Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
File:                     jM5ORhldFXBPtWKTLgq2Kg65iiY.mft (raw, json)
Hash identifier:          gkSkMRz+ewVz6FZuRZN5xIGjDYUYlzrsVtnsbQwRIUg=
Subject key identifier:   5D:7B:F2:01:8D:55:D6:00:3B:B2:59:90:09:19:8C:C0:23:57:49:71
Authority key identifier: 8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26
Certificate issuer:       /CN=A91F7334/serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26
Certificate serial:       0433
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
Manifest number:          0426
Signing time:             Sat 09 Aug 2025 00:50:50 +0000
Manifest this update:     Sat 09 Aug 2025 00:50:50 +0000
Manifest next update:     Sat 16 Aug 2025 00:50:50 +0000
Files and hashes:         1: jM5ORhldFXBPtWKTLgq2Kg65iiY.crl (hash: ZVALvljwmEE//jnW/GUycGvxvX095aS95NzB+47dVEA=)
                          2: 96F24818744F11ECBFE4A57DC4F9AE02.roa (hash: Jq+BJa5bIC2ga/tgIn6ID1FhPZxllAOIKx3OxJo/dLg=)
                          3: 8B8B954E6C9011ED9AAF427AC4F9AE02.roa (hash: h3fylE+2YBgfkc7GqGmNPtjnF3D2D39dQ6blUneghIY=)
                          4: 0B7C7B7C751311ECA43F7D3BC4F9AE02.roa (hash: Q81s5XKL5iVaVaoWayTQR37y4XfCEhNVP+1tJwtC+bU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl
                          rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1075 (0x433)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7334, serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26
        Validity
            Not Before: Aug  9 00:50:50 2025 GMT
            Not After : Aug 16 00:50:50 2025 GMT
        Subject: CN=68969b6a-966c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:62:60:3e:36:83:14:3b:96:81:53:f7:2b:
                    29:f2:c3:d6:6d:09:1b:4c:46:af:db:51:9d:a5:18:
                    2c:b8:84:29:a0:6f:13:3b:03:eb:81:10:9a:6a:93:
                    9f:0c:11:ec:c5:1b:9e:db:86:1e:50:a8:1b:6a:e5:
                    fe:ca:4a:ab:40:40:25:55:1c:97:9c:af:1e:cc:08:
                    da:66:f4:d8:b3:9d:5f:8e:0f:1b:00:5c:27:94:52:
                    88:b8:21:c2:fe:68:39:f7:ad:7e:9a:6d:ea:bb:f6:
                    ab:a0:7a:de:54:ca:ef:10:27:07:0b:3e:ec:0d:4a:
                    b8:8c:9a:00:43:67:c5:b8:90:08:ec:73:25:ae:75:
                    e5:81:19:5c:20:9b:94:b2:93:73:d0:36:6f:88:97:
                    e8:83:c3:1a:af:3b:39:7b:3d:ba:1b:73:1d:ca:5e:
                    ec:e0:97:77:8b:91:bd:69:35:e3:6d:ba:3a:0b:07:
                    ec:ba:18:2e:36:de:97:49:aa:64:d6:71:52:d5:67:
                    cd:5b:07:c4:06:14:46:04:2f:d1:32:e6:de:d2:9a:
                    cc:fb:db:f2:a1:ad:12:9a:c9:ea:be:0a:ff:5a:01:
                    d9:07:6a:9b:f5:72:dc:a8:65:8b:4b:43:b3:91:84:
                    20:74:c9:0b:5d:ae:14:04:e5:ce:d0:9f:94:70:51:
                    ad:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:7B:F2:01:8D:55:D6:00:3B:B2:59:90:09:19:8C:C0:23:57:49:71
            X509v3 Authority Key Identifier:
                keyid:8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:80:ae:74:b4:55:d8:65:a8:d1:53:04:3e:69:9c:cb:55:95:
         e3:ea:b1:70:fa:e3:31:3b:d1:f8:0a:a4:8b:0f:f0:27:23:f2:
         63:d5:48:53:98:a3:98:3e:34:38:53:95:04:c6:22:27:5f:a7:
         97:38:19:16:3a:f2:a1:c2:00:cd:28:49:6f:26:3e:30:5e:6f:
         65:11:ae:eb:62:e6:a6:7a:b1:36:31:48:ce:47:93:bb:91:e2:
         a9:14:d0:52:40:dd:e3:2d:2e:a3:4a:9d:b1:3f:5f:23:af:8f:
         c2:95:87:6a:3f:6f:34:f5:4b:bb:5d:db:dc:5c:42:41:55:43:
         61:45:dd:8a:18:94:1f:2b:7b:21:3a:05:aa:95:80:41:77:9d:
         59:01:f9:1c:03:c6:a0:f4:32:63:9d:2a:0e:2e:9e:fc:75:6a:
         0a:33:a8:47:5d:09:eb:a4:29:ee:05:69:72:b9:35:4e:6f:26:
         43:c4:ba:90:8b:a7:af:3d:48:61:c9:48:1c:f6:dc:5e:63:a5:
         9b:aa:5d:33:70:f9:16:34:20:2f:72:ea:b3:a4:10:da:ca:2d:
         96:91:3b:77:58:a1:ef:4c:8f:1f:53:86:84:cc:9e:26:3f:ba:
         7f:97:d2:6d:53:bb:a4:ba:ed:2c:60:a8:66:b1:26:c9:12:71:
         d1:06:5d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:27:50 2025 by rpki-client