Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
File:                     etee6zuSg1TZUNxuT4vsyyXC_Es.mft (raw, json)
Hash identifier:          v2z0980Bk7ygXLxkESmbvzGLOunfjDrSkwtK6I2mOM8=
Subject key identifier:   DB:1A:0F:08:3E:FA:E3:A1:A8:06:75:9B:04:0B:A4:1C:4F:59:4F:FC
Authority key identifier: 7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B
Certificate issuer:       /CN=A91F3CB1/serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B
Certificate serial:       42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
Manifest number:          40
Signing time:             Sat 09 Aug 2025 08:00:49 +0000
Manifest this update:     Sat 09 Aug 2025 08:00:48 +0000
Manifest next update:     Sat 16 Aug 2025 08:00:48 +0000
Files and hashes:         1: etee6zuSg1TZUNxuT4vsyyXC_Es.crl (hash: ZBCerlD3CnhHfD0d5ZFOn4+PWBwwTDbt/WOTrjboH8k=)
                          2: 9217B6681AA811F0B10C6412C4F9AE02.roa (hash: k9SmP/i/EacapJo/9m72S70HfODKRHtE2FbOisDtRLc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl
                          rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3CB1, serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B
        Validity
            Not Before: Aug  9 08:00:48 2025 GMT
            Not After : Aug 16 08:00:48 2025 GMT
        Subject: CN=68970030-2404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:81:9a:d4:34:85:5d:80:a6:e5:ed:a9:92:85:
                    2a:e5:22:c5:be:3f:64:26:b4:7c:0c:23:d3:bb:70:
                    4d:6d:8d:b3:52:33:73:e5:ef:67:45:27:42:ae:81:
                    1f:80:2e:b1:94:f3:c2:29:16:13:44:5d:a5:54:b1:
                    c5:b2:64:af:cd:63:62:01:d5:fa:bf:d5:0b:14:b7:
                    29:24:bf:a4:3b:89:2e:49:f9:a0:9d:04:b6:dd:fc:
                    75:77:da:1e:56:30:5f:15:ff:ac:96:b5:b0:30:56:
                    b8:f2:e3:5f:c3:13:ed:8e:c6:c0:f5:04:94:20:98:
                    bc:78:43:b1:6f:49:f7:aa:ac:79:27:61:75:e8:ed:
                    71:6d:42:1b:df:12:d8:bc:8e:7c:da:a0:be:ae:77:
                    23:f9:a7:43:70:6b:a5:31:f0:f2:2a:dc:9f:cc:4f:
                    7e:dc:89:bb:5e:07:08:35:1d:ef:5a:ff:33:f5:00:
                    e1:16:67:97:d5:3a:3c:c8:ba:7b:0b:66:99:5b:05:
                    21:91:d1:1f:b0:9d:f9:f2:11:3c:07:d5:89:fe:08:
                    c0:6b:77:5d:f5:eb:ce:5b:2e:7f:53:00:9d:af:b8:
                    b4:b5:07:b0:1a:93:63:63:43:4e:90:ef:94:86:5f:
                    bb:f7:d3:d1:c1:9f:c6:1f:0a:92:2f:a9:49:28:15:
                    8b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1A:0F:08:3E:FA:E3:A1:A8:06:75:9B:04:0B:A4:1C:4F:59:4F:FC
            X509v3 Authority Key Identifier:
                keyid:7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:8a:4f:f0:4b:db:0a:6f:ea:57:fb:df:9b:d0:9b:06:db:87:
         67:3e:83:63:03:6a:02:74:f3:e2:99:4e:92:ba:56:dc:91:50:
         69:4c:a5:b7:a7:32:7d:92:6c:4d:3a:96:31:9a:e2:27:94:bf:
         bf:78:2c:34:31:2a:e9:de:cc:9a:fa:93:05:e7:b6:c5:13:7c:
         96:87:c6:bd:94:00:f6:a9:9e:ab:7f:74:d0:05:37:c1:6a:1a:
         5b:88:75:68:26:e1:d7:99:ee:25:24:b7:be:89:ad:9d:8e:72:
         3d:ed:c3:d9:51:08:68:91:c4:04:99:98:b7:c2:d8:21:0a:02:
         1c:36:52:f0:04:16:44:ad:c1:98:3c:c0:19:93:b6:ac:4b:19:
         fe:88:cf:fe:4f:11:5e:94:23:3b:e3:47:bb:44:8c:b5:5a:3b:
         d0:22:89:a7:97:e0:d5:9b:a2:ba:ee:33:14:57:06:23:95:d8:
         45:7a:01:a3:07:52:87:30:83:fe:1b:d8:ef:22:44:df:2c:16:
         c8:ba:b9:27:6b:f5:21:34:be:b8:3b:28:30:28:35:20:3e:cb:
         06:4a:fa:36:36:c5:1b:ad:4a:33:6c:c9:6f:2b:91:f4:d2:70:
         8c:6f:af:4d:89:f9:6c:b9:eb:4d:4e:d7:f5:9a:46:31:16:97:
         9a:cf:3b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:52:40 2025 by rpki-client