Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
File:                     Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft (raw, json)
Hash identifier:          YFSNGHpGngoxZpD01HvLlRQZc/SpejOmrLLVlY/y0IA=
Subject key identifier:   59:3D:A4:68:3E:10:B8:87:1E:58:F9:65:88:8B:5F:97:8E:09:59:31
Authority key identifier: 32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19
Certificate issuer:       /CN=A91F7AC9/serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219
Certificate serial:       0532
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
Manifest number:          052C
Signing time:             Sun 10 Aug 2025 23:40:09 +0000
Manifest this update:     Sun 10 Aug 2025 23:40:08 +0000
Manifest next update:     Sun 17 Aug 2025 23:40:08 +0000
Files and hashes:         1: Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl (hash: tbEocqaQwx5HQF3qDcm/pypVFnlfJq0Kvc4uK044DVY=)
                          2: 66CA9E0C0C5C11ECBD37E846C4F9AE02.roa (hash: OdV4BW1AypHn4SWRXVNRSTTOuuILOVr+n5WSk2uAXqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl
                          rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 17 Aug 2025 23:40:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1330 (0x532)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7AC9, serialNumber=326E55E74B06CD83F994CC1DA66565421CC9E219
        Validity
            Not Before: Aug 10 23:40:08 2025 GMT
            Not After : Aug 17 23:40:08 2025 GMT
        Subject: CN=68992dd8-5e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ce:a5:9a:d5:b4:b9:d5:74:1a:f8:b9:f1:f1:
                    7c:89:28:0d:bb:50:de:13:8e:bd:db:c7:65:ff:7f:
                    7c:45:66:3d:af:fb:47:1b:84:d8:bb:a7:f4:fa:6d:
                    63:0c:46:ea:3e:78:32:59:38:c6:ab:47:37:c2:9c:
                    d4:a5:5a:30:f7:69:d1:a1:e5:67:00:d6:6f:e0:43:
                    6d:04:7f:ff:3d:02:1b:de:eb:f6:00:ba:e3:8a:e7:
                    00:29:42:c5:87:3f:f1:f2:2a:b1:81:d3:ec:ce:05:
                    73:b0:bb:b4:67:48:5d:54:4d:e2:85:26:a6:b3:9c:
                    ed:8b:75:2b:27:e0:cd:be:44:13:23:81:c6:b6:f6:
                    c6:33:2a:7c:6e:9b:b9:d3:4e:b8:37:99:08:64:19:
                    19:93:21:9e:66:d0:51:4b:06:8c:12:e6:2c:c2:72:
                    b8:3f:fd:d1:d2:76:bf:6f:2f:ae:71:34:c3:bb:b6:
                    5d:fd:6e:37:7d:e6:bb:b6:d8:bb:0b:59:2e:ce:b1:
                    f5:a7:45:f8:f0:8d:40:25:04:0b:bc:6c:28:74:d7:
                    05:70:e3:a9:c7:eb:23:70:b0:7d:8b:56:10:6d:e4:
                    c8:23:1c:07:24:9a:2d:66:58:ac:fd:2d:28:49:11:
                    48:ed:ef:3c:60:c4:c0:75:e5:1e:05:c2:ef:7c:28:
                    25:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:3D:A4:68:3E:10:B8:87:1E:58:F9:65:88:8B:5F:97:8E:09:59:31
            X509v3 Authority Key Identifier:
                keyid:32:6E:55:E7:4B:06:CD:83:F9:94:CC:1D:A6:65:65:42:1C:C9:E2:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7AC9/0D9F40E60C5A11EC9F415345C4F9AE02/Mm5V50sGzYP5lMwdpmVlQhzJ4hk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:3d:89:06:f0:48:c7:54:23:42:99:8b:d9:7b:19:70:4e:f3:
         90:c0:80:f9:03:fc:72:99:38:aa:a1:ae:67:27:e9:af:6d:84:
         e0:d4:e8:17:8b:65:8b:5f:d9:f9:22:a3:00:3c:8d:6e:46:26:
         9d:c8:09:78:ca:72:aa:55:16:9a:f4:2e:37:17:e9:77:ea:b8:
         f0:ff:67:b5:91:af:08:9f:41:10:c1:2a:13:82:52:59:20:04:
         54:14:d6:fe:87:00:81:73:bb:b3:c0:02:70:21:0e:6f:54:c2:
         93:89:24:9b:5d:ed:65:c4:f5:f4:aa:07:63:00:ed:37:60:50:
         85:7c:85:c6:5c:e6:96:9c:6a:15:10:ab:ee:f3:b3:ae:42:c8:
         32:0f:c0:e6:c7:7c:c8:bf:10:c2:de:1e:18:42:b1:48:73:7e:
         73:87:79:3b:22:9b:22:8c:15:27:90:b9:f1:86:79:da:b0:79:
         2b:9b:c5:24:1b:f8:4c:6b:fb:84:29:cd:b4:87:93:16:35:f2:
         39:d8:6b:df:80:a7:8f:0d:27:d7:f7:85:12:2e:88:ce:4c:8b:
         b6:b4:8d:c5:b5:94:e9:42:d0:9e:d4:2b:9a:84:58:80:ec:69:
         c5:df:dd:62:ae:9f:2e:f9:e2:76:65:0c:e6:d5:32:9d:8e:f6:
         b1:ce:84:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:25:31 2025 by rpki-client