Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
File:                     jaGfzg764CK7qPjgwSN77b6-PvM.mft (raw, json)
Hash identifier:          YbEiMlpKx5cPjFCJNsa/4bTBV1ljnuIwzl0iVvkN6PQ=
Subject key identifier:   A7:CF:4F:45:A6:78:95:BE:2D:DD:7F:E3:4F:32:46:42:6D:24:2D:E8
Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3
Certificate issuer:       /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3
Certificate serial:       02A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
Manifest number:          0296
Signing time:             Sat 09 Aug 2025 02:09:55 +0000
Manifest this update:     Sat 09 Aug 2025 02:09:54 +0000
Manifest next update:     Sat 16 Aug 2025 02:09:54 +0000
Files and hashes:         1: jaGfzg764CK7qPjgwSN77b6-PvM.crl (hash: HrX1w/kdWXNR9VAowxgrR85E8+K9EFYJZAJDd6JTvr4=)
                          2: B502B0AE799311EE87452E15C4F9AE02.roa (hash: p6HAzJbDz2u6Sue7+MG3gPWj0R+LSPsYuFxQmz0j9kw=)
                          3: CE1A524210DD11EDBC7EA35FC4F9AE02.roa (hash: NQ/FdiHnsEgbWZrTY0bF8wpVYSqrTS9zjB5bxmcmsw4=)
                          4: CF0AE2F0159411EDB66C5D82C4F9AE02.roa (hash: TNVkH9/ls+ojKNeHZ8/09LeCiwH6MIuGmSqRPJyhPfY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl
                          rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 673 (0x2a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA8E8, serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3
        Validity
            Not Before: Aug  9 02:09:54 2025 GMT
            Not After : Aug 16 02:09:54 2025 GMT
        Subject: CN=6896adf2-edac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:62:d5:14:d1:f6:ae:ef:35:c9:fe:16:27:1d:
                    14:23:f0:df:da:da:b0:80:8e:92:66:ca:ad:fe:38:
                    28:c9:13:41:1e:8d:9d:4c:76:21:79:51:b9:9f:d2:
                    46:36:1a:10:a4:2c:90:a2:0f:0b:ee:f0:0e:ac:34:
                    59:d0:27:ab:9b:e2:d8:ab:e9:a2:79:41:c5:5b:d1:
                    8d:cf:e7:99:74:c1:35:35:3e:40:5c:6a:fc:1e:40:
                    0e:71:bb:a0:c6:43:05:64:77:b9:e6:83:1a:1d:84:
                    06:70:ee:36:62:e2:9c:f0:8f:0e:bb:14:e9:8c:33:
                    3e:56:16:2f:e8:f4:aa:56:d4:7b:41:f3:4d:ad:eb:
                    21:d5:93:16:c6:4f:d4:da:4d:f2:bd:59:06:98:26:
                    24:2b:4b:12:6b:80:c2:9e:36:43:d5:01:32:46:9e:
                    ed:ca:c4:6c:94:27:14:9e:29:3c:c3:21:61:72:d8:
                    63:b8:45:8c:bb:ec:8d:71:87:99:37:35:8d:6c:3a:
                    17:5d:02:03:d9:09:1e:67:38:1f:97:f2:13:75:43:
                    3d:bd:84:be:b3:7b:cb:a5:f3:5e:12:63:55:d9:e3:
                    32:d8:d8:14:db:0f:86:6b:cc:d8:1d:b8:93:5e:2e:
                    36:ba:58:ef:60:24:3d:f3:53:01:74:c3:8a:70:d9:
                    ef:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:CF:4F:45:A6:78:95:BE:2D:DD:7F:E3:4F:32:46:42:6D:24:2D:E8
            X509v3 Authority Key Identifier:
                keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ad:90:a5:e5:5c:36:db:7c:91:7d:b8:77:2c:dc:6d:3a:59:
         07:aa:45:1b:bb:ec:17:ca:9f:6f:fd:17:81:f6:a4:bb:63:9c:
         b4:28:29:0a:43:e2:e9:19:d1:62:88:af:bf:0c:b7:05:3c:01:
         da:43:92:cf:46:3c:e4:b1:a2:cd:59:de:7f:fb:29:52:7e:bd:
         f2:57:87:db:dd:40:39:51:07:0a:84:f4:ff:7f:60:4c:55:cb:
         ed:af:a4:c8:49:9d:94:86:b6:38:4b:87:7d:72:90:46:54:b9:
         ae:e8:5a:9f:d6:24:c4:a4:df:5a:4d:6f:35:0a:82:42:25:f0:
         5a:a0:bf:0b:d9:48:17:50:f4:87:49:26:c8:9c:0d:a1:da:9b:
         fc:cb:d3:d6:6d:c7:92:c8:40:fd:f6:a4:88:87:84:94:f1:d3:
         c2:7e:47:e5:ae:b4:b1:97:e5:01:6e:35:27:90:bc:68:2d:4d:
         93:31:1d:fb:15:03:40:24:d0:78:95:8c:72:cb:d2:2d:89:31:
         16:35:d9:54:94:04:62:5a:ed:de:ff:c3:01:46:fb:2a:ae:b0:
         cb:84:eb:f2:af:5b:d8:f6:7e:b2:e4:e9:5d:bf:32:c2:1e:7f:
         f6:a6:28:61:38:20:fb:29:be:66:ba:d1:93:26:59:4b:60:39:
         6e:d1:53:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:04:11 2025 by rpki-client