Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
File:                     KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft (raw, json)
Hash identifier:          mXQoq8Kavpk4DFyIRZazyGk+IokPGFz+7W6cighdZ8Q=
Subject key identifier:   81:F5:16:1A:4B:7F:69:90:E8:28:53:0C:8B:D1:F7:AC:03:2A:70:B8
Authority key identifier: 28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A
Certificate issuer:       /CN=A91A308F/serialNumber=28682EC723CCE336185B33302013FF0060DDE09A
Certificate serial:       0A45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
Manifest number:          0A3E
Signing time:             Tue 22 Jul 2025 19:59:05 +0000
Manifest this update:     Tue 22 Jul 2025 19:59:05 +0000
Manifest next update:     Tue 29 Jul 2025 19:59:05 +0000
Files and hashes:         1: KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl (hash: aUcDIhsuTB5mXTlsQ5AGOI4t5yyp4seGAZNCJrWDTRI=)
                          2: 6303AF646F8911EA92087E39C4F9AE02.roa (hash: MlTCpmNvZBXbaN3j5f/1p2NogI1xqgj2n12XSV4tPcU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl
                          rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 19:59:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2629 (0xa45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A308F, serialNumber=28682EC723CCE336185B33302013FF0060DDE09A
        Validity
            Not Before: Jul 22 19:59:05 2025 GMT
            Not After : Jul 29 19:59:05 2025 GMT
        Subject: CN=687fed89-d423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:50:7c:13:92:fc:68:06:d6:6b:3a:1c:3b:6c:
                    c6:cf:67:cc:c7:72:73:e5:32:29:95:c3:45:8d:10:
                    3b:87:bb:1b:51:24:a2:19:98:23:38:63:2f:a2:78:
                    2d:c9:0a:6d:21:7a:32:fc:6c:07:e5:2a:c1:59:fa:
                    08:1e:b2:dc:d7:ff:ed:85:8e:89:f9:61:2d:15:06:
                    c8:37:52:d0:ca:2a:0c:bd:06:79:f4:95:d6:bc:1f:
                    fc:61:cc:01:31:ac:53:09:d2:91:f8:47:bb:26:3a:
                    d9:6f:00:78:e5:8e:ea:94:5b:5e:cb:80:7e:c3:89:
                    24:60:b4:14:32:c1:72:3a:29:27:e6:cb:c5:72:d3:
                    60:65:78:7f:08:6e:e4:9f:9c:51:41:75:b3:b7:0e:
                    1c:00:c7:3a:7b:fb:f2:f3:83:59:a8:a3:e6:7a:f9:
                    aa:e0:99:5a:33:e6:f0:bb:36:95:d2:53:32:01:ec:
                    dc:9c:e7:71:48:fe:32:a9:4f:e5:56:a9:ae:82:6c:
                    b8:2c:78:09:87:c2:29:3d:72:1e:b0:b4:3b:1d:32:
                    2e:c8:17:1c:d3:70:60:79:f6:e0:10:8d:0c:f7:e0:
                    bb:29:09:82:70:f5:22:d6:0c:35:f2:31:c4:52:97:
                    b3:ce:d0:94:9e:cf:4e:87:ff:30:43:1e:18:a6:64:
                    42:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F5:16:1A:4B:7F:69:90:E8:28:53:0C:8B:D1:F7:AC:03:2A:70:B8
            X509v3 Authority Key Identifier:
                keyid:28:68:2E:C7:23:CC:E3:36:18:5B:33:30:20:13:FF:00:60:DD:E0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KGguxyPM4zYYWzMwIBP_AGDd4Jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A308F/B9B3445C6F8711EA93A9F933C4F9AE02/KGguxyPM4zYYWzMwIBP_AGDd4Jo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:22:63:03:19:7a:4c:b6:a8:11:92:df:43:c1:d2:73:02:bd:
         be:9c:d3:83:9c:68:7b:4c:2d:ce:df:d8:af:48:83:98:e4:19:
         e8:3c:ce:93:f7:36:58:f3:6a:4a:e2:cd:c6:7f:74:bb:2a:57:
         68:94:60:d4:1f:45:d1:3d:df:42:55:46:db:ee:bd:2a:22:82:
         64:b4:5c:1c:93:f3:e2:66:56:c1:28:54:52:7c:f8:8c:48:88:
         40:25:68:58:30:f4:ba:dc:52:fb:cc:df:0d:4d:d7:78:10:39:
         a8:bb:b1:e5:12:5a:e2:a0:7b:c4:b5:84:49:d7:10:76:bb:80:
         f8:1a:9e:a7:d5:89:1f:ca:a2:69:a9:c6:3e:1a:cc:d4:5c:cc:
         28:7f:b6:d8:00:5e:21:3b:18:3f:9a:72:69:7b:e4:17:b9:3d:
         b4:33:28:c4:5c:4c:61:d5:9e:03:d2:d6:68:57:b7:52:f7:fc:
         d0:18:ba:73:2a:91:c1:96:2c:84:ba:1d:33:04:2d:d9:aa:b9:
         6d:1d:2a:6c:a7:73:80:31:bd:1a:65:ad:59:42:40:c5:a2:66:
         49:84:c1:11:e9:9f:d3:40:38:a6:11:82:9c:42:96:77:80:5d:
         96:6e:8c:79:b6:dd:cd:a6:51:a8:c0:da:6a:24:66:f3:bf:7e:
         37:8a:56:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:11:13 2025 by rpki-client