Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft
File:                     5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft (raw, json)
Hash identifier:          B/H+9Yukfx1XtR99aWA0d0FusEWEwI+VQH+nSOej4ZI=
Subject key identifier:   67:73:19:51:5D:78:9B:48:00:25:59:4A:5E:76:47:78:1F:35:24:BA
Authority key identifier: E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30
Certificate issuer:       /CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930
Certificate serial:       34DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft
Manifest number:          34BF
Signing time:             Tue 12 Aug 2025 15:07:39 +0000
Manifest this update:     Tue 12 Aug 2025 15:07:39 +0000
Manifest next update:     Tue 19 Aug 2025 15:07:39 +0000
Files and hashes:         1: 5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl (hash: i/y0c8RPvfokywrcj05xZ8RwpJkEWgtB/i/OCa2O9NM=)
                          2: 32DFCCDCEB8011EAAB806163C4F9AE02.roa (hash: d8SyVppxPlIuR4fpNFIkYTURn6Yx4CMf1TSPHGG+TtY=)
                          3: 9A4EE834EB8111EA87E2C165C4F9AE02.roa (hash: 2HjZqBm6c0Bz0zik/PCkuHSNvhZSOIqG0dnIWyE0YeQ=)
                          4: FC75A532DBAC11EA9FF2FA1FC4F9AE02.roa (hash: EbIaf/1Sy/3aBx9khl+6A1cQZxzTMmTyasNR7QqdjR8=)
                          5: 60DA0694D9E111EA82120960C4F9AE02.roa (hash: 0RxGIy0cRn46gMQ4a+LKJK3dXVABCl5t2jG6UZ82riU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl
                          rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 15:07:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13535 (0x34df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEEB8, serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930
        Validity
            Not Before: Aug 12 15:07:39 2025 GMT
            Not After : Aug 19 15:07:39 2025 GMT
        Subject: CN=689b58bb-3aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6d:1c:bb:a5:55:4a:c6:8b:94:07:c6:29:48:
                    29:2e:2e:38:60:49:1d:10:a5:8e:e3:87:94:bc:3d:
                    14:34:fd:05:bf:b2:51:eb:c8:05:21:98:85:02:da:
                    fa:d3:45:5d:d5:5e:a5:7a:1d:80:5c:c2:2b:15:64:
                    f6:94:66:fa:b4:3a:34:a3:62:9e:ca:05:cd:b2:88:
                    64:3e:f8:18:6e:1f:51:82:90:6d:48:28:f8:7e:3a:
                    a8:e2:71:3f:4a:6e:50:81:87:e3:2d:0d:b0:ce:ca:
                    90:3b:bd:97:6c:29:2e:64:86:90:75:a7:9c:f7:b4:
                    38:e0:da:50:c2:fc:6d:03:a2:25:02:09:36:b0:47:
                    cf:70:ea:32:df:73:85:f7:b9:e1:1a:0b:47:ee:db:
                    98:ff:a9:8b:ec:74:bc:d3:6a:ec:2a:bf:46:fb:3c:
                    12:9c:b9:2d:68:28:24:38:85:7e:2b:f1:1c:b6:a7:
                    78:ae:fb:cc:77:e3:63:0e:0b:58:58:ab:4b:a8:7c:
                    6d:c4:a1:cf:03:15:23:f7:2b:83:61:1f:e4:f2:09:
                    70:ca:20:72:bb:bb:d1:b7:e6:84:10:77:90:5c:a4:
                    6b:b5:d9:13:34:2e:44:87:d6:81:2f:39:70:6d:1d:
                    80:5f:b7:30:7b:27:3b:72:77:af:04:75:9f:55:e6:
                    13:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:73:19:51:5D:78:9B:48:00:25:59:4A:5E:76:47:78:1F:35:24:BA
            X509v3 Authority Key Identifier:
                keyid:E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:2f:44:de:62:b4:96:de:ee:9d:40:00:39:40:42:a4:b5:6c:
         15:b9:29:26:56:ef:b3:77:43:96:cb:69:26:55:b9:8a:80:07:
         51:71:73:99:b1:a0:dd:c3:6f:f2:ae:56:f6:30:63:88:59:80:
         41:32:0a:bc:bb:2a:b0:9d:d5:7e:4a:30:e7:52:0c:ac:61:96:
         96:66:f7:31:3f:48:e6:33:02:cc:9f:b2:40:49:65:ab:52:b7:
         0e:dc:34:6b:2f:e1:7c:76:32:23:5b:00:8b:79:ee:cc:62:26:
         64:7f:cd:3e:ce:8a:a5:b3:f6:18:7e:38:ad:4d:96:20:f9:4b:
         90:25:ea:f3:3c:fd:b8:65:04:20:4d:75:f4:05:83:c9:4d:f6:
         fd:43:4e:22:02:c3:9f:e8:67:92:c0:5d:d7:2f:04:27:f1:73:
         42:5d:f1:be:d8:96:31:b9:0c:67:b4:09:82:bb:5e:02:39:18:
         cf:24:b1:ec:c6:ff:20:ca:b9:d2:49:a2:6e:42:75:62:4d:30:
         31:b0:bf:06:a5:1e:14:df:17:82:2a:17:7c:8f:18:86:3b:b2:
         84:f8:c2:7e:78:90:ea:7b:44:3c:e8:ad:a2:c2:42:66:ea:04:
         01:0d:4f:ed:a2:3a:51:b8:30:63:2d:d4:aa:8f:ef:da:b3:9b:
         04:fc:d9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:13:32 2025 by rpki-client