Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft
File:                     slUrOLjFywk1yUD6YJgOpvUQz4Y.mft (raw, json)
Hash identifier:          xgpGxpVmj6wn5BMVrl6PZZDD+x8NW3gBk9Wgk0iTTy4=
Subject key identifier:   87:56:64:73:CA:FB:60:8C:59:39:AE:A9:32:21:DC:95:B0:59:2D:C9
Authority key identifier: B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86
Certificate issuer:       /CN=A91F5786/serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86
Certificate serial:       BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft
Manifest number:          BB
Signing time:             Mon 11 Aug 2025 06:05:19 +0000
Manifest this update:     Mon 11 Aug 2025 06:05:19 +0000
Manifest next update:     Mon 18 Aug 2025 06:05:19 +0000
Files and hashes:         1: slUrOLjFywk1yUD6YJgOpvUQz4Y.crl (hash: 2h+SdS7v+QaaRQ6+2l679LkRON6QvpR0+VyPfK1XB+o=)
                          2: 1F3782EE5AE211EF8E82D12DC4F9AE02.roa (hash: u07sFp3Yqjqw6LAiuoDt1givQlP2Rg/DNRW12Og3/70=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl
                          rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5786, serialNumber=B2552B38B8C5CB0935C940FA60980EA6F510CF86
        Validity
            Not Before: Aug 11 06:05:19 2025 GMT
            Not After : Aug 18 06:05:19 2025 GMT
        Subject: CN=6899881f-63bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1c:80:00:da:80:c5:ae:8f:bc:1d:ec:ee:50:
                    20:87:94:12:d2:1b:78:91:2e:dc:4f:23:0a:71:5c:
                    fe:7c:1b:8c:4e:ac:ac:bf:17:e0:da:bd:9d:d7:8e:
                    13:b4:be:1d:57:4d:38:30:f8:40:d9:bc:da:1e:bf:
                    14:f9:6d:36:cf:fd:e5:02:ea:e7:c4:1f:8d:5c:d6:
                    3b:da:05:ff:b3:d3:08:ab:2f:0c:39:cb:e2:2a:d0:
                    20:5c:28:ab:c7:91:a4:41:3a:52:1f:43:e6:8c:88:
                    26:47:07:72:7e:35:30:f3:0e:a6:52:22:a2:01:dd:
                    ba:4c:c0:63:84:ec:ed:9e:f9:79:d2:19:a7:fd:70:
                    b3:0a:3c:99:b1:e1:01:c1:20:d3:cd:eb:1e:4a:93:
                    5a:d7:62:7a:95:0f:d1:8f:51:7a:73:97:b4:b9:8d:
                    49:50:e9:63:45:4f:2c:ae:6a:ff:5c:2d:ff:87:a0:
                    c5:8c:a5:41:20:48:f8:da:7f:cb:45:9d:d0:9d:1b:
                    2a:26:71:c8:75:f6:9d:c7:38:d4:7c:81:3e:70:dd:
                    4c:33:8c:cd:40:0f:ca:dd:41:6a:cb:d7:de:11:5a:
                    43:60:09:97:1e:87:8d:6a:2a:f6:e8:a0:f1:58:14:
                    9d:58:66:0e:6a:a2:be:03:23:6b:ec:db:30:71:8b:
                    21:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:56:64:73:CA:FB:60:8C:59:39:AE:A9:32:21:DC:95:B0:59:2D:C9
            X509v3 Authority Key Identifier:
                keyid:B2:55:2B:38:B8:C5:CB:09:35:C9:40:FA:60:98:0E:A6:F5:10:CF:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/slUrOLjFywk1yUD6YJgOpvUQz4Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5786/E57713805AE111EFBB5C572DC4F9AE02/slUrOLjFywk1yUD6YJgOpvUQz4Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:52:34:c0:be:32:0c:26:1c:1c:b8:a9:1e:ee:2e:3d:81:07:
         eb:79:68:23:06:99:c2:f4:be:49:df:90:23:d3:3a:d0:97:73:
         45:8c:ec:45:e1:df:d9:c7:75:af:53:73:4e:6d:20:5a:2b:5c:
         91:37:dc:3c:ce:81:d5:79:af:39:0d:f9:5a:46:c7:c4:63:ee:
         23:6f:93:be:0a:10:99:88:8f:49:57:a8:9e:65:6b:7c:51:c0:
         c8:42:c5:4b:99:e7:b0:df:89:fe:27:19:57:b4:bb:58:60:df:
         d5:46:5d:cb:ea:5f:0e:05:99:71:17:65:ed:69:bb:f7:ea:25:
         8a:1f:dc:d5:39:3c:e8:da:fe:5e:35:c3:b9:d7:8d:14:6c:5b:
         17:9e:2e:e6:72:93:07:45:20:62:a9:44:99:42:e8:b1:6d:49:
         19:96:b9:8a:45:76:43:ca:f0:0a:f7:47:47:72:48:28:b5:0b:
         18:eb:57:a4:00:28:14:2b:34:54:3a:06:bb:ee:cf:57:fc:d5:
         fd:f1:fe:82:f9:84:0a:fd:d7:11:54:0e:c2:0f:5f:1b:31:f8:
         41:73:8c:fd:17:60:33:9d:a8:34:84:88:80:bb:4d:a7:45:1c:
         61:30:02:b7:ca:f4:62:9b:6d:db:63:50:07:d4:0a:f4:cd:33:
         80:5a:5f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:46:17 2025 by rpki-client