Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft
File:                     9htN6lh5mctuFcVAieTbmD0BuxA.mft (raw, json)
Hash identifier:          /bFBtAJgrHFfP2e+zp5DUXI73MmXOxiipzTa/wJiekQ=
Subject key identifier:   A0:40:80:3C:BD:E4:54:45:DD:30:5F:08:3C:68:BC:60:72:CA:8E:59
Authority key identifier: F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10
Certificate issuer:       /CN=A91F7315/serialNumber=F61B4DEA587999CB6E15C54089E4DB983D01BB10
Certificate serial:       0895
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft
Manifest number:          13FE
Signing time:             Sun 10 Aug 2025 19:03:12 +0000
Manifest this update:     Sun 10 Aug 2025 19:03:12 +0000
Manifest next update:     Sun 17 Aug 2025 19:03:12 +0000
Files and hashes:         1: 9htN6lh5mctuFcVAieTbmD0BuxA.crl (hash: qt2PqbJ+K1HBIcQv0YV1KgFta2azdufUuDdIuWXFjvQ=)
                          2: 336BD320CA6111EA97DD3439C4F9AE02.roa (hash: pBil4YvB7UVloyu8DhnduF+muuJFikEsjN7164UGvgI=)
                          3: 341C7414CA6111EA97DD3439C4F9AE02.roa (hash: h5frQG89R9e/TKYUgyXgA4IPep2flQE62K3sYBLnEpw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.crl
                          rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2197 (0x895)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7315, serialNumber=F61B4DEA587999CB6E15C54089E4DB983D01BB10
        Validity
            Not Before: Aug 10 19:03:12 2025 GMT
            Not After : Aug 17 19:03:12 2025 GMT
        Subject: CN=6898ecf0-1139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c0:de:4c:e5:17:3e:b6:16:f9:f6:10:b6:7d:
                    04:29:ff:02:44:84:4c:8f:c2:22:a8:f6:34:90:8a:
                    c0:f1:0b:49:dc:74:d0:34:ca:c9:d9:d2:77:c2:53:
                    2e:ec:6a:ad:21:09:0f:2d:d2:aa:51:0f:4b:81:1e:
                    5e:b3:15:4d:fa:12:5d:58:d8:f6:d7:b2:ce:d6:0c:
                    20:12:7b:b2:e3:d9:d7:51:41:ea:16:92:6c:65:3e:
                    1d:84:da:5a:00:a5:26:4f:37:95:e8:08:5b:12:92:
                    97:03:20:da:5e:f3:fd:99:80:3e:11:58:4a:79:01:
                    4c:b7:b9:ec:1a:b5:8f:3e:73:18:04:22:e1:49:4a:
                    ea:02:e2:d8:92:17:1a:a5:d4:0f:d8:52:ac:aa:42:
                    94:49:41:e8:36:16:c0:16:90:c8:d6:d9:1b:14:9a:
                    da:be:7a:d6:38:d5:ad:59:32:88:1d:64:a5:a3:b1:
                    c0:76:43:5e:0b:bc:2b:3d:ef:61:12:4d:1b:b0:8d:
                    3d:f8:cf:d8:0b:31:70:7c:f4:7e:66:18:05:19:58:
                    32:35:98:2c:a9:0a:75:e7:24:e3:d6:a1:01:af:9a:
                    db:cd:2d:e0:04:3c:c4:a1:a1:7a:c7:b3:dc:73:91:
                    09:36:80:82:8b:31:85:7d:37:e4:59:6c:3b:6d:3a:
                    76:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:40:80:3C:BD:E4:54:45:DD:30:5F:08:3C:68:BC:60:72:CA:8E:59
            X509v3 Authority Key Identifier:
                keyid:F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:3b:ad:ee:2a:c2:78:c8:b8:ff:77:7e:77:c6:ad:7b:9f:09:
         01:ff:77:db:4d:14:97:3c:1f:9b:20:eb:ef:a7:c2:f3:db:1a:
         8e:4b:15:3a:25:18:3e:b0:70:8b:c6:d2:dd:25:ad:0f:75:99:
         cd:bb:1a:75:93:b0:50:65:97:2b:5f:8c:20:dd:32:06:37:53:
         b2:7d:94:d9:98:20:c0:8e:8c:ab:b2:c0:f4:fb:d4:e9:28:51:
         04:f9:de:df:18:c6:19:ab:25:83:d5:0e:23:39:7a:29:95:15:
         2d:e2:2c:9b:f5:39:97:80:dc:86:77:62:7d:b4:11:fb:5e:4c:
         90:2f:46:4d:5d:81:33:8e:7a:be:0e:d0:d4:59:56:52:f7:22:
         49:9c:a5:ee:10:cd:29:1a:99:bc:ea:19:97:54:22:7f:47:93:
         45:67:dc:c0:b8:d4:0f:d6:78:f0:6f:95:e5:2d:e7:84:13:42:
         ee:17:d6:74:45:f2:91:91:c4:06:83:07:2d:6b:68:69:60:5d:
         63:5f:dd:a2:38:ef:bc:da:68:40:71:48:4b:3e:8f:51:f9:3a:
         01:4a:a7:27:3e:b0:fc:74:4d:17:59:ef:ec:45:d9:75:e6:0d:
         96:1b:c5:5b:c6:41:aa:f4:94:7d:4f:f3:aa:95:7f:8b:30:78:
         6a:27:bb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:29:05 2025 by rpki-client