15:ff:
         3a:a0:c1:3b:9a:38:e1:78:d9:71:39:5b:84:67:79:5b:f7:27:
         d6:91:01:e4:e7:31:dd:e5:d0:cd:7e:72:d8:fd:fa:e9:f3:09:
         57:2b:d4:5f:ee:ed:b8:4f:64:ad:9e:91:9d:a8:07:1b:f4:38:
         c4:1d:a9:ad:19:dd:66:b0:c0:21:bc:fb:a9:44:80:dd:66:ad:
         66:72:74:dd:40:00:5b:45:2c:0b:89:40:b4:4d:ae:1c:49:7a:
         28:c1:60:8b:77:29:18:76:fb:20:6d:44:66:d6:8f:0e:43:cd:
         aa:61:65:95:08:74:6c:8f:c6:82:10:04:24:78:87:78:9d:02:
         32:55:58:66:3f:3e:b3:fc:fb:40:89:87:0b:48:21:0b:56:a6:
         35:7c:14:53:14:90:c0:97:e5:06:2a:aa:a8:61:f1:c4:db:40:
         20:c1:fc:2b:7a:f2:e3:a9:81:26:f9:df:ec:78:7d:67:6a:b7:
         07:03:2f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:29:30 2025 by rpki-client