Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
File:                     2QhMrcO-yMIAxalrcu2v1KAOrug.mft (raw, json)
Hash identifier:          2U1AHFYWFqZiVe4gI7DSWYOrkjYtYuy7BDGuCoeWxoI=
Subject key identifier:   32:2E:3A:7F:BD:75:D1:62:E4:EC:99:8C:BC:52:EC:6E:A1:50:DB:51
Authority key identifier: D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8
Certificate issuer:       /CN=A91719F1/serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8
Certificate serial:       0268
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
Manifest number:          0261
Signing time:             Wed 23 Jul 2025 02:15:15 +0000
Manifest this update:     Wed 23 Jul 2025 02:15:14 +0000
Manifest next update:     Wed 30 Jul 2025 02:15:14 +0000
Files and hashes:         1: 2QhMrcO-yMIAxalrcu2v1KAOrug.crl (hash: mnTRM1DEW6yPoHjxy/fZpypLynPzkOavnR5RY1c9F38=)
                          2: 00724F9621F111ED93774B6EC4F9AE02.roa (hash: 1MS8BgQSeLxFZfjzI2XVs+BA1y3N2nYBN3Uvkoalvq8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl
                          rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 02:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 616 (0x268)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91719F1, serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8
        Validity
            Not Before: Jul 23 02:15:14 2025 GMT
            Not After : Jul 30 02:15:14 2025 GMT
        Subject: CN=688045b3-c702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b9:ed:77:28:9f:50:c4:7e:58:cc:63:a1:9b:
                    d9:6e:bc:d7:7e:27:d7:24:05:7b:f2:3a:67:36:95:
                    02:19:a3:ca:e6:71:20:35:c6:8a:e6:a3:48:07:57:
                    6d:05:28:fc:47:de:46:ec:2c:ba:70:73:29:24:a7:
                    62:84:9e:ca:b9:ba:3c:5f:23:42:39:2b:ba:f8:22:
                    94:84:39:22:ad:f4:25:ca:76:25:93:0b:41:59:b1:
                    e1:96:43:fe:2d:7c:4e:0b:cb:0e:3b:b5:00:61:3e:
                    ed:27:b4:51:d4:11:87:44:82:91:8b:6f:6d:53:78:
                    07:ff:fa:9c:d5:69:1d:25:cf:d8:ad:15:9c:01:b2:
                    45:1e:fd:65:83:5c:d4:cf:5f:33:c5:a9:2d:79:d3:
                    75:03:17:f7:3c:40:de:6a:4c:74:1a:8d:20:f2:b1:
                    a7:c5:3f:a2:ba:91:68:a3:6e:9d:19:28:b9:7f:a5:
                    90:41:82:9a:7b:8d:6f:95:8e:01:49:0c:74:2a:52:
                    d1:cb:c9:fd:9c:a6:96:80:75:40:c9:9d:91:04:fe:
                    f6:46:f1:b7:69:39:2c:3b:48:d0:cc:6b:04:d3:a9:
                    16:da:10:47:a7:2e:ea:b8:35:62:59:39:07:d4:b1:
                    91:a4:c4:d1:59:f3:bd:e0:68:34:28:44:24:29:14:
                    48:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2E:3A:7F:BD:75:D1:62:E4:EC:99:8C:BC:52:EC:6E:A1:50:DB:51
            X509v3 Authority Key Identifier:
                keyid:D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:d9:1e:4e:b1:c1:e6:13:ea:09:96:82:35:7c:58:a3:c1:2b:
         95:08:1d:8c:3d:e7:33:60:7f:e2:ac:28:6c:ee:f9:4c:9e:e3:
         c4:07:f2:39:16:af:d1:a6:57:66:2d:a0:33:ad:f9:e3:16:23:
         8b:b9:ca:08:db:a6:1a:fa:a1:d3:1a:f4:66:ff:bf:ad:8c:44:
         92:48:35:4d:38:a4:d3:93:15:f4:4f:78:f4:dc:78:9a:1d:af:
         14:4b:be:44:a2:1a:c5:d2:9e:6f:8e:a0:72:4b:8d:be:7f:85:
         ec:e7:99:2a:0d:c9:79:aa:e4:bf:c2:f7:16:d6:55:d1:9d:5d:
         85:c0:5e:85:47:82:88:4f:07:ca:db:ef:f1:f7:d3:c1:bf:ad:
         f7:cb:34:0f:fd:73:5f:c2:c7:11:95:b6:24:34:7a:eb:40:4d:
         dc:cf:d6:9d:44:36:2f:de:27:11:14:15:2b:e4:5c:93:d3:4d:
         0e:a2:62:d3:52:da:15:ab:97:c2:c5:7a:93:94:81:f3:3a:ab:
         a0:d0:69:fb:96:6c:fc:a9:2c:00:af:a1:55:11:85:07:bc:f8:
         5b:5b:8a:39:8f:82:c0:58:66:6e:7e:d9:48:7e:ad:ba:63:00:
         d3:b9:ad:b8:e4:ed:39:38:ce:b3:b9:ef:d1:cc:3d:dc:bc:86:
         73:cf:68:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:24:01 2025 by rpki-client