Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft
File:                     evNKJg5qKenXvIqxrCZW4Ue4iiI.mft (raw, json)
Hash identifier:          cc1tmLqr50mP175P60JfFG7oS5/EreXXugJa/YzRhyk=
Subject key identifier:   FF:26:F5:8E:60:49:5C:CA:15:91:55:8A:EC:42:A4:EC:3C:F6:B1:54
Authority key identifier: 7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22
Certificate issuer:       /CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22
Certificate serial:       0232
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft
Manifest number:          0213
Signing time:             Wed 23 Jul 2025 02:42:18 +0000
Manifest this update:     Wed 23 Jul 2025 02:42:18 +0000
Manifest next update:     Wed 30 Jul 2025 02:42:18 +0000
Files and hashes:         1: evNKJg5qKenXvIqxrCZW4Ue4iiI.crl (hash: h3V+JTD4SrTMGeB3z3rbF3hJ1n1hqMWQxDmGciTK/+k=)
                          2: A1740AE6F44A11EFBDAE4F7BC4F9AE02.roa (hash: zcojx0ZkQFta/eHlUHGOuBKvCSA32o0JspTRYlkMoDI=)
                          3: 881750D0E04511EF8BD5FA0EC4F9AE02.roa (hash: PAN71XRdBizmCnmbth6bc3U7C1SlwCeBKZgyo5Yoesk=)
                          4: 870547C4E04511EF8BD5FA0EC4F9AE02.roa (hash: ercDyfbZZj81eG2rt4VTnpYu27D4sWw7nv/fhjhfp3g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl
                          rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 02:42:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562 (0x232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4D1F, serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22
        Validity
            Not Before: Jul 23 02:42:18 2025 GMT
            Not After : Jul 30 02:42:18 2025 GMT
        Subject: CN=68804c0a-a3bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:26:b8:7e:fb:94:a7:08:8e:4d:f2:b6:34:68:
                    47:70:33:28:8d:b1:f0:b5:0c:bd:e6:cf:4e:55:a8:
                    b0:04:01:88:44:15:a4:d7:92:74:0f:76:ea:cc:4f:
                    44:07:06:ca:77:53:7c:a9:5c:c0:86:7c:1f:03:71:
                    88:a5:d9:c3:6f:f1:59:76:29:8f:2d:a8:04:2a:7a:
                    5b:9f:91:76:9b:4c:76:bd:ae:e6:98:e0:37:73:03:
                    cd:c9:f0:dc:c6:88:fe:0b:e2:8e:fc:88:cf:d4:1b:
                    4d:fb:31:f8:ef:ef:f1:fc:22:bc:51:d4:bc:71:3e:
                    95:52:97:98:bc:3a:3b:e4:be:fe:ec:55:66:1b:ff:
                    66:2b:bd:70:ad:cd:47:0d:6f:cb:da:5f:cf:a2:3f:
                    d8:ed:65:5b:5a:fb:59:93:2a:7b:80:25:88:b5:fb:
                    dd:d5:5b:3e:b7:7e:4f:a6:5e:e8:c4:6f:2b:a5:23:
                    00:4f:45:73:37:0b:2d:ac:66:9e:14:34:8d:a1:e8:
                    8b:e2:54:25:49:cb:0c:11:69:c7:55:8c:56:4a:5f:
                    3e:2b:72:86:5d:dc:52:15:11:e8:d5:27:14:1d:37:
                    d8:36:2b:ec:11:0e:73:96:0b:e5:a5:35:ae:88:11:
                    19:13:66:7f:c4:87:57:68:43:7c:59:19:39:bb:20:
                    e9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:26:F5:8E:60:49:5C:CA:15:91:55:8A:EC:42:A4:EC:3C:F6:B1:54
            X509v3 Authority Key Identifier:
                keyid:7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:45:83:43:ef:14:12:a5:04:d3:db:0c:03:ff:7c:aa:a8:f6:
         aa:fc:c2:ac:74:43:34:77:d1:fa:d1:60:8a:31:d5:41:29:e8:
         39:8c:17:5b:94:15:33:76:ec:d1:d5:a4:bf:2a:a2:ad:5e:97:
         9c:fa:48:de:88:e1:2b:55:d2:6c:88:f8:f4:bb:9c:6f:9d:e3:
         01:ba:6e:a6:50:66:7b:61:d0:ec:80:dd:56:fe:36:b6:ee:39:
         a9:f7:d0:f5:82:ae:42:af:27:9f:9d:74:8c:36:7f:a0:13:d2:
         b2:e7:d1:c0:22:83:a1:75:37:20:02:f6:ba:f3:ff:db:b3:89:
         9d:70:3a:c2:fe:16:37:c8:4b:7a:7e:58:18:89:86:a5:27:87:
         73:a4:33:9f:af:05:07:fc:f0:30:9c:53:fd:fe:91:49:bb:f5:
         f0:ed:74:90:4b:22:f2:f0:29:69:60:e4:ce:81:79:fb:3f:f5:
         c6:69:cb:7a:d1:a6:ab:0a:a3:db:40:0b:c3:e3:c2:ef:34:29:
         61:88:11:fb:c9:0a:68:a6:dc:69:9b:54:37:74:8c:b9:c4:e1:
         68:3a:49:c0:23:4d:0b:ca:42:b0:a1:7a:81:6a:a9:12:bc:5e:
         b2:d5:75:bb:12:6e:98:59:bc:c7:1e:97:18:00:9d:a7:4a:0c:
         ec:d1:29:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 08:26:12 2025 by rpki-client