Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft
File:                     4190GdVyqG920uv3gpq22dA0CQU.mft (raw, json)
Hash identifier:          yKyjqEFcMlwuI3pTC72Wg+1Ld/407hwS/UIJE/kbIFs=
Subject key identifier:   B0:FD:AE:6A:91:65:58:8D:0B:03:43:63:B5:81:BD:03:C6:99:F7:81
Authority key identifier: E3:5F:74:19:D5:72:A8:6F:76:D2:EB:F7:82:9A:B6:D9:D0:34:09:05
Certificate issuer:       /CN=A91E8AF5/serialNumber=E35F7419D572A86F76D2EBF7829AB6D9D0340905
Certificate serial:       0180
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft
Manifest number:          017D
Signing time:             Thu 07 Aug 2025 04:09:11 +0000
Manifest this update:     Thu 07 Aug 2025 04:09:11 +0000
Manifest next update:     Thu 14 Aug 2025 04:09:11 +0000
Files and hashes:         1: 4190GdVyqG920uv3gpq22dA0CQU.crl (hash: uzkW417HDoaxzoTP+RArpj4Qri0yWsdSvgbuZcnQRBQ=)
                          2: 9985244A2D1411EEAA9EA45DC4F9AE02.roa (hash: gPmbtMjtLenMFEAnNmFzzGl8ckVYYI4uHTkTnXpU64U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.crl
                          rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 04:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8AF5, serialNumber=E35F7419D572A86F76D2EBF7829AB6D9D0340905
        Validity
            Not Before: Aug  7 04:09:11 2025 GMT
            Not After : Aug 14 04:09:11 2025 GMT
        Subject: CN=689426e7-667e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b8:21:30:6a:7a:72:b3:0a:52:ca:c4:bd:53:
                    e5:a8:b8:19:99:3d:d3:29:08:56:9b:7a:a2:46:15:
                    2d:96:78:5b:2f:0a:66:ad:ab:ed:03:4c:59:6c:98:
                    6d:80:60:b3:b2:74:06:69:1f:e5:90:b1:6b:4a:17:
                    06:ea:ca:6c:2b:89:4e:b2:5d:38:4e:19:86:7d:7f:
                    66:30:69:03:04:52:2e:33:bf:05:1f:7b:c0:64:4c:
                    ba:a5:34:9d:e3:49:b0:83:82:14:fc:01:8e:87:87:
                    af:b5:0f:a7:00:d3:59:65:eb:c1:21:80:17:f4:6c:
                    57:5e:1d:7b:30:fd:d8:d0:28:b4:d7:90:fc:bb:a5:
                    26:0b:99:a4:ff:76:6e:e3:0f:67:13:b9:98:5c:4d:
                    ae:50:d7:d1:55:d4:15:f0:31:fc:22:db:57:19:e9:
                    80:b5:8f:8b:70:c2:83:50:14:96:76:f9:3a:0d:28:
                    43:e5:97:3f:ee:b5:68:e2:82:87:95:88:12:5a:53:
                    2d:e9:a7:fb:f6:9f:5f:1a:67:f2:92:41:b2:16:23:
                    4a:e2:b0:5c:45:d0:52:ee:ad:1b:ec:1d:72:84:6f:
                    07:74:11:9b:cb:17:93:4b:e9:d8:86:16:46:db:b6:
                    7b:b1:f8:13:96:7b:90:08:b8:5a:1c:a5:5e:73:26:
                    c2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:FD:AE:6A:91:65:58:8D:0B:03:43:63:B5:81:BD:03:C6:99:F7:81
            X509v3 Authority Key Identifier:
                keyid:E3:5F:74:19:D5:72:A8:6F:76:D2:EB:F7:82:9A:B6:D9:D0:34:09:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:41:47:93:6c:50:92:bb:14:93:a6:94:ee:39:8b:67:c7:02:
         46:e5:d0:c5:9d:5e:1b:96:64:f8:6f:ef:b7:28:ce:4e:56:de:
         6d:38:1d:c8:e7:21:db:7d:21:d4:f3:8e:c9:90:d7:e4:50:6a:
         70:d1:cc:cd:6c:e1:49:9c:9a:e4:08:16:99:42:d3:6c:16:88:
         92:6e:00:93:81:d3:a6:b0:d2:ca:59:fe:50:fa:10:dc:35:f4:
         9d:db:a8:f9:bb:96:b8:c9:ae:7a:ef:06:d6:da:4b:b0:8c:14:
         ef:cf:82:c3:90:38:ab:96:d6:18:bc:cb:2d:1f:55:15:bc:37:
         53:88:df:52:4d:78:4b:f4:3a:d6:67:0d:cd:86:bd:58:c1:61:
         c4:0f:02:32:57:a5:30:ae:52:55:2f:49:f6:15:7e:46:58:45:
         7d:35:48:ca:ee:03:2e:2e:95:32:b1:17:27:54:0b:f3:11:ff:
         39:6a:96:1d:99:29:9e:90:c5:f2:6e:1d:8a:2d:ea:3e:44:a3:
         4d:df:e9:42:78:6e:f2:19:e0:9d:72:d0:3a:18:9b:11:25:01:
         90:af:65:17:b4:c9:05:c3:b5:1c:fa:3c:bd:34:17:f8:31:cb:
         4b:77:4a:f8:78:90:0c:1b:26:0a:39:03:cb:e4:fb:f5:3a:e1:
         83:f3:b2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:06:36 2025 by rpki-client