Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft
File:                     x8206hgWXlmC0KkZ_0f3JnbgUHM.mft (raw, json)
Hash identifier:          rm/vL3Hmswv76yTIDDWHaoax54Ts3gKlQiQF6wgh9lI=
Subject key identifier:   17:9C:60:CA:8C:7A:CA:D5:B0:4C:4F:2F:68:62:1C:1A:DA:34:C0:AE
Authority key identifier: C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73
Certificate issuer:       /CN=A91FBEFA/serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073
Certificate serial:       47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft
Manifest number:          47
Signing time:             Sat 09 Aug 2025 07:55:43 +0000
Manifest this update:     Sat 09 Aug 2025 07:55:43 +0000
Manifest next update:     Sat 16 Aug 2025 07:55:43 +0000
Files and hashes:         1: x8206hgWXlmC0KkZ_0f3JnbgUHM.crl (hash: xrndJnlheA8sGcUMsQg9LMorUxAlxTMfGteArixcRbM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl
                          rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBEFA, serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073
        Validity
            Not Before: Aug  9 07:55:43 2025 GMT
            Not After : Aug 16 07:55:43 2025 GMT
        Subject: CN=6896feff-0134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:58:5c:31:13:8d:ad:68:6e:de:40:72:3f:20:
                    72:1b:5d:97:58:9e:4e:e2:9b:57:de:a1:6c:0a:67:
                    bd:d7:de:c1:20:74:73:c9:a1:f8:5e:83:a0:c4:6d:
                    f1:36:65:97:56:b5:bc:54:0c:b1:c8:c5:1b:98:71:
                    78:f3:46:24:56:05:42:9d:c0:e7:a1:b9:46:f7:17:
                    08:70:f5:c7:55:23:81:b6:2c:2c:0c:a8:5a:de:10:
                    b3:a1:38:56:16:8f:eb:ed:39:fb:8a:96:68:09:db:
                    a0:2d:45:0c:38:19:91:2a:7c:ca:b9:7b:ad:5c:c2:
                    c5:b6:c6:f4:35:0c:17:8d:ff:55:de:7d:eb:1a:19:
                    f0:91:d6:b0:5b:91:9f:cf:41:30:7c:f5:ca:21:b3:
                    1d:5d:6c:0a:20:87:0c:12:a4:29:5c:7b:a6:ac:a7:
                    18:36:b4:59:1f:63:a0:0c:52:cb:03:26:8f:da:25:
                    d9:12:87:b4:79:11:63:37:16:e0:92:c4:24:ea:b3:
                    15:35:d9:ce:a4:5b:a3:49:82:f0:34:ce:2e:a2:46:
                    27:a8:59:d3:3e:ee:1e:35:ae:af:80:28:7a:c3:aa:
                    d5:7b:34:50:e6:7b:88:34:c8:a1:d2:3b:e3:15:41:
                    db:55:81:9f:13:60:f7:e9:fd:b1:18:18:e6:c1:a5:
                    38:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9C:60:CA:8C:7A:CA:D5:B0:4C:4F:2F:68:62:1C:1A:DA:34:C0:AE
            X509v3 Authority Key Identifier:
                keyid:C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:6b:af:14:1d:ef:e0:6b:71:b1:d1:80:51:73:31:81:25:b9:
         31:36:b9:22:04:ed:e2:f3:85:55:71:e5:35:92:0d:4f:cf:21:
         cf:c6:4b:a5:f6:88:7e:c1:56:94:5c:ca:9a:b5:bd:66:c6:41:
         00:ab:34:fe:51:59:f5:fd:2f:26:92:6c:52:c4:cd:16:93:21:
         27:f6:1d:34:7d:07:7d:06:b4:62:f5:09:fc:a5:ef:59:7e:1b:
         2a:78:3d:e9:28:10:b7:1e:ce:e1:2d:7c:67:4e:2b:64:41:f9:
         e8:43:bf:67:8f:22:77:9a:1b:e8:98:c0:34:ba:50:fd:cf:5e:
         ac:eb:85:5e:90:aa:41:5f:81:14:12:c3:2d:ea:ad:e0:a8:33:
         a4:ac:51:9f:c8:66:5f:71:d5:81:b8:9c:89:c1:ae:a3:4c:55:
         4c:91:74:49:e9:77:15:e7:ab:57:7a:0c:14:38:d7:2a:b6:54:
         6b:1f:9b:3b:83:65:11:97:8e:55:e5:1f:e8:52:7e:b9:0b:d3:
         19:48:0b:ff:88:03:fb:9e:5d:19:85:05:a7:11:3f:01:2d:ef:
         2a:99:b8:e3:f3:30:a1:87:36:06:ad:d4:92:7e:5a:80:a3:cf:
         2e:ba:54:b7:1f:b3:ae:cb:22:a7:e9:2f:40:28:7d:14:1b:1e:
         02:78:d9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:50:31 2025 by rpki-client