Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft
File:                     5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft (raw, json)
Hash identifier:          YK2dIjOjUy00PrdxDO6jEB+ox/LbdxTvFX8UzIdfOa0=
Subject key identifier:   F9:94:22:01:64:BB:93:2F:64:14:49:6A:F1:75:07:D1:44:9B:FA:61
Authority key identifier: E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E
Certificate issuer:       /CN=A91A7169/serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
Certificate serial:       010F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft
Manifest number:          0103
Signing time:             Fri 25 Jul 2025 05:28:15 +0000
Manifest this update:     Fri 25 Jul 2025 05:28:14 +0000
Manifest next update:     Fri 01 Aug 2025 05:28:14 +0000
Files and hashes:         1: 5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl (hash: 7eAOFw9OWpjPSH4DaV1LijOvJiR/2lP9O0RQVWmOScI=)
                          2: 6C8EAC7A195F11F08408FA45C4F9AE02.roa (hash: y8NFG110fY2dzWel2wKPfGTIBB3jTVOPTk+nGisVEaM=)
                          3: C27C0758916B11EF81BBB521C4F9AE02.roa (hash: qo13gcRt8b6k3eRhQ7EnkeeOd2FZ3ZVd7mOuIi+0V40=)
                          4: 6D3C9D30195F11F08408FA45C4F9AE02.roa (hash: xu0YRL3l/FdpKJVNad5TNsuZBdZm5q4QLiwflT1FIPg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 01 Aug 2025 05:28:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7169, serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
        Validity
            Not Before: Jul 25 05:28:14 2025 GMT
            Not After : Aug  1 05:28:14 2025 GMT
        Subject: CN=688315ef-f678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fa:6c:e5:e8:ee:ac:34:4c:7f:b9:83:1e:0b:
                    3b:32:18:bf:5e:bb:50:c9:0c:31:e0:ed:2d:44:60:
                    d6:a1:85:08:c9:9e:31:18:e9:6d:28:f6:58:db:0f:
                    ae:ad:b8:40:30:9b:13:ed:e7:f6:80:5b:f4:2f:53:
                    3b:76:76:3d:bb:d8:1b:00:60:8c:2a:a8:6b:1b:55:
                    43:4d:5b:5a:85:d2:1b:70:b3:2f:fe:6b:0c:28:96:
                    d4:a0:2c:f3:22:6e:f6:ec:67:55:ef:f3:83:8f:79:
                    5e:f7:44:8e:0f:af:dc:07:49:f5:86:71:7a:c2:cf:
                    30:b5:d7:a0:d9:d8:5c:ea:ae:64:10:36:3e:d3:1e:
                    fd:5e:a6:88:cc:1c:39:a8:fa:50:cb:13:a8:d7:c2:
                    09:55:4c:de:43:65:78:25:24:26:3d:78:08:47:45:
                    d3:00:da:83:6e:98:0b:78:de:0f:ca:55:46:5b:62:
                    b6:16:16:d7:df:e2:66:72:12:5e:1f:57:a5:f0:94:
                    90:94:3c:6a:b8:74:6d:f0:c5:95:b4:ec:dc:de:bf:
                    e7:6a:d0:5b:06:50:f0:06:bd:c8:ae:df:0f:03:32:
                    b7:10:fc:f0:2e:a4:b8:9d:21:d4:ab:f7:16:6e:ed:
                    ef:27:29:9d:e6:6d:32:33:3e:e3:57:87:37:9a:f5:
                    d2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:94:22:01:64:BB:93:2F:64:14:49:6A:F1:75:07:D1:44:9B:FA:61
            X509v3 Authority Key Identifier:
                keyid:E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:2f:91:89:b7:a2:a2:51:51:18:77:2a:db:60:7c:35:65:51:
         6f:6e:e3:1f:f1:b5:f4:16:3e:8b:9c:c5:0a:21:4f:1c:15:46:
         44:e3:e3:a5:2c:29:ef:d4:50:5f:78:e4:33:dc:25:6b:03:2d:
         7d:ac:f5:40:be:17:93:46:fd:1a:5c:98:e5:17:7a:d0:b4:52:
         eb:c9:b0:f5:70:2a:0b:63:a3:99:57:d0:10:ed:4a:be:9a:de:
         7d:50:db:76:aa:32:fe:ac:23:e4:2e:72:79:89:92:e9:b3:9a:
         c3:69:49:ef:69:f6:25:d2:83:4a:63:cb:8c:4c:5e:c6:6e:e5:
         10:96:06:47:c3:b5:60:f8:33:ab:8c:04:a5:95:35:18:85:e3:
         11:89:a2:3d:5c:39:10:f4:9e:69:16:a0:65:c8:c1:dd:c7:58:
         77:e5:88:df:ba:80:6e:45:95:89:f5:9a:93:08:40:82:ff:12:
         0d:5a:99:64:3c:7a:24:96:3d:f6:dc:1d:6b:33:fb:b8:fc:0f:
         25:5e:62:7c:e4:fd:b6:2e:bb:fa:18:c4:0b:0a:88:78:4f:8f:
         a5:59:9b:67:16:e3:5b:f3:b1:cf:12:b7:c7:b1:13:ff:ea:2c:
         9c:e2:e8:b9:0a:a9:38:7c:c3:77:83:0f:ca:a3:94:0c:5c:3f:
         c2:23:48:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 02:02:44 2025 by rpki-client