Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
File:                     h_lY2vSYZZqe7g_xRCJrFxBIneA.mft (raw, json)
Hash identifier:          Jr6kzBJNXL0CE+uhE5KJ5pGBc/V0oiJIBTjZcs8E7L4=
Subject key identifier:   EF:D7:36:6F:FC:22:0A:24:CA:F4:B9:3E:E8:D1:62:A4:CA:FD:6F:EF
Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
Certificate issuer:       /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Certificate serial:       03AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
Manifest number:          03A1
Signing time:             Sat 19 Jul 2025 01:13:19 +0000
Manifest this update:     Sat 19 Jul 2025 01:13:19 +0000
Manifest next update:     Sat 26 Jul 2025 01:13:19 +0000
Files and hashes:         1: h_lY2vSYZZqe7g_xRCJrFxBIneA.crl (hash: WT0U0PMtPHInUzQpfpbPHH7giTDieb1g6opQWF49lqc=)
                          2: 8DB35F6A766511EF8820F844C4F9AE02.roa (hash: DUjlMecJ3MCBuCiDf6r0BnVvRVnuDf5vmODbFKyvDAA=)
                          3: 8C5D4FF4766511EF8820F844C4F9AE02.roa (hash: a/GUffZHyYeIWzCyqNA7Fc/IgTrpVgmYYpvH+uBkGnA=)
                          4: FFF8A36A34E311EE877E760DC4F9AE02.roa (hash: Td4Qw51TSr10UgTmfhROy8qSBPdrA5ySYZaY11oYN0U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl
                          rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 01:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 943 (0x3af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91354AE, serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
        Validity
            Not Before: Jul 19 01:13:19 2025 GMT
            Not After : Jul 26 01:13:19 2025 GMT
        Subject: CN=687af12f-70a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:14:84:a2:83:13:5c:47:9d:13:8d:fa:11:ab:
                    d5:b1:bb:36:78:02:20:f1:8a:f0:3d:88:f9:e6:8c:
                    62:01:15:1e:dc:44:d5:45:52:56:c8:4b:86:e0:4c:
                    ec:90:ea:c8:99:c2:ab:55:c0:12:b7:55:d7:81:96:
                    b2:b4:7e:c1:fb:5d:73:35:32:17:20:3b:80:28:10:
                    34:02:1e:c6:ee:d2:49:79:12:41:ba:69:54:d6:d6:
                    2c:03:3d:f1:5f:a5:d0:aa:b8:b2:a1:d2:0f:4c:08:
                    ca:40:ed:50:f4:33:a9:63:6e:87:23:48:06:14:b2:
                    bf:c1:03:82:c5:79:08:cb:82:c2:45:e9:70:4f:19:
                    ad:6e:b6:02:d8:12:a1:a8:bc:66:43:98:80:d9:10:
                    c4:62:5a:b1:57:d9:3c:e7:4c:f8:5a:c4:2b:9e:be:
                    f8:9f:e0:49:aa:61:79:af:b5:ac:22:40:48:37:20:
                    a1:fd:b8:3a:b5:2a:0e:87:e5:ab:b1:62:fa:39:3e:
                    8b:2c:df:df:f1:b4:38:89:2f:33:3b:fc:8f:5f:a0:
                    3c:42:d9:3e:b9:02:05:3b:89:97:9e:37:70:70:5c:
                    6c:d5:71:af:51:53:91:ee:34:85:a8:92:66:a3:7b:
                    9b:d0:47:cb:87:dc:78:b1:f1:d8:bd:c3:d7:59:88:
                    a3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D7:36:6F:FC:22:0A:24:CA:F4:B9:3E:E8:D1:62:A4:CA:FD:6F:EF
            X509v3 Authority Key Identifier:
                keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:f2:6a:a3:fb:8a:f0:6e:ec:de:b1:ee:0b:b1:dc:1a:a7:63:
         2b:97:3b:24:95:e2:4d:e8:3f:61:17:30:27:cd:b8:e7:a2:5b:
         69:07:d7:5b:33:e1:ff:4f:62:8b:60:6c:a9:5e:41:fd:a9:63:
         b2:e6:ed:67:ca:28:f6:6e:90:06:4a:0e:31:b0:71:60:4e:03:
         0d:07:06:33:b9:b5:c5:a5:2b:06:7e:ad:1c:de:75:62:63:83:
         f1:ff:c1:61:62:20:e3:2a:4a:b2:a7:99:b7:eb:af:d8:ee:89:
         1d:2f:fa:0d:f0:97:27:7a:d4:95:94:11:8d:da:af:51:61:f8:
         d2:1f:ba:71:67:d3:0f:56:1f:ba:05:f9:9f:19:17:81:3a:39:
         97:6c:e1:bd:1e:4b:d3:ec:8a:97:0f:00:e3:ed:eb:66:e4:b4:
         0f:ea:9b:42:3f:b2:b1:07:e6:fb:d6:c8:b0:73:22:45:38:c8:
         30:86:d5:7d:eb:7f:62:ad:c3:ed:22:1d:91:29:34:5c:1d:06:
         98:f3:5a:e8:c7:76:4e:b9:24:d5:5b:d8:0e:6e:b0:14:b5:d2:
         bf:4a:3e:17:b3:22:33:65:d0:01:b4:1e:77:5f:48:f6:f0:46:
         da:0c:07:3d:53:ce:7d:ee:bc:e9:63:29:00:6b:94:3d:62:01:
         37:d8:35:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:23:19 2025 by rpki-client