Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
File:                     53BQiRv4knQyZQtwbyv-3ZKhEck.mft (raw, json)
Hash identifier:          kvaGnKfYrq/+OYOrvvZNP4Jq3nc1uz2mZyeL5hEcBBQ=
Subject key identifier:   EF:4A:C1:DD:7D:9B:40:6D:DF:03:C8:62:0F:C8:3F:38:E2:9B:3D:D2
Authority key identifier: E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9
Certificate issuer:       /CN=A91F8ADF/serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
Certificate serial:       01A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
Manifest number:          01A3
Signing time:             Tue 05 Aug 2025 03:43:11 +0000
Manifest this update:     Tue 05 Aug 2025 03:43:10 +0000
Manifest next update:     Tue 12 Aug 2025 03:43:10 +0000
Files and hashes:         1: 53BQiRv4knQyZQtwbyv-3ZKhEck.crl (hash: jMA6G+T1+ws5UNUAsgpGBsAIcK/7/xn3yBXIRJrylOE=)
                          2: F3210638F06D11ED9055A212C4F9AE02.roa (hash: MagQfzBe5yekFsZC62iyjicRBCCYPyKf7/pA5fRZ3FI=)
                          3: F2948C58F06D11ED9055A212C4F9AE02.roa (hash: WtNf5u0VPKCbZuWxho7o4y46h8TygPH5bunfDKzrwyU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl
                          rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 03:43:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425 (0x1a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8ADF, serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
        Validity
            Not Before: Aug  5 03:43:10 2025 GMT
            Not After : Aug 12 03:43:10 2025 GMT
        Subject: CN=68917dce-6cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:24:35:d3:6b:1f:79:01:88:28:ed:f8:5b:25:
                    95:eb:3c:d8:a5:ed:88:03:30:92:fb:21:7c:65:63:
                    9e:3a:14:b5:64:01:be:64:a3:2a:76:8d:5f:fc:c0:
                    2e:80:a1:17:90:99:21:f9:12:25:48:4a:df:a2:da:
                    31:18:1e:52:b5:42:42:fd:fa:0d:86:ba:f5:8f:86:
                    11:ed:fa:97:b0:80:82:9c:86:ac:16:e1:6b:8a:ef:
                    9a:ef:66:46:2c:31:dc:8e:80:e4:69:0a:e2:a7:fa:
                    79:d4:b8:7e:ba:0f:d5:fa:1d:3e:2b:a0:11:8b:6f:
                    cf:e4:09:19:df:39:80:aa:12:3e:1d:de:04:0a:ed:
                    c4:c2:53:31:9f:44:c8:f0:29:0f:32:36:c3:f5:c3:
                    e1:54:96:68:b8:e1:35:8f:d0:fc:34:60:bf:23:e4:
                    48:79:61:ec:41:0d:3c:09:88:cb:35:10:25:57:b5:
                    47:f4:56:08:d6:1f:83:29:63:2c:a1:91:bd:87:08:
                    3c:4f:21:f1:5d:82:3c:37:03:13:b8:b2:be:ba:63:
                    1d:d1:f0:04:4b:ac:d9:a8:97:3f:86:23:e1:a0:f8:
                    39:68:c1:89:9f:57:07:90:65:01:d3:3e:7f:1a:56:
                    a6:ba:ef:92:47:2f:9c:4a:3f:a7:c3:30:b7:2d:e8:
                    66:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4A:C1:DD:7D:9B:40:6D:DF:03:C8:62:0F:C8:3F:38:E2:9B:3D:D2
            X509v3 Authority Key Identifier:
                keyid:E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:31:24:72:15:25:ec:33:1e:b6:b3:db:09:9e:3c:97:4f:2b:
         64:e5:72:a8:88:ae:83:17:e9:bc:41:d8:48:2a:ad:00:48:c0:
         2e:58:95:b4:9e:b7:ba:fc:49:b3:04:f1:5d:6c:e3:f1:92:65:
         ce:3e:e1:7b:e4:f3:ef:a4:b6:b6:42:aa:dc:90:a6:75:33:a3:
         77:2e:df:6b:a5:1e:af:b2:82:ad:39:0c:2c:ce:94:b3:d4:25:
         24:d9:0d:c9:b6:b6:da:92:49:2b:84:da:23:79:fd:c8:37:e2:
         c8:e7:83:01:6b:f5:b5:b4:7b:5e:bf:59:34:38:d0:ed:2f:e4:
         ce:f9:fb:4c:66:51:a8:73:56:38:65:9a:0b:c8:8d:e3:bd:d5:
         a0:98:c7:f2:20:c5:ae:a9:70:ea:43:00:95:b8:70:c7:08:18:
         1e:4f:72:bf:93:90:4f:2d:b8:0f:b2:bf:0b:c4:dc:62:20:86:
         8d:2b:a0:37:fb:39:60:04:f9:e4:37:91:38:45:3d:2f:f9:79:
         b4:25:2d:b8:e7:ae:71:9e:07:c1:c3:59:a3:a2:39:23:31:b9:
         eb:db:ea:f5:db:fc:cc:51:81:f8:86:41:38:7e:55:5e:20:fe:
         8e:24:44:c3:34:a9:98:ac:dc:1c:6e:07:35:b4:78:02:b1:b7:
         66:c2:68:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:30:55 2025 by rpki-client