Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
File:                     1j3oKnWfllf48HOyUSUarme6S6Y.mft (raw, json)
Hash identifier:          0Iyvv5SDX/9veqxP+fkqdmDymmgzk+AvSEjFQPx9nl8=
Subject key identifier:   E4:27:E0:96:60:03:85:D5:9C:55:B3:5C:6F:F4:46:5A:AA:A3:C2:D1
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       0473
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
Manifest number:          041D
Signing time:             Sat 19 Jul 2025 00:58:22 +0000
Manifest this update:     Sat 19 Jul 2025 00:58:21 +0000
Manifest next update:     Sat 26 Jul 2025 00:58:21 +0000
Files and hashes:         1: 1j3oKnWfllf48HOyUSUarme6S6Y.crl (hash: G/jKw+GTMPxGMqIVHHyq2PAjLJPCXAn2Qia+J7N9YHo=)
                          2: ABE3468CBB5611EE936F4785C4F9AE02.roa (hash: 85cGKhcFvfLsa3fKkS4OSkRQ0VqdCtjeFSWGED/065w=)
                          3: A15115E6DF3E11EC83CCFE1EC4F9AE02.roa (hash: AFhkaTS9H9SYq32LCGLZ0ybHnkII09gZHj0VVB5f314=)
                          4: 9FEE9516DF3E11EC83CCFE1EC4F9AE02.roa (hash: cotJkdbyDdnoqnW03wwLgBND9x/lhPuMs/gJ3BCR7lI=)
                          5: A09F8E52DF3E11EC83CCFE1EC4F9AE02.roa (hash: 1tRgJ3aPzibyR+z50Gw9nZnYt8M73G+bJYsVfkg2zT8=)
                          6: BA39BBAE524E11F099DE067AC4F9AE02.roa (hash: 3gyaglTVkQAZrKCW3DJx9ZXnt7qwYMNYwDnPoFgmgCI=)
                          7: F563D916248D11EF93237035C4F9AE02.roa (hash: B9+ujxo3UgWLMG+B0g5KGVMUgAJmIzvebILB++raaNc=)
                          8: 9DEFF2FADF3E11EC83CCFE1EC4F9AE02.roa (hash: K8HM6DIcOQOpn7mr5HRxJGQ+LZPGnSM+a9C5ehvgnkk=)
                          9: 86C8EBA2B12A11EF985A2D32C4F9AE02.roa (hash: 7nV+jajMliwqjNqYG+S6G7SOAx0aeStohPloUPjdM80=)
                          10: 9F598EEEDF3E11EC83CCFE1EC4F9AE02.roa (hash: ML8bUrH07kWDsJzW00Kjv/Bk94cyav3h3f9sQ1/S5a0=)
                          11: 9D13F282DF3E11EC83CCFE1EC4F9AE02.roa (hash: 4TUF4fCsd6U4sl8CKjbb5lEPYX8IdLYlZccOBdKP5o0=)
                          12: 56EC4CB4927911EFABEC2D46C4F9AE02.roa (hash: 5jFOXz91ZZ50fpVnfRxRJl436xHddATVpaygKT2CLho=)
                          13: A1FED136DF3E11EC83CCFE1EC4F9AE02.roa (hash: gOJa8cYlazWQ7UQ+EjuycM05p/sMIN86mUAHCGBMKow=)
                          14: 05163DEADD8711EC9BF56E5BC4F9AE02.roa (hash: zGN2nOJQWd9Hxkuu+Xvwm7K9HCh0xLUXhnRjE+idexs=)
                          15: 9EB0F9FADF3E11EC83CCFE1EC4F9AE02.roa (hash: BczitAlbCQvjk6wnUERPJgdefO0W2XIU7kagZ/uo8Uo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 00:58:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1139 (0x473)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: Jul 19 00:58:21 2025 GMT
            Not After : Jul 26 00:58:21 2025 GMT
        Subject: CN=687aedae-4bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:31:7a:9c:26:be:c4:6b:41:bc:78:e9:a8:95:
                    1a:d0:6f:d3:52:b8:14:74:a4:6f:fc:5b:61:b8:3e:
                    9b:f8:57:29:13:40:e3:73:27:35:ec:2e:a9:d7:12:
                    41:7c:0d:14:ec:4d:75:df:df:27:7b:69:93:9b:64:
                    1d:50:e8:96:3d:01:6e:b5:56:f6:51:d7:81:8e:d6:
                    27:e3:3d:52:c5:55:c5:a2:8f:8a:77:bd:e9:77:cc:
                    4d:f5:36:0c:18:e1:3d:b2:64:44:d1:d7:9e:0b:4b:
                    f1:84:8c:09:c9:78:a5:05:8a:e2:32:91:55:8d:32:
                    3d:cb:0f:9d:d8:8e:93:ba:df:4f:c9:08:24:44:41:
                    90:60:93:c5:80:29:0f:dc:94:da:a7:c3:70:3d:bb:
                    50:8c:50:b5:43:35:2f:0e:d7:24:13:cf:6a:57:d5:
                    e0:a2:96:06:96:4f:6d:65:dc:bc:fd:85:c8:9c:99:
                    84:87:20:01:38:0b:4f:e4:1e:f0:85:66:db:07:b7:
                    e4:fd:4c:a4:11:b8:7e:ae:e2:a5:b5:1c:8f:01:96:
                    7b:0d:5b:5e:fc:36:70:ef:a0:52:e3:dd:86:45:24:
                    ec:4f:48:dd:81:ae:6e:16:b2:07:5c:c4:6f:9f:cf:
                    66:1a:0c:2c:d3:bd:0a:5b:4a:fb:16:99:0e:2d:a3:
                    4f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:27:E0:96:60:03:85:D5:9C:55:B3:5C:6F:F4:46:5A:AA:A3:C2:D1
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:94:9f:fb:89:ed:55:0d:f4:1b:1c:fb:7d:96:35:81:00:91:
         e1:7f:ac:d0:a0:22:d3:48:7c:62:67:a6:7f:d2:23:fc:5a:4f:
         34:8a:fc:a3:1e:a1:d8:93:7a:f8:08:ee:29:b1:f4:12:f7:d0:
         2f:7b:e4:98:ce:a9:44:0c:0f:2f:98:d4:ab:2c:3e:8a:f4:80:
         8d:58:70:7f:5d:de:07:ab:25:d5:4c:64:27:5f:a2:00:58:45:
         cd:81:a9:e2:9a:47:64:60:68:3c:50:95:bd:b7:34:41:ca:fa:
         ea:e5:86:0f:8d:d5:c3:2c:ea:df:7f:07:0a:4d:22:42:42:e7:
         ce:66:5d:6f:83:03:14:58:b9:c8:f0:34:33:2a:db:47:ad:f7:
         57:dc:eb:d2:83:91:a1:cd:56:b7:0f:ea:b6:af:fc:f2:08:a6:
         f0:1f:31:00:b6:52:16:68:a9:71:d1:9f:0a:0b:84:ed:ec:62:
         72:a0:25:44:20:bf:2f:96:d0:2d:36:45:2e:3b:93:8c:9d:05:
         57:3d:2a:e4:53:78:c2:81:b9:9a:91:21:2c:ae:10:cb:c4:2a:
         00:6d:10:d1:e2:c0:5e:82:53:1f:49:8b:cd:c3:ec:fb:33:cf:
         7f:ec:02:63:8d:a6:84:a4:80:f7:63:5a:86:15:79:00:d2:ad:
         c4:71:6c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:00:25 2025 by rpki-client