Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
File:                     xsGRae6n0Ga8m8py3YgwvBg6EmY.mft (raw, json)
Hash identifier:          t5KgtN68dWzUCcIz9mh3mPWDW1Mn+l3o1EbQwr+nk48=
Subject key identifier:   93:36:E7:6D:FC:1D:C5:12:D9:F7:38:34:61:E9:8F:04:03:D5:24:7B
Authority key identifier: C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66
Certificate issuer:       /CN=A91F1C46/serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266
Certificate serial:       0805
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
Manifest number:          07FC
Signing time:             Sun 10 Aug 2025 20:57:55 +0000
Manifest this update:     Sun 10 Aug 2025 20:57:55 +0000
Manifest next update:     Sun 17 Aug 2025 20:57:55 +0000
Files and hashes:         1: xsGRae6n0Ga8m8py3YgwvBg6EmY.crl (hash: Un52KJF21SnKK09GyQ5JFpdpnlZhhwEUixBPI/Etm2g=)
                          2: D3EA977EF32D11EA8498822CC4F9AE02.roa (hash: W17rFdVVlgGDVf5Sl4I92TD7UhWdwp3Z8iY6u8GBaHw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl
                          rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2053 (0x805)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1C46, serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266
        Validity
            Not Before: Aug 10 20:57:55 2025 GMT
            Not After : Aug 17 20:57:55 2025 GMT
        Subject: CN=689907d3-65d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d1:c4:b1:38:1c:6d:26:56:c4:d3:45:99:65:
                    d8:35:c1:f0:83:f1:ae:b3:c9:05:d1:f5:67:f0:b7:
                    03:9c:9a:4d:f2:de:08:bd:9b:81:72:13:c8:5d:4c:
                    b3:7f:47:5d:93:a9:6c:3d:c2:5b:96:bc:70:7d:e4:
                    3b:52:0c:5f:de:9c:08:75:83:ee:7a:05:06:9c:34:
                    2e:6d:48:94:f4:58:51:04:d6:49:b0:31:af:4f:f5:
                    70:f1:7b:bc:ab:71:69:ec:bd:15:d9:c3:35:75:fb:
                    54:ff:2c:10:a4:2f:71:ba:01:24:35:e5:c1:ff:4e:
                    6c:74:99:42:f9:83:01:aa:58:18:23:cd:81:2b:58:
                    e4:b2:ef:d5:43:6c:65:ec:9e:ab:7a:46:64:16:e9:
                    9c:ad:39:86:10:93:7c:34:0d:c0:1f:25:95:f1:fe:
                    97:6d:b0:4f:84:16:71:68:3a:71:5d:3e:d0:1b:02:
                    e5:92:2e:38:a6:ec:94:59:58:54:20:39:c2:2f:b2:
                    51:84:f7:b7:5a:76:dc:0e:e4:12:ce:68:7e:e6:2b:
                    ae:11:3c:35:a5:ad:17:33:36:89:8b:30:71:87:8c:
                    9c:44:36:9c:05:43:10:20:58:23:80:ca:06:84:0f:
                    8d:ff:cd:1f:b7:5f:50:12:01:73:ac:ec:b3:aa:ce:
                    78:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:36:E7:6D:FC:1D:C5:12:D9:F7:38:34:61:E9:8F:04:03:D5:24:7B
            X509v3 Authority Key Identifier:
                keyid:C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:80:5e:cd:00:61:8c:2c:3b:d6:13:25:30:ee:83:30:48:a4:
         5a:dd:be:d0:48:ea:56:9e:08:a4:70:46:c7:75:eb:9f:4a:5b:
         4c:d0:11:d1:60:f6:73:a0:ec:80:fe:30:21:36:4e:3a:91:79:
         01:fd:56:15:cf:98:06:af:c1:25:ca:61:24:a2:d9:9f:9e:12:
         a4:6a:64:ae:4a:57:7f:e8:c8:64:a1:93:8c:a4:97:e8:32:ff:
         6a:4c:18:29:e8:55:95:2c:3c:b5:28:a9:1d:d9:38:55:0e:1f:
         f3:a1:6e:1c:60:e4:1f:14:a9:38:29:49:2d:e7:c8:85:93:0b:
         98:1d:7c:86:11:9c:71:f8:0f:c7:f5:3f:f8:bb:c1:e1:bb:37:
         68:28:9d:65:c5:aa:1a:fa:f1:22:ba:9f:ae:88:ec:77:fb:7b:
         70:0b:25:fd:6e:17:b1:98:fa:6e:00:a1:8c:af:18:a0:ba:c6:
         2f:b0:6f:e5:78:29:ea:21:14:13:2d:22:0a:bb:20:88:3f:27:
         14:a6:3b:4d:02:88:8d:a4:ec:67:29:e8:3f:fa:a9:01:ce:0a:
         88:c1:0e:5e:28:66:27:1d:42:f5:d2:01:58:51:91:55:97:b2:
         c0:66:04:e0:85:41:f2:b8:84:a0:4d:e5:28:79:7a:cf:13:95:
         05:7c:50:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:16:45 2025 by rpki-client