Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft
File:                     evNKJg5qKenXvIqxrCZW4Ue4iiI.mft (raw, json)
Hash identifier:          K3/3mnotyH69li4znt7OxxuqIpinSPxef0oWMFmTd0k=
Subject key identifier:   D6:FE:F6:37:60:B5:7E:F2:87:EB:7F:31:91:5D:22:6C:A9:72:AC:3C
Authority key identifier: 7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22
Certificate issuer:       /CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22
Certificate serial:       0231
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft
Manifest number:          0212
Signing time:             Mon 21 Jul 2025 02:32:00 +0000
Manifest this update:     Mon 21 Jul 2025 02:32:00 +0000
Manifest next update:     Mon 28 Jul 2025 02:32:00 +0000
Files and hashes:         1: evNKJg5qKenXvIqxrCZW4Ue4iiI.crl (hash: eNIeUI3ErAQeJAOmROom0HVzGCmf067FGIfruziZKcM=)
                          2: A1740AE6F44A11EFBDAE4F7BC4F9AE02.roa (hash: zcojx0ZkQFta/eHlUHGOuBKvCSA32o0JspTRYlkMoDI=)
                          3: 881750D0E04511EF8BD5FA0EC4F9AE02.roa (hash: PAN71XRdBizmCnmbth6bc3U7C1SlwCeBKZgyo5Yoesk=)
                          4: 870547C4E04511EF8BD5FA0EC4F9AE02.roa (hash: ercDyfbZZj81eG2rt4VTnpYu27D4sWw7nv/fhjhfp3g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl
                          rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 02:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 561 (0x231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4D1F, serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22
        Validity
            Not Before: Jul 21 02:32:00 2025 GMT
            Not After : Jul 28 02:32:00 2025 GMT
        Subject: CN=687da6a0-26be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c8:8d:1d:2d:12:b2:bf:85:89:c5:cd:93:3d:
                    18:01:3d:7e:df:10:ab:3d:5c:c7:ef:b2:80:29:5d:
                    fc:4e:ce:ed:6c:37:bb:9f:d9:7b:fb:43:8a:40:8e:
                    f5:c2:34:cf:93:dc:a4:d9:48:bf:47:ec:83:2b:20:
                    a0:dd:e3:d7:94:ec:bf:2c:19:26:ca:cd:4e:f7:0c:
                    f1:91:ed:94:6b:c5:2e:48:4c:e9:7b:3a:22:9f:99:
                    66:b9:30:c2:18:76:e9:ac:ac:bd:8b:72:07:35:66:
                    bc:42:e9:be:c4:23:c9:c2:76:75:66:93:9c:34:b8:
                    13:87:f3:29:79:5b:8b:bd:a7:17:89:72:27:6a:38:
                    66:e3:74:f7:81:f3:c7:1b:3c:44:2d:a8:0c:02:6d:
                    fe:ae:a9:01:9a:2b:58:0d:9d:ed:d4:82:da:40:2f:
                    ba:9a:b0:78:7c:f2:24:08:6e:25:2c:8e:09:03:21:
                    ae:c1:d0:93:55:47:ff:61:7a:dc:5d:0f:50:b1:04:
                    0c:6a:9c:b8:33:8b:b3:47:39:32:c4:f9:37:79:51:
                    95:da:6b:75:37:96:1d:49:f9:b6:e3:9a:5a:a7:7e:
                    f5:8e:55:d1:f8:b6:aa:47:05:75:b6:78:a3:31:87:
                    46:6b:55:6c:c0:59:10:a2:97:46:9e:18:ee:0f:7f:
                    22:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:FE:F6:37:60:B5:7E:F2:87:EB:7F:31:91:5D:22:6C:A9:72:AC:3C
            X509v3 Authority Key Identifier:
                keyid:7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:d9:4f:85:9f:2c:c5:d6:26:5b:0a:2d:5c:32:41:9b:42:f9:
         51:c5:c2:ad:be:be:df:da:1b:91:ca:79:f8:15:dd:8c:51:8f:
         3d:aa:26:e4:88:c2:19:86:1f:7c:3e:22:f0:c2:32:e3:f7:e7:
         df:dd:30:d6:30:07:cd:3f:c4:19:a5:9c:dd:83:1f:ec:6a:da:
         81:f4:45:75:84:25:ea:98:92:53:18:e0:2b:81:90:48:95:fc:
         5e:e8:37:ed:03:fc:b2:16:96:2b:7b:bc:a3:5d:d6:1d:60:d9:
         c6:81:e5:fc:63:31:83:c6:12:1d:a0:8a:f7:d6:95:57:2c:6f:
         68:09:7b:88:45:cc:58:dd:9b:af:ae:ad:96:20:f6:72:06:bd:
         15:72:ee:db:5d:40:83:30:a5:88:8d:a7:43:c2:ab:d0:b7:c2:
         70:e9:8c:df:65:ce:8f:56:42:1e:07:a4:2b:2f:f7:13:be:7f:
         4a:0c:31:04:40:58:ef:17:ee:f3:04:20:59:58:65:be:77:d0:
         a2:eb:a7:36:ae:c8:53:96:dd:66:c6:92:69:57:aa:e4:71:c4:
         77:62:b3:c5:ba:5c:32:6d:c8:b0:2e:48:cd:32:f7:89:d8:7f:
         c1:49:be:8f:7e:18:a4:23:22:da:ec:cf:fc:eb:a5:cf:47:63:
         8e:d1:56:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:14:59 2025 by rpki-client