Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft
File:                     Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft (raw, json)
Hash identifier:          2vT3H+z/D/zAu+H9593YOHYNQHDDznaa588DpCRhke4=
Subject key identifier:   D1:4E:3F:03:39:78:02:8A:DE:D0:5C:52:C0:CC:0B:58:C5:DC:DA:CA
Authority key identifier: 53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82
Certificate issuer:       /CN=A91F3AF8/serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682
Certificate serial:       07DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft
Manifest number:          07D0
Signing time:             Sun 10 Aug 2025 21:09:54 +0000
Manifest this update:     Sun 10 Aug 2025 21:09:54 +0000
Manifest next update:     Sun 17 Aug 2025 21:09:54 +0000
Files and hashes:         1: Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl (hash: A7r1aHc7/+WflJVeFMKw/U2ZUdFTVkkq7+l8oOn19eo=)
                          2: 3791632A030011EB909C3244C4F9AE02.roa (hash: dB3zmsBTd89CRpUWBbCoSsuPQSrK3XC84t7uk9x1cA8=)
                          3: CC08667A7A6011EB9BC9937BC4F9AE02.roa (hash: Z/3rZQtnqfOwNEnHVO1+ydXZ5JjAuPVHRMvibrG3oIc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl
                          rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2012 (0x7dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3AF8, serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682
        Validity
            Not Before: Aug 10 21:09:54 2025 GMT
            Not After : Aug 17 21:09:54 2025 GMT
        Subject: CN=68990aa2-0089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:08:ae:c9:1a:46:7a:f7:c7:0b:86:04:7b:63:
                    f9:7e:08:b0:27:1c:bd:5b:32:24:b6:fb:94:25:dc:
                    f4:1e:04:4c:54:78:85:29:7d:c3:78:a5:ee:fd:5f:
                    e5:9c:1c:c4:c0:10:f8:f3:51:e9:f0:7f:a2:a0:4d:
                    b3:ec:02:3b:f0:9d:4f:91:d2:1b:e6:dd:b4:48:21:
                    bf:47:58:1d:cc:5e:3a:86:88:a8:b8:63:9d:66:14:
                    33:19:0d:aa:f1:28:c3:fc:87:ae:42:54:4d:e3:5d:
                    43:c8:28:91:1c:72:fa:6d:7c:a3:0e:be:a4:48:1b:
                    30:9b:6c:04:98:49:64:ae:09:34:c8:4d:ec:c2:92:
                    2c:41:d5:91:03:d0:6b:56:93:34:99:c3:97:1f:da:
                    97:a3:92:df:3d:c7:e2:c9:c0:19:e6:37:8b:24:fa:
                    31:9f:05:d7:df:f7:59:6e:ec:d7:48:36:03:1f:c4:
                    57:5b:b6:ee:fe:ee:cf:b9:b7:87:77:58:9c:a5:0c:
                    00:ff:e3:6c:4e:dd:f5:66:b9:ab:fa:41:98:cf:b5:
                    84:92:47:a2:7c:8e:66:24:24:d0:79:37:ba:7d:0f:
                    61:af:5f:0f:d8:1c:a5:de:a1:73:ea:b6:81:91:a9:
                    d9:fc:84:b9:e9:13:80:9d:e9:cc:71:4a:88:ad:2b:
                    19:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4E:3F:03:39:78:02:8A:DE:D0:5C:52:C0:CC:0B:58:C5:DC:DA:CA
            X509v3 Authority Key Identifier:
                keyid:53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:e7:18:c9:06:30:0c:33:bd:52:36:c7:79:86:34:ba:06:18:
         e4:ab:8a:95:b2:9a:68:a1:9e:3d:0d:02:ea:b8:63:c7:d7:af:
         24:fb:31:39:e3:52:f5:30:86:b3:ba:8a:dd:16:17:f4:19:8a:
         1a:90:3f:1d:ad:6f:ca:a1:05:f1:4f:a9:15:77:f8:7d:21:cb:
         79:64:e7:49:bd:3d:76:84:ff:3f:f5:08:cb:df:61:ed:23:67:
         11:6d:c2:db:ec:4c:f8:24:ed:e8:d2:2f:b8:50:43:6c:6e:84:
         c5:db:ce:89:3c:d8:97:89:aa:86:ba:6d:f0:b0:f2:f0:50:d3:
         27:bc:a1:d4:b8:d7:e0:ba:1c:a4:fc:e8:79:b6:81:ce:a4:19:
         fb:fa:5a:31:ae:d8:4c:93:31:ab:d7:9d:2f:b7:ff:83:32:be:
         b6:e3:7d:50:23:21:26:f5:76:fb:af:b5:c4:ec:7a:52:e1:fa:
         38:25:83:78:af:a6:3e:9f:7d:85:39:30:3d:8e:e6:0e:c0:ff:
         14:c7:2a:1d:a2:0c:aa:eb:5c:4e:8d:a1:15:5a:fe:e9:f1:16:
         80:72:48:25:1a:d0:24:cd:03:fd:04:d1:b4:53:20:50:b8:f3:
         39:46:00:96:39:57:31:1a:02:0a:c7:e8:b0:53:14:6d:ce:00:
         e7:a8:15:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:55:59 2025 by rpki-client