Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
File:                     4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft (raw, json)
Hash identifier:          D8Ih9TPMjanp7NGjFVz9kvUZKc+9E3irFM+zmAqjL2U=
Subject key identifier:   82:8A:AB:8B:B7:0A:84:95:D8:38:BA:1C:72:15:AD:08:32:C7:72:18
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Certificate issuer:       /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial:       2717
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
Manifest number:          26E3
Signing time:             Fri 18 Jul 2025 15:46:34 +0000
Manifest this update:     Fri 18 Jul 2025 15:46:33 +0000
Manifest next update:     Fri 25 Jul 2025 15:46:33 +0000
Files and hashes:         1: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl (hash: HaHRETzj6bBDv1BrRnLqsNsGk74jTcrGKTLUs6VFk0Q=)
                          2: 253C821A388611ECBE8F7725C4F9AE02.roa (hash: YRyAIa+9kqjeJON/+m339DSD36eJAdvbC6dlw8cArb0=)
                          3: A9756862B14111E5A3B46B15C4F9AE02.roa (hash: U5f4T1kRNce25V5lOst8kjauz0k0rUemvqRN5b7QxTo=)
                          4: 54F4ED62A4D511EA863BC00AC4F9AE02.roa (hash: zljvCYtPHGxkTjF0cJrDQGngJEaHA+QSXJeZL2Snd8A=)
                          5: BCAE5314F75C11EB95BE8C87C4F9AE02.roa (hash: 5DmpgkEHXaDkkR9mgpZabmssGePTrFoLLGp9YTKRdHI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
                          rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 15:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10007 (0x2717)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
        Validity
            Not Before: Jul 18 15:46:33 2025 GMT
            Not After : Jul 25 15:46:33 2025 GMT
        Subject: CN=687a6c5a-1c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6e:d2:0c:9f:3e:4e:cd:98:55:3d:5d:28:d8:
                    e3:d7:50:48:26:3d:7a:29:42:21:86:24:32:e1:50:
                    b6:ab:5d:a0:ca:24:71:7e:89:b3:cf:19:af:fb:39:
                    a8:ee:04:20:e6:e4:24:65:ea:47:c5:e9:be:9f:43:
                    32:c7:bb:1c:31:11:8e:25:13:6c:2e:24:e3:3d:15:
                    d7:64:6f:ac:7b:4a:25:ca:fa:0e:1a:5b:96:67:93:
                    f9:b2:d0:03:e7:9b:03:c5:ed:7d:15:2a:28:94:fd:
                    1e:21:e1:b9:af:b5:77:9e:7e:ed:26:15:28:3b:36:
                    53:59:af:51:5f:81:78:63:78:7b:48:24:cb:fb:d1:
                    43:b1:96:05:8f:bc:4f:c2:56:9e:52:98:e4:54:33:
                    07:bf:ae:54:bb:04:7a:8a:b2:70:bb:3c:7a:e0:f8:
                    f4:cd:e5:a2:64:82:30:a8:68:11:34:57:c2:32:a0:
                    0a:5e:49:ce:ad:1d:a3:10:bf:af:45:80:54:28:6a:
                    30:a9:0d:52:6c:08:7d:69:cf:a5:01:3e:4b:70:53:
                    61:42:2a:d2:76:49:f6:e1:73:aa:07:ce:f2:a7:a7:
                    57:83:1d:09:76:cd:ed:a8:ca:04:f6:65:c3:bd:8b:
                    a1:96:9d:d9:66:15:4f:68:8d:63:e7:22:8c:3a:f4:
                    13:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:8A:AB:8B:B7:0A:84:95:D8:38:BA:1C:72:15:AD:08:32:C7:72:18
            X509v3 Authority Key Identifier:
                keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:4d:70:e8:06:48:64:3a:d4:e5:eb:a9:fd:cb:d2:0b:a6:e4:
         9c:c3:5e:1c:3d:d2:0e:e1:dc:3e:e9:7c:46:fc:2c:bd:35:02:
         1c:aa:fb:57:e9:b2:88:c4:6d:7a:d2:b7:d4:6c:95:d8:7d:5f:
         87:03:67:63:43:7e:fe:9d:90:2b:b9:4a:cd:e0:36:c1:51:c2:
         d7:1c:69:76:2f:90:82:ca:80:c1:e8:26:1e:15:8c:e3:31:bd:
         50:2e:e5:52:b4:c7:60:cf:7b:82:7a:25:f5:fb:27:4b:a9:20:
         62:de:b0:71:9a:ba:9a:b5:de:58:83:1b:6b:c5:00:94:da:e9:
         4e:c0:8f:0f:0e:f9:df:59:b8:13:97:ec:f0:f6:13:34:d1:43:
         5f:a6:83:62:cf:c7:f9:0c:fb:21:d1:df:fa:16:24:c7:ce:64:
         02:07:99:b8:b6:89:c6:79:07:01:cb:ac:ce:92:6a:ba:4b:69:
         c3:d3:1b:12:ff:74:ed:f7:78:db:41:ce:d8:a6:53:80:33:b1:
         98:ca:7f:a4:0b:ab:35:f8:e3:71:39:a9:d5:dc:12:6a:24:8c:
         f5:b4:a3:0c:31:d5:8d:67:70:1a:d4:3d:6b:5c:be:28:6d:6a:
         41:5f:0e:30:81:c9:6c:2a:e2:22:8d:24:bc:c0:ab:b4:7f:a9:
         b7:ed:c2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:28:19 2025 by rpki-client