Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
File:                     p4emPknujsb5dRFgfxt8Ww3xFk4.mft (raw, json)
Hash identifier:          LCRRBH/DKhorVt38iIlzjPmHsPeo0JKnBmQOjSgm/4c=
Subject key identifier:   6E:A7:49:93:5F:54:0D:89:6D:54:39:9A:0C:EC:44:74:B3:FC:4D:C6
Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E
Certificate issuer:       /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
Certificate serial:       09EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
Manifest number:          09DE
Signing time:             Tue 22 Jul 2025 20:09:59 +0000
Manifest this update:     Tue 22 Jul 2025 20:09:59 +0000
Manifest next update:     Tue 29 Jul 2025 20:09:59 +0000
Files and hashes:         1: p4emPknujsb5dRFgfxt8Ww3xFk4.crl (hash: iaKprIBHdbkYVDGVujyn+vum2Z3lIsTgEl/ytGQV2PI=)
                          2: CFDF8B8A5B5D11EE967F161DC4F9AE02.roa (hash: PugK/HlSlwCNhEasOZjO6B/uomD7VotHJLA2wV6jZrM=)
                          3: B13B2E5A5B5D11EEADF5C61CC4F9AE02.roa (hash: hvomTHOFg3fOu5UVv4a+8zSBR7jdgf3xO/+H6ZJICO8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl
                          rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 20:09:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2539 (0x9eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
        Validity
            Not Before: Jul 22 20:09:59 2025 GMT
            Not After : Jul 29 20:09:59 2025 GMT
        Subject: CN=687ff017-85c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f2:52:6c:a9:bf:07:cd:d0:49:71:b4:84:64:
                    41:3a:50:cb:f7:cc:71:5f:75:21:3d:fa:52:0d:92:
                    7d:05:c7:a8:cb:19:18:1f:a5:9e:13:53:4d:8a:aa:
                    25:14:14:fe:d0:43:6c:9b:4a:9b:31:bd:17:92:3c:
                    2d:b3:82:c7:e1:7f:45:a1:a5:36:78:12:0a:35:f8:
                    78:e7:8b:88:50:d6:21:cd:fd:32:6b:c2:0d:de:f2:
                    c9:cd:5e:31:73:d1:0a:64:c6:41:89:7b:e1:55:f8:
                    a0:14:58:01:19:8b:f4:5d:a9:6d:16:b3:cd:11:3b:
                    50:fc:95:21:e1:71:53:35:ef:01:c3:a8:82:54:86:
                    59:2e:5b:e3:76:44:8c:70:24:e4:10:5c:68:85:29:
                    9f:b7:0f:1c:3d:59:e1:68:14:85:31:a0:10:bc:21:
                    cc:30:ff:af:79:8d:77:be:7e:e6:70:55:2b:73:4c:
                    20:c7:6f:03:b1:bf:cc:ec:31:92:5c:6a:05:8a:b5:
                    95:45:02:b2:c2:98:d4:f2:79:83:f1:57:ec:36:7c:
                    41:95:2e:9d:07:e6:cc:9e:7d:1e:55:3b:0c:b6:e8:
                    23:e6:d3:d3:d4:10:fb:be:c3:26:60:93:8b:72:49:
                    c9:e1:9c:aa:dd:2f:56:2f:78:01:c9:c5:bf:76:65:
                    d5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A7:49:93:5F:54:0D:89:6D:54:39:9A:0C:EC:44:74:B3:FC:4D:C6
            X509v3 Authority Key Identifier:
                keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b3:97:37:c2:c3:33:69:ab:cc:85:dd:59:ed:c6:a5:15:3b:
         4d:2b:4e:b9:70:1a:ea:84:a9:4e:3f:de:ab:9c:97:d2:96:43:
         a8:f0:16:7b:81:9f:9e:00:09:ab:86:c2:92:15:5a:16:c7:cc:
         0e:b4:bd:1f:d8:b4:37:ca:87:38:f7:27:8a:0c:2c:f9:ef:9c:
         ed:de:0a:93:86:44:8c:25:45:f4:21:f7:fe:81:7a:89:04:9e:
         28:5f:50:83:36:4c:9c:3a:2c:3e:fe:72:50:bc:4b:25:f2:65:
         f7:d5:d6:9e:b2:a4:7f:03:e0:ab:48:52:25:f4:48:ff:d2:5b:
         bf:7d:e9:64:01:53:ff:0b:e8:5e:e0:be:c5:55:2f:58:94:a6:
         8e:69:d7:8b:da:8f:da:00:a8:3e:e1:be:7c:17:4e:46:0d:e9:
         e4:e2:c8:f8:4c:3a:06:ca:21:cb:8c:b6:a4:f6:0e:96:c1:de:
         9a:17:c5:32:ab:2a:4a:46:33:6e:db:4e:0c:c8:73:96:34:5b:
         f4:f8:dc:4d:05:81:d3:ef:1f:85:5f:ae:b0:66:e1:1c:39:60:
         3e:2a:cd:c4:b6:25:0d:cf:52:64:68:18:7f:60:46:8e:55:a8:
         40:55:0b:94:b0:ff:36:ec:ec:79:6a:58:fe:24:42:28:9c:a2:
         42:8a:bd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 17:25:07 2025 by rpki-client