Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft
File:                     peado7v7jl3TlkjmpD4A-nI95lg.mft (raw, json)
Hash identifier:          Ky24Ko0gvP8ms7asSCWrV/wWfml0FeHUWWIvn4BYLno=
Subject key identifier:   50:95:87:24:00:33:8E:9E:FA:68:27:55:95:A5:AC:93:69:C2:92:34
Authority key identifier: A5:E6:9D:A3:BB:FB:8E:5D:D3:96:48:E6:A4:3E:00:FA:72:3D:E6:58
Certificate issuer:       /CN=A91190B4/serialNumber=A5E69DA3BBFB8E5DD39648E6A43E00FA723DE658
Certificate serial:       0AC3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft
Manifest number:          0ABB
Signing time:             Fri 18 Jul 2025 19:43:49 +0000
Manifest this update:     Fri 18 Jul 2025 19:43:49 +0000
Manifest next update:     Fri 25 Jul 2025 19:43:49 +0000
Files and hashes:         1: peado7v7jl3TlkjmpD4A-nI95lg.crl (hash: on+wFjSAPnQ/alWCB718Etss/I1wEQ1+aw3PzUXL9yc=)
                          2: 55BC5674573F11EAA8901D3EC4F9AE02.roa (hash: GpKaeFCXgLqKWUd4/mw0J3pe4Cuty7kr/IEGoWg6an0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.crl
                          rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 19:43:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2755 (0xac3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91190B4, serialNumber=A5E69DA3BBFB8E5DD39648E6A43E00FA723DE658
        Validity
            Not Before: Jul 18 19:43:49 2025 GMT
            Not After : Jul 25 19:43:49 2025 GMT
        Subject: CN=687aa3f5-94d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bf:6a:2b:3e:cf:67:b1:43:16:fe:04:2b:28:
                    89:18:5f:37:d7:cf:81:8b:e0:64:b3:2f:6c:03:41:
                    b9:32:29:22:7c:a9:a5:74:6b:21:51:86:e0:48:d6:
                    f3:a7:fe:78:4e:d2:a9:27:95:cd:75:54:b4:ee:c8:
                    74:29:e3:f4:4f:26:1e:4c:50:59:3c:e9:5c:99:e2:
                    05:88:d5:22:00:5b:05:e2:e5:ed:88:2f:4e:d3:7a:
                    d8:05:17:43:ce:5a:29:bf:b1:f7:03:0e:f8:fd:97:
                    20:7a:dd:50:b5:47:bb:80:05:82:de:f2:23:2d:17:
                    a3:b5:27:bf:f3:a1:ff:4e:16:9f:bb:be:cb:8d:dc:
                    e9:52:d9:90:5f:cf:59:79:a4:ab:6c:99:db:e3:f1:
                    59:3e:22:dd:19:37:e0:06:bc:ba:c6:65:b1:88:14:
                    a1:62:1c:88:53:d5:61:7f:71:2e:56:91:ac:3a:ba:
                    bd:ec:d8:d2:58:27:cc:0d:51:62:77:6b:99:45:52:
                    2d:14:d1:ab:ad:2f:65:5b:3f:d0:5f:39:74:13:a8:
                    29:2f:43:97:e1:b5:6d:a0:32:40:0e:ff:f7:71:0e:
                    a4:8f:82:85:50:d0:26:56:99:55:2a:95:bb:0a:8b:
                    78:b6:a6:6b:ad:a0:5a:0d:2c:ab:f4:d9:bf:21:3e:
                    2a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:95:87:24:00:33:8E:9E:FA:68:27:55:95:A5:AC:93:69:C2:92:34
            X509v3 Authority Key Identifier:
                keyid:A5:E6:9D:A3:BB:FB:8E:5D:D3:96:48:E6:A4:3E:00:FA:72:3D:E6:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peado7v7jl3TlkjmpD4A-nI95lg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91190B4/BC8C10AE573C11EAB0A4E335C4F9AE02/peado7v7jl3TlkjmpD4A-nI95lg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:b2:b0:95:d8:56:3b:3a:95:f7:fe:5b:fa:7f:11:02:f4:03:
         13:95:93:bb:4b:83:96:e0:f0:48:ba:d1:fa:5a:d3:57:b2:0d:
         40:0b:de:c2:f8:37:b7:9f:b1:47:5b:88:d7:12:6d:4e:f7:f4:
         4e:68:51:2c:b0:be:48:4c:bb:f4:5b:0f:cf:34:1b:8c:08:e9:
         96:f1:ae:2f:a6:eb:7b:ec:ae:79:9f:02:94:53:b3:98:dc:d3:
         06:2a:f5:83:7d:0c:85:c5:77:2b:c7:a7:de:eb:15:0f:28:79:
         6f:e0:63:6b:57:72:39:7f:9b:78:c2:a2:a9:47:93:40:e2:2a:
         c2:cd:d1:bb:bb:8d:00:e1:b5:77:ac:db:90:f3:cf:4e:1d:ec:
         73:48:e3:9e:66:01:bf:d2:b7:9d:8d:7b:2e:6f:4e:ed:2a:d8:
         de:cf:b1:35:18:81:66:f3:9e:a2:23:5e:30:d8:24:cc:d3:ef:
         76:2c:84:11:d2:55:5a:93:bf:42:e2:ad:5b:a5:c9:6e:f1:5b:
         e4:1e:41:57:44:ed:a8:62:15:ce:25:c3:1f:c5:52:07:d0:bf:
         2e:c8:4e:f8:14:09:16:60:06:e6:5f:3c:29:58:0e:19:d2:ee:
         60:43:45:29:1d:46:16:38:58:0e:24:b7:0a:bb:7e:22:69:16:
         4e:7b:40:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:07:42 2025 by rpki-client