Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft
File:                     38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft (raw, json)
Hash identifier:          wEJdWSDt3nAqNjoicX/jV4BX3PQeoeAwEmfgN2t6bvc=
Subject key identifier:   34:FA:78:1F:F2:C1:01:2F:5C:24:55:FD:2F:E1:EB:F6:81:99:DC:5B
Authority key identifier: DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99
Certificate issuer:       /CN=A91516FF/serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99
Certificate serial:       3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft
Manifest number:          38
Signing time:             Sat 19 Jul 2025 07:53:13 +0000
Manifest this update:     Sat 19 Jul 2025 07:53:13 +0000
Manifest next update:     Sat 26 Jul 2025 07:53:13 +0000
Files and hashes:         1: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl (hash: AdgnaDuuSi67ymCjdv9W8sOPIwinXamlSNYd0q80BYQ=)
                          2: F3CCB2C846A411F0909DA511C4F9AE02.roa (hash: WdytCQTC82Xj3l6x6W+Fu2cSc3JDJ2cKAkESsG1ZKic=)
                          3: 692243D640AA11F096F2746AC4F9AE02.roa (hash: rkd9k1u1dkPxEMEh5w+r9Bswb8IlB1n+y2yWKJIM8Tk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl
                          rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 07:53:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91516FF, serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99
        Validity
            Not Before: Jul 19 07:53:13 2025 GMT
            Not After : Jul 26 07:53:13 2025 GMT
        Subject: CN=687b4ee9-06a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:57:5f:a5:51:2b:c9:73:7c:f8:ef:c0:82:
                    c1:e9:e5:55:26:80:0e:99:55:b8:c3:64:76:ea:c9:
                    43:b3:95:f2:3c:00:a6:28:65:64:e5:b2:db:4b:69:
                    58:3c:ee:24:71:79:d9:e9:e0:2e:3c:aa:33:c2:19:
                    4c:11:22:8e:3d:25:ae:21:1d:51:83:fc:1d:0d:de:
                    63:fd:76:85:6b:48:93:30:c8:bf:83:3d:d3:b2:55:
                    72:b7:25:c8:66:54:a4:42:55:5f:7b:0b:8b:ea:74:
                    79:12:57:2d:dc:65:60:41:ee:72:16:28:2f:be:f9:
                    92:08:97:07:85:fb:77:fa:e3:3f:4c:69:c9:53:80:
                    e5:0c:14:09:c5:e9:26:bc:d1:2c:e3:f3:e4:97:a2:
                    6d:ab:96:83:41:19:cd:26:b5:04:21:0b:43:ce:55:
                    b1:1a:55:a3:02:45:ce:b0:83:17:2d:d5:c9:83:f3:
                    5d:25:25:68:6e:76:fb:40:34:7e:78:3e:5e:57:c4:
                    89:4f:23:60:9a:bb:4b:b4:51:54:d5:d5:d5:4d:5a:
                    1d:d5:e6:1f:64:eb:96:94:9a:f8:33:76:6b:af:45:
                    22:78:da:23:3f:6f:61:77:5d:2d:08:d4:93:b6:3a:
                    dd:4f:fc:98:a8:ab:5f:03:bd:39:75:49:a8:7c:e9:
                    2d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FA:78:1F:F2:C1:01:2F:5C:24:55:FD:2F:E1:EB:F6:81:99:DC:5B
            X509v3 Authority Key Identifier:
                keyid:DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:39:4f:cb:7c:6f:85:0f:b0:11:81:5a:8e:c3:91:6a:1d:88:
         8e:d7:17:9e:c4:2d:b1:c8:a6:be:82:59:d8:a5:31:20:ce:8a:
         b5:b5:6a:20:04:4e:b0:e8:10:2d:88:6f:0d:c3:fc:32:53:f7:
         a2:fb:ec:2b:ac:bc:c5:4e:ff:20:54:4c:35:93:de:43:97:a7:
         31:55:45:5f:46:57:7b:6d:9d:50:b6:cd:cb:dd:32:db:ae:9a:
         4f:b0:52:f0:92:71:61:82:34:25:dc:ce:94:22:d9:81:57:36:
         d0:05:52:95:7f:17:fd:a5:27:12:9b:4b:d6:7c:6c:28:9f:66:
         d8:9a:5c:0c:71:0d:d4:3a:05:7e:00:2f:85:9b:12:64:4a:3a:
         ca:b0:6a:4c:13:61:60:fa:9f:fa:53:8e:09:f0:aa:a0:ce:7f:
         ab:95:e6:f7:67:5b:31:38:14:a8:0d:3b:da:3f:97:ac:a5:15:
         f9:3c:ea:4d:40:82:8b:fe:03:ee:3a:0c:13:1a:26:b4:a6:e7:
         d6:d5:ec:a8:6b:ec:1e:64:ee:ca:7d:38:58:d6:ab:90:97:98:
         37:10:e1:09:31:c1:29:f7:d4:2f:1a:01:a6:54:b5:8e:07:b6:
         71:03:f0:c1:0e:7d:71:e6:15:2b:9c:70:4d:a3:06:74:e3:f9:
         e7:50:fc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:05:33 2025 by rpki-client