Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
File:                     pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft (raw, json)
Hash identifier:          CtSCd4E0GlUuVETc24vyw6yZicDp2zIEihXowSIHyS8=
Subject key identifier:   13:05:C7:1F:08:63:E9:8D:80:FD:2F:4E:30:D0:E4:46:41:90:16:08
Authority key identifier: A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC
Certificate issuer:       /CN=A91F81AD/serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC
Certificate serial:       0250
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
Manifest number:          024A
Signing time:             Thu 07 Aug 2025 02:26:16 +0000
Manifest this update:     Thu 07 Aug 2025 02:26:16 +0000
Manifest next update:     Thu 14 Aug 2025 02:26:16 +0000
Files and hashes:         1: pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl (hash: 0oKIgY/9R7L1pBdb4bFta/OmzwymaYl256UG8ShkP24=)
                          2: FA957D0A80FA11ED9B35954DC4F9AE02.roa (hash: cB+yZz7NXLEFl+NAyUDxFvEYEWhBfd/lLd6SEh+qscM=)
                          3: F9F81E3480FA11ED9B35954DC4F9AE02.roa (hash: uF//tcko2WVqVVcNN8K7d2s/1bV6GiNlBkTpEaTcZJA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl
                          rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 02:26:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F81AD, serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC
        Validity
            Not Before: Aug  7 02:26:16 2025 GMT
            Not After : Aug 14 02:26:16 2025 GMT
        Subject: CN=68940ec8-64b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fa:28:9d:c2:7b:bd:e5:42:e9:c2:98:7e:7b:
                    76:ae:21:1e:ba:d4:ad:15:1d:85:28:b0:e8:e6:d2:
                    e0:ad:c2:38:61:1c:64:f6:49:4c:85:50:0b:93:7f:
                    3b:42:bc:88:35:85:21:9a:08:18:73:d1:ce:46:1d:
                    6a:fa:46:b0:8f:86:04:48:aa:47:00:d4:50:15:e4:
                    fd:f0:da:ab:15:1f:55:ba:f6:17:c1:17:c3:7d:53:
                    2b:20:1b:49:b4:b1:e3:8b:48:77:15:f3:ee:5c:6c:
                    bf:83:14:78:fb:af:a7:1f:05:c2:c3:c1:1a:4c:f7:
                    0a:7a:e8:7e:11:fd:f8:dc:c4:ec:71:2e:1c:6e:bb:
                    16:e3:22:b2:56:58:88:e3:80:a5:09:b2:72:2e:0f:
                    f3:1d:a8:f7:1b:01:fd:cc:5a:c1:08:04:46:f9:99:
                    02:76:be:61:a4:07:f3:79:dc:06:71:40:79:0d:cd:
                    cf:27:3d:4c:3a:f0:51:07:61:66:25:90:af:67:10:
                    81:cf:f3:18:fc:1d:89:73:12:2a:39:2b:3b:98:b5:
                    2c:32:e6:98:4f:d9:fb:60:1a:5e:47:53:45:83:bd:
                    15:8a:2e:54:bc:53:11:60:e1:0e:8d:ca:3d:4c:e5:
                    25:ca:b9:6f:7e:b4:5a:40:3e:ce:e0:39:f8:b4:be:
                    25:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:05:C7:1F:08:63:E9:8D:80:FD:2F:4E:30:D0:E4:46:41:90:16:08
            X509v3 Authority Key Identifier:
                keyid:A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:93:58:2f:ec:ad:fc:dc:08:96:2a:b4:fc:69:99:0c:98:1e:
         70:74:33:e2:25:0e:84:8f:91:db:bc:f2:88:f9:90:6b:5f:5c:
         94:ec:db:0c:15:0e:8b:38:24:58:be:07:c2:be:4a:56:a8:71:
         e2:b9:7c:1f:5f:4c:6e:db:bb:e3:1f:b5:b8:6a:ef:eb:f4:cc:
         3b:28:39:9e:63:f7:94:27:6e:f4:10:cf:cb:07:bc:d0:5d:54:
         de:d4:67:52:16:36:e7:f4:fd:fc:65:32:f2:bb:64:cf:12:d9:
         43:1f:45:3d:06:12:c5:c9:dc:d7:6d:80:8f:0f:44:96:4e:38:
         5b:43:8e:88:13:5f:25:2f:f9:69:2e:3d:1a:b5:02:86:30:83:
         de:98:b3:c9:fe:e3:36:43:d1:77:d7:27:72:35:6f:ed:a3:c4:
         7e:98:a5:4f:22:6b:b1:ed:22:a5:32:8d:73:ce:69:1d:b1:85:
         fc:a2:44:68:b1:f7:22:67:6a:c9:9a:f1:58:d9:ee:e6:48:1b:
         3b:37:f2:e4:bf:a2:2c:5e:ac:d6:c5:17:71:c7:06:a2:e8:d8:
         2f:70:e2:c1:39:8c:00:32:2a:4b:a8:71:11:32:07:4e:d3:a2:
         3b:ea:b0:4b:32:e5:7a:76:d8:61:2a:24:f5:a9:2a:6c:eb:5a:
         e5:77:3f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:12:07 2025 by rpki-client