Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
File:                     SrvXMBz_f7SstqBKFPCjbM6FYRw.mft (raw, json)
Hash identifier:          ZlXH8rNcS3vARkMTFtlhmuZN0f5p5l//qpE+Js0f4xY=
Subject key identifier:   CB:9F:59:38:75:94:14:7B:24:61:90:CA:03:B3:84:0C:67:D9:4A:A0
Authority key identifier: 4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C
Certificate issuer:       /CN=A91FA9BC/serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C
Certificate serial:       0202
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
Manifest number:          01EB
Signing time:             Tue 05 Aug 2025 03:19:36 +0000
Manifest this update:     Tue 05 Aug 2025 03:19:36 +0000
Manifest next update:     Tue 12 Aug 2025 03:19:36 +0000
Files and hashes:         1: SrvXMBz_f7SstqBKFPCjbM6FYRw.crl (hash: b5vbV8GDNmCrhMPtVaNmG2MTT+XS1u7LE81KEqPs/SU=)
                          2: 106F283CB74311EDB0C38030C4F9AE02.roa (hash: hw7fn2Uz56pW/An8KSiF7/ybzu4erny13VSakUkooRo=)
                          3: 688B6F18355811F0AF79910EC4F9AE02.roa (hash: TCN1AZgzVPw/0NzN3SuEMukcZY6yAiASu/ppodIE8PQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl
                          rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 03:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514 (0x202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA9BC, serialNumber=4ABBD7301CFF7FB4ACB6A04A14F0A36CCE85611C
        Validity
            Not Before: Aug  5 03:19:36 2025 GMT
            Not After : Aug 12 03:19:36 2025 GMT
        Subject: CN=68917848-9cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f0:4a:cc:8b:28:ed:1d:6a:c9:65:73:d0:21:
                    c5:de:f3:f7:5a:41:10:b1:83:7b:35:13:85:be:79:
                    c5:2b:ca:5d:12:a2:89:d8:f8:a7:84:01:c8:a3:6a:
                    a5:cd:59:c4:c8:a6:f6:77:2b:df:50:31:39:1f:37:
                    77:68:cd:06:c7:00:f7:87:10:9b:98:b0:4a:56:ca:
                    0b:38:7c:2f:f4:6c:aa:bb:12:b8:90:57:ff:22:5d:
                    37:8f:19:e4:63:a8:7b:ed:e0:85:4f:11:cc:26:7c:
                    f6:74:b7:34:f0:6e:a1:45:7a:cc:0a:3d:fb:d6:a9:
                    76:62:54:e9:58:3b:ff:42:10:f5:4e:25:08:35:57:
                    1c:e8:8b:1e:54:97:fd:0e:06:a8:3b:88:69:52:ff:
                    b3:9c:15:5e:50:16:b5:02:b5:77:21:cb:b2:21:bc:
                    00:7a:0d:da:98:79:84:cc:7f:26:d3:e3:d2:f2:e2:
                    9b:06:90:5b:55:80:94:f8:63:4c:66:17:e2:81:11:
                    fe:f9:91:a6:35:4f:2d:cc:ba:cb:15:87:1c:2f:39:
                    08:45:e8:43:de:e7:eb:11:e6:bd:fa:47:33:85:49:
                    8f:cb:07:0f:cc:c8:eb:af:58:38:5f:b7:93:0c:d1:
                    1c:65:12:ea:45:62:a5:8f:9c:37:09:e4:39:22:1d:
                    bf:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9F:59:38:75:94:14:7B:24:61:90:CA:03:B3:84:0C:67:D9:4A:A0
            X509v3 Authority Key Identifier:
                keyid:4A:BB:D7:30:1C:FF:7F:B4:AC:B6:A0:4A:14:F0:A3:6C:CE:85:61:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SrvXMBz_f7SstqBKFPCjbM6FYRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA9BC/BE2CEFF0B3AA11EDAF31623FC4F9AE02/SrvXMBz_f7SstqBKFPCjbM6FYRw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:8a:1c:3a:3b:16:65:d0:af:4f:af:a6:05:03:1b:45:b5:d5:
         ae:4f:79:28:ca:b9:91:3f:e0:9c:6f:cf:d5:b6:6f:0b:cf:79:
         0e:b0:7f:33:ce:14:0f:19:a2:1e:ff:b2:f3:e9:3b:4c:94:9d:
         8a:3b:eb:99:ee:56:7d:5f:97:51:62:0a:f3:0c:8a:60:5c:4b:
         52:f0:2c:1b:87:73:99:ea:ab:e0:39:26:f2:11:de:4c:05:df:
         49:09:b6:6e:31:7b:93:39:ea:b0:ff:cf:c9:f3:8f:da:bf:17:
         38:08:28:0a:19:3d:2d:9a:c1:91:65:05:87:b5:18:49:4f:f3:
         b4:96:08:f8:61:40:fb:bf:30:02:f6:c5:34:a8:0a:43:c0:e7:
         e6:b1:10:81:54:d5:fa:56:e0:86:f5:84:c9:4d:49:62:b8:4d:
         ff:52:f2:5c:b3:0c:58:d0:e3:38:ab:11:d9:8d:03:ad:c0:e5:
         f2:38:6e:f8:b8:d6:c0:2a:7e:66:91:9e:2a:71:ca:31:03:a7:
         9d:fb:4b:96:47:1c:eb:02:8c:2b:d8:85:d3:e7:79:e9:2a:1e:
         9f:2f:b2:f7:7d:77:b6:e5:52:5d:c8:2b:d0:7e:03:fa:93:22:
         08:3c:4b:1b:04:8e:fb:15:a8:67:e4:09:94:90:10:ce:28:09:
         c5:f3:47:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:11:39 2025 by rpki-client