Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
File:                     rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft (raw, json)
Hash identifier:          OFnXXoXJurqhSZLsQlYqwXf/vW25OuW6kWyjv8DR93c=
Subject key identifier:   DE:61:4D:E0:9D:19:7D:4A:75:3C:46:34:A6:4E:C2:42:E4:1F:04:95
Authority key identifier: AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2
Certificate issuer:       /CN=A91A85A8/serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
Certificate serial:       04E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
Manifest number:          04D2
Signing time:             Sat 19 Jul 2025 00:10:59 +0000
Manifest this update:     Sat 19 Jul 2025 00:10:58 +0000
Manifest next update:     Sat 26 Jul 2025 00:10:58 +0000
Files and hashes:         1: rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl (hash: DVRudEMJLFOm3pJgfyeXj7s+dM2BD4ZH0YAVNuITPCg=)
                          2: B016290E2CE211EC8664D47EC4F9AE02.roa (hash: N+v5XDTe3qGrc3Im5miqpHu358OzdQqGsyKCPQ1e/9E=)
                          3: 14172F4C264311EEB0342B45C4F9AE02.roa (hash: Ugkrxpmo+RhmzNNOs4CXnhFZe2ur3HMxWdH+GOY5OTg=)
                          4: 8C2F1C96367F11EEB689C243C4F9AE02.roa (hash: NMuBSgtK/HkuND8tStUDe+Ag9eP8OhZhvhWqets1kM8=)
                          5: AF91ADB42CE211EC8664D47EC4F9AE02.roa (hash: vVCpAMW7qiQGHNF6JhfNX4AfCfOmlSNmnkvMLMOZ1EI=)
                          6: AEFA3DD02CE211EC8664D47EC4F9AE02.roa (hash: sOUIWYOFE2CSPs3Drpz/bEhxmM04l8k3SIDOG1UW16M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl
                          rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 00:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1254 (0x4e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A85A8, serialNumber=AE0A0F98A0903E015E5FC54CB8CE081D424DB4D2
        Validity
            Not Before: Jul 19 00:10:58 2025 GMT
            Not After : Jul 26 00:10:58 2025 GMT
        Subject: CN=687ae292-0a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:70:f6:af:06:0b:c5:89:ed:14:df:d6:8b:4f:
                    cb:2a:d7:cb:56:25:d2:d7:60:7f:ca:dc:a4:75:f5:
                    2d:96:c5:b7:a3:c1:86:42:96:bd:7f:22:28:1a:19:
                    8d:2f:33:fb:a2:e0:44:24:19:e4:13:20:6f:a4:53:
                    a6:d0:65:c8:97:c7:c4:9d:39:fd:f7:f4:bc:17:84:
                    5d:7b:8d:f9:ad:fa:08:84:c0:9c:5a:3f:c8:57:bb:
                    a6:31:30:dd:6a:b0:0e:fc:af:91:77:9a:09:e4:41:
                    d7:55:3f:28:d9:5b:ee:4f:3d:e9:f4:21:85:ec:ae:
                    ca:59:55:4e:a3:5f:a0:87:6d:5a:3a:8b:e9:43:64:
                    54:a4:4b:97:d4:a6:54:a0:53:ec:69:a0:c4:36:d0:
                    a3:37:84:1c:ef:e9:e3:6b:c8:b6:c1:fa:a7:a5:47:
                    a4:3d:08:18:3d:af:8d:0e:3d:b9:3d:97:11:db:ea:
                    2a:96:61:d4:11:a0:30:5e:f9:be:98:d9:59:fc:ed:
                    26:e0:e2:34:82:69:ae:c3:d2:c1:d0:8a:17:a1:0c:
                    bc:7c:fc:b8:34:a4:35:68:c5:e3:db:cb:a5:06:44:
                    08:a3:8e:18:b5:82:c0:93:d7:c7:b9:35:d5:b0:4e:
                    20:92:6c:73:e3:38:f8:1b:76:a5:5b:26:a8:89:19:
                    02:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:61:4D:E0:9D:19:7D:4A:75:3C:46:34:A6:4E:C2:42:E4:1F:04:95
            X509v3 Authority Key Identifier:
                keyid:AE:0A:0F:98:A0:90:3E:01:5E:5F:C5:4C:B8:CE:08:1D:42:4D:B4:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgoPmKCQPgFeX8VMuM4IHUJNtNI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85A8/A53081462CDE11ECAA6FE678C4F9AE02/rgoPmKCQPgFeX8VMuM4IHUJNtNI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:85:98:bd:a8:6c:37:2a:c6:f7:e9:28:2a:a3:c7:53:bd:53:
         2d:0b:75:d9:b8:89:bf:14:d6:74:b5:2b:81:e2:4a:83:2f:a7:
         93:6e:fc:9c:eb:0b:7b:f6:ee:56:d0:44:20:cf:a5:c0:04:ec:
         9e:1b:1e:ab:5d:a2:40:bc:dc:5b:ee:4e:b7:ce:63:5c:2d:54:
         c1:c5:66:8c:b6:0d:4b:a0:ae:1f:aa:f8:b6:ec:32:0a:bc:a1:
         c0:39:7a:a9:8d:f0:27:55:73:5b:96:5d:c9:4a:31:46:a9:7d:
         aa:7a:52:3d:74:06:d1:e5:27:cd:88:bb:4c:b8:03:56:27:b4:
         48:a4:d8:65:14:24:34:a7:36:e8:83:64:e3:16:59:68:ed:e0:
         59:39:57:8d:20:83:cc:b5:7f:19:2d:11:78:41:02:2f:9b:c2:
         89:c8:e4:50:6b:24:1f:63:a8:40:df:63:41:c1:8a:bf:d5:ea:
         04:16:9e:8e:d9:2f:ae:88:e6:8e:34:32:d0:4a:78:6d:c7:40:
         fb:10:d8:de:63:ec:2a:59:92:0f:72:9a:da:5e:e7:e9:ce:a6:
         03:1d:f8:8e:c8:fa:3a:b3:c4:9f:99:7b:b0:b5:2f:13:23:f1:
         cb:a0:c3:c9:6c:60:0b:c8:5b:0a:00:e5:4a:ce:bf:0b:a8:30:
         9d:a3:74:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 01:57:24 2025 by rpki-client