Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
File:                     T191psKYj1i2AwEqjbRFofN9XXI.mft (raw, json)
Hash identifier:          fb1oNDaw7Inx2sIcufXDSwHudqYssxDPNgZIsHSSO2U=
Subject key identifier:   A6:BF:FB:DE:FE:DC:A7:9C:AE:9C:59:A8:13:66:2A:16:F7:8A:44:E7
Authority key identifier: 4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
Certificate issuer:       /CN=A914C3FB/serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
Manifest number:          48
Signing time:             Sat 19 Jul 2025 07:49:37 +0000
Manifest this update:     Sat 19 Jul 2025 07:49:36 +0000
Manifest next update:     Sat 26 Jul 2025 07:49:36 +0000
Files and hashes:         1: T191psKYj1i2AwEqjbRFofN9XXI.crl (hash: XQ2whovKeYeP/gHWMVEUOquJWqpj8WcPEPFbRoB9IRY=)
                          2: 41E7BB1C0BA211F08457541BC4F9AE02.roa (hash: SLWKUoxyCCrW041ENZCKTkuF3OJqQTSoY0CsLhDIP04=)
                          3: 850942E4325311F081E87832C4F9AE02.roa (hash: YKfa7XcZECRGtp0hZwgH99jMIjA/4Bdgt+cMhZRSKcQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
                          rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 07:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C3FB, serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
        Validity
            Not Before: Jul 19 07:49:36 2025 GMT
            Not After : Jul 26 07:49:36 2025 GMT
        Subject: CN=687b4e10-c737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5f:f3:82:db:2c:25:2c:78:18:42:70:bf:93:
                    31:d9:f8:d0:2d:83:92:f4:bf:ab:cf:03:de:0f:db:
                    15:3f:a3:93:60:a8:d6:39:9c:17:2d:53:97:2d:11:
                    ad:20:08:d7:c6:6d:17:2f:bb:f4:2f:0f:07:83:63:
                    7b:8f:68:51:4e:12:95:59:c5:d6:36:b6:eb:1f:4f:
                    27:5f:f1:49:2f:48:25:7a:85:60:91:d7:c3:83:24:
                    36:7e:21:ea:78:11:41:4d:c4:d7:26:5f:e3:b8:bb:
                    18:48:2b:18:25:ca:67:b9:69:61:a0:6b:81:de:d9:
                    d9:87:c6:d8:f2:2a:ae:9d:6b:94:d1:90:b2:19:f4:
                    9e:0c:31:f1:ba:39:3d:6d:4b:8c:41:95:77:63:91:
                    da:04:fc:31:24:05:ee:3c:4c:04:c6:36:a1:ef:bb:
                    3f:eb:c1:97:34:12:02:31:42:5f:0a:84:9f:ef:99:
                    1d:26:12:b4:d5:0a:53:09:ad:c9:c3:53:2e:f3:3f:
                    7f:52:cd:97:5f:28:81:43:ef:ca:fe:07:55:a6:3c:
                    95:89:f0:5a:2b:1f:75:7f:a6:54:e4:a1:60:a2:0c:
                    4f:3b:77:fe:af:3f:a5:3b:a6:aa:b9:00:37:56:e3:
                    0e:8a:da:ed:77:5a:77:48:9e:29:2a:ad:6a:a4:8b:
                    64:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:BF:FB:DE:FE:DC:A7:9C:AE:9C:59:A8:13:66:2A:16:F7:8A:44:E7
            X509v3 Authority Key Identifier:
                keyid:4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f1:94:31:7c:6f:45:a7:c8:6e:13:8f:be:ba:ea:40:67:39:
         d0:e3:20:f2:69:5a:0a:b9:22:29:df:7e:0e:62:ec:b3:a5:db:
         01:e0:14:81:5e:42:bc:0a:a6:99:3d:0b:9f:04:83:a8:db:e4:
         a4:db:e1:0b:78:db:4b:ea:b9:72:7a:bd:55:64:3c:15:b9:08:
         6f:98:26:e0:1f:5c:94:70:77:9f:ee:0b:96:51:4d:c7:10:2b:
         23:70:c7:48:23:4a:a0:57:39:a1:f5:6f:3b:92:7f:09:57:4d:
         a8:eb:83:75:17:28:ae:54:ff:69:c8:7e:77:54:95:7e:c6:0c:
         45:6b:e7:d8:e1:19:31:30:47:da:f1:8b:7e:99:5a:3f:b3:47:
         df:89:dc:b0:fd:d8:a1:57:68:de:25:ea:bd:d3:1c:c5:7f:12:
         ce:0f:ae:61:01:06:42:64:aa:76:28:21:61:03:b4:64:9b:61:
         1a:7a:29:0b:da:28:74:b1:35:d5:46:93:0c:c0:3a:d0:89:ae:
         5b:c4:a2:13:e8:9b:cd:46:d5:8e:6f:2f:24:72:bf:0c:2e:ab:
         e7:68:5c:3a:25:c7:9c:1c:5f:fb:50:10:4e:82:66:ab:9b:3e:
         07:b4:28:4e:40:0d:77:93:7b:db:c9:5e:63:b5:99:25:d6:b9:
         19:00:73:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:37:26 2025 by rpki-client