Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
File:                     F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft (raw, json)
Hash identifier:          mJtytTw4hDzuVPxm4MV3hazjTrVaiA8rxPJ+ND+fK54=
Subject key identifier:   34:05:F8:DB:09:93:90:91:3D:42:DE:33:D2:80:76:0F:3D:82:14:73
Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01
Certificate issuer:       /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
Certificate serial:       08F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
Manifest number:          1959
Signing time:             Sun 20 Jul 2025 17:22:09 +0000
Manifest this update:     Sun 20 Jul 2025 17:22:08 +0000
Manifest next update:     Sun 27 Jul 2025 17:22:08 +0000
Files and hashes:         1: F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl (hash: Big6JJhExn86ALnOco5g4rVsDtbbOVxbwN1EPHAI2mY=)
                          2: 8CB86F5AC21A11EFAB75870CC4F9AE02.roa (hash: WQb8lcNBaBBkPoF6ncdjgRAg3hdCvuxgxSDRSWRx1cY=)
                          3: E62A9F32CA6611EFAA521732C4F9AE02.roa (hash: SRGrWvEKnqS2fW0dxExdAox7hHbXysmPC91QCe7MKXI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl
                          rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 14:45:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2291 (0x8f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
        Validity
            Not Before: Jul 20 17:22:08 2025 GMT
            Not After : Jul 27 17:22:08 2025 GMT
        Subject: CN=687d25c0-f5a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cb:e2:c3:45:34:e8:cd:2c:d7:88:9c:31:88:
                    8d:77:9c:44:6a:cd:2d:01:92:3b:9a:9c:14:60:4a:
                    44:c1:e6:9c:80:e8:78:05:90:5e:ce:b5:7f:ab:34:
                    64:35:92:94:39:70:c5:d5:a3:e0:02:63:04:c9:f6:
                    fa:40:8c:1c:70:a3:2e:4b:f0:0a:7a:ae:ff:cc:ad:
                    c8:95:e2:6e:26:7e:6d:db:fd:df:9f:7b:94:78:59:
                    38:da:2c:fa:89:ab:6f:82:e0:95:f7:d1:fd:2a:31:
                    b5:7d:c2:4b:59:b2:19:68:f5:85:c9:37:83:63:f7:
                    3b:9a:db:be:44:ad:98:0f:fd:6b:c8:66:d9:7f:ee:
                    08:65:31:60:34:03:f5:6f:37:3a:68:2e:e5:31:8e:
                    2e:58:5a:f9:13:72:09:d6:6c:d7:a4:d8:fb:27:70:
                    df:48:c5:c3:92:a4:50:6c:0a:1a:fb:53:42:42:09:
                    5b:04:49:69:0e:bf:69:44:4c:ed:62:ce:34:84:49:
                    a4:af:b3:a6:4b:f7:8e:be:a9:3e:da:ce:19:ef:6e:
                    69:7c:d6:cf:60:fe:e5:5b:a4:f8:28:b0:fa:47:61:
                    c7:99:32:45:68:3e:58:e2:d5:5e:26:21:07:db:30:
                    f9:2d:f4:4a:7a:b6:94:6c:d5:8f:2a:9d:50:56:71:
                    f7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:05:F8:DB:09:93:90:91:3D:42:DE:33:D2:80:76:0F:3D:82:14:73
            X509v3 Authority Key Identifier:
                keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:af:6a:06:eb:90:0f:a1:36:bd:df:50:cd:50:41:4f:0f:dd:
         2e:89:92:66:a2:06:a4:f7:dc:71:97:81:e0:82:8c:4f:e2:bb:
         36:05:06:dc:21:97:79:5b:57:5b:fd:dd:c8:ba:99:cf:24:21:
         09:3f:88:90:36:b3:a5:71:a4:e6:00:63:12:9d:6b:c6:a4:12:
         cc:77:76:18:c0:f9:a5:4a:a3:98:36:40:5f:fe:1d:bc:e7:0a:
         bf:06:b4:9b:04:4b:f6:bd:ff:56:87:6c:90:4a:c4:68:65:d1:
         54:4b:d8:1f:f3:33:4c:9f:1f:7c:00:25:b9:54:30:a9:99:e0:
         82:f5:90:31:44:68:98:cb:fe:d8:e7:90:a2:14:0b:5c:51:63:
         11:4a:bf:ba:bb:cc:f2:23:34:c0:be:47:57:36:fd:75:48:52:
         93:67:bd:cb:af:b6:7b:cf:d0:cb:e0:cd:ae:23:04:9c:0d:68:
         76:29:92:73:20:ca:57:f4:b8:1a:4f:91:ef:e9:67:5b:0a:d9:
         a9:ab:f9:53:53:b3:06:22:c2:a5:e1:3e:c2:b2:e5:b9:45:9a:
         22:93:57:33:25:d4:c1:6e:4a:d8:82:2c:f0:21:da:a8:93:46:
         70:5c:a8:f4:13:50:9d:6a:e0:57:7b:0c:6a:5f:2d:f2:a1:ac:
         df:85:59:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:03:05 2025 by rpki-client