Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
File:                     RWr15WZ94kipzwzrkMbRs9Ptb6g.mft (raw, json)
Hash identifier:          qmvYcf93ceCU13h+Y0TwKPH10DNaY0aZ4PQSBEjduU8=
Subject key identifier:   C4:60:B6:5A:98:0A:F6:FD:7C:2C:2E:C5:F2:92:89:E8:B4:D4:82:F3
Authority key identifier: 45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8
Certificate issuer:       /CN=A91E8903/serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8
Certificate serial:       0200
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
Manifest number:          01F4
Signing time:             Tue 05 Aug 2025 03:05:23 +0000
Manifest this update:     Tue 05 Aug 2025 03:05:22 +0000
Manifest next update:     Tue 12 Aug 2025 03:05:22 +0000
Files and hashes:         1: RWr15WZ94kipzwzrkMbRs9Ptb6g.crl (hash: nSDaFgFIUxUs2vGM6cJgCxopumGe0cT6hC+uJUMSpTo=)
                          2: 5AFFB9E48C2211EDAE44DD87C4F9AE02.roa (hash: GsQb9OViPtlvdrFlGnTmdER4z6tAGgYqQ3UiB63DzdQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl
                          rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 03:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512 (0x200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8903, serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8
        Validity
            Not Before: Aug  5 03:05:22 2025 GMT
            Not After : Aug 12 03:05:22 2025 GMT
        Subject: CN=689174f3-0f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9c:61:a6:cc:e2:79:8c:51:9d:51:0c:e7:ab:
                    e1:d4:0c:54:d7:3e:4e:6e:b0:85:36:1a:78:6b:86:
                    72:56:98:f2:16:ef:0f:35:ec:1c:df:b4:c3:ed:b9:
                    35:18:51:4a:ed:e5:4d:9a:bc:0c:54:d0:51:40:a6:
                    41:ed:ea:c1:dd:30:08:49:d0:51:c2:c3:31:97:4c:
                    be:ab:36:4f:c6:e1:cd:10:c7:14:fe:cc:df:67:e7:
                    9e:71:da:d8:29:04:5d:ff:98:6e:fe:a5:e2:59:2c:
                    89:35:84:df:5b:fd:81:8e:f1:d3:db:50:19:e9:92:
                    7b:3f:46:6d:1d:1f:fa:11:02:05:2e:23:6a:69:e7:
                    6c:03:57:62:a9:55:15:cb:f7:6d:8b:ca:6c:09:d7:
                    73:62:a9:57:32:bc:ab:40:11:b6:27:5c:bc:6c:ec:
                    9c:70:73:58:eb:ad:67:6e:5c:28:63:84:90:4b:d8:
                    7b:88:08:b3:14:e7:b3:d0:f1:f2:72:42:0a:ed:06:
                    a5:36:72:44:b0:40:99:d0:d3:79:dd:01:be:e8:43:
                    a2:ac:22:cd:f7:78:ff:0b:01:9d:08:9c:3a:64:ca:
                    22:2f:77:87:ae:fd:80:aa:7f:e0:44:3d:ec:e4:d8:
                    4e:a8:ad:d4:78:28:f4:98:2a:6e:10:e2:62:bd:14:
                    e5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:60:B6:5A:98:0A:F6:FD:7C:2C:2E:C5:F2:92:89:E8:B4:D4:82:F3
            X509v3 Authority Key Identifier:
                keyid:45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:1c:70:5e:b4:9a:0a:09:d3:38:5b:12:cb:15:7a:38:12:96:
         c2:a1:6c:92:ed:e8:b4:7d:dd:8e:6f:8d:8a:de:33:a4:d7:ec:
         c1:77:d4:3b:d9:23:6f:0d:98:5b:43:6f:55:5f:f5:7c:59:31:
         10:0f:ea:be:7d:66:e3:ce:6e:6f:05:ba:ca:d5:06:6f:18:95:
         f4:2e:b7:de:98:ae:c3:63:ac:24:18:a6:e2:f5:f1:1e:d4:5e:
         a5:b2:64:d5:6e:1a:b7:1e:ac:01:68:7e:5c:f2:2c:6a:e8:00:
         14:97:e9:74:e6:a9:13:40:f5:0e:21:b2:c7:8f:6e:72:32:d0:
         45:bd:c3:18:ef:91:7a:03:89:08:e5:fd:04:74:11:a4:d0:66:
         7c:3a:60:7d:3c:42:19:db:2e:67:32:96:b2:08:1a:7f:84:17:
         69:78:b2:6f:7f:3f:e3:c5:c3:4a:b3:fa:21:be:85:5b:21:7b:
         38:cb:74:7d:be:19:81:60:b2:22:7d:34:50:58:06:c8:1e:f5:
         de:a5:8f:16:bf:87:c5:e6:0d:27:bd:70:ef:3a:cb:70:e3:71:
         44:05:4b:4c:5f:4f:ac:47:ea:18:be:82:21:22:a0:b8:19:d1:
         62:8f:20:b2:57:88:ee:82:69:99:9e:b9:5d:1f:47:13:24:1d:
         ab:d3:be:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:19:53 2025 by rpki-client