Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
File:                     ruF924xrNZlkYYfQgefI95iD4Z0.mft (raw, json)
Hash identifier:          qeMeGlB9qTuAQG4x5A+wrjsX/ukhwUaSXhSK48Lthjw=
Subject key identifier:   D8:AD:D8:7E:2C:5B:BC:AA:28:ED:78:7B:E6:C7:88:6A:A4:CD:4B:66
Authority key identifier: AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D
Certificate issuer:       /CN=A91BB221/serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
Manifest number:          2D
Signing time:             Mon 21 Jul 2025 07:58:58 +0000
Manifest this update:     Mon 21 Jul 2025 07:58:57 +0000
Manifest next update:     Mon 28 Jul 2025 07:58:57 +0000
Files and hashes:         1: ruF924xrNZlkYYfQgefI95iD4Z0.crl (hash: q9F6ua13YDNfKL63gBHfOv8s2A8VchLQ+mO513MFtKI=)
                          2: A433C1262D0311F0A91F647CC4F9AE02.roa (hash: rpfBuY4xqKMYE45ZTaNcRBU8E1C/kMxDVjLVLcwIScU=)
                          3: 44E001183C5C11F095C6A259C4F9AE02.roa (hash: UIAwr+xolshjF2OO5cazsfh4ngJlaSJ3aa0HRbMpd70=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl
                          rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 07:58:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB221, serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D
        Validity
            Not Before: Jul 21 07:58:57 2025 GMT
            Not After : Jul 28 07:58:57 2025 GMT
        Subject: CN=687df342-8886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:75:03:be:0c:da:f6:30:c9:be:7f:be:12:c8:
                    0c:98:55:6b:92:c7:88:d8:fb:13:8c:d7:97:9e:d7:
                    3c:3e:c6:73:af:55:81:f7:c2:0c:6e:82:14:e6:bf:
                    58:cd:f9:1c:bc:82:e5:2c:77:9c:d6:5e:f5:e9:ef:
                    b1:46:5f:2e:11:0e:b6:a4:c7:5e:9f:10:6c:72:77:
                    4d:60:5a:ca:f0:9c:e6:b9:ea:ce:47:39:00:19:87:
                    f4:55:68:29:be:ea:37:c0:53:aa:74:3d:26:29:d1:
                    b2:0e:dc:85:a9:84:8f:5a:ed:36:6c:a8:77:e0:38:
                    97:73:2e:9f:93:3f:e9:95:c6:be:41:f3:af:32:1f:
                    2b:84:2e:e1:92:13:08:94:aa:91:24:41:e2:bb:cd:
                    1e:de:a9:c2:7d:78:08:98:96:b5:27:29:38:4a:6a:
                    b7:60:cf:c7:c1:0f:55:4a:d1:72:9e:b7:fd:71:e6:
                    1b:49:5b:9d:bd:69:6c:76:d7:dc:18:63:1b:90:e4:
                    07:75:df:f9:88:a7:f6:b0:67:28:50:f8:53:41:67:
                    ea:15:94:59:47:95:e0:0f:9b:06:ba:09:c9:6e:0b:
                    b3:6c:0e:26:c6:28:6b:01:d3:1d:fc:ad:7f:7d:1d:
                    76:46:39:8f:6b:50:6a:94:ef:1b:8b:46:39:69:2a:
                    0c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AD:D8:7E:2C:5B:BC:AA:28:ED:78:7B:E6:C7:88:6A:A4:CD:4B:66
            X509v3 Authority Key Identifier:
                keyid:AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:b2:50:2b:ab:64:16:4e:1f:cf:68:3c:f3:84:aa:d9:54:df:
         50:2a:e5:99:51:7a:ef:3b:a8:4f:2a:f7:67:47:1d:9e:d8:b7:
         c6:ec:15:96:b2:f6:28:29:0b:2f:75:e2:42:ea:dd:3c:f6:a9:
         0d:45:6a:aa:22:f1:a3:ee:f4:20:3d:11:49:8e:e4:cb:94:3e:
         15:b1:b6:84:ce:59:88:c3:b0:e0:73:4c:cd:e7:ec:64:b1:e9:
         19:af:aa:7e:08:cd:f3:5d:22:48:1d:61:c9:10:e2:ce:6c:d6:
         f9:c5:e6:f2:6d:5a:97:f7:7e:0c:f7:a8:21:9a:9c:f2:8c:ac:
         a3:27:ee:f7:a5:ed:f2:37:f3:2c:39:59:6b:9a:9c:9a:72:d1:
         41:10:9d:f4:ce:06:d8:59:68:27:a8:a9:34:9c:38:55:74:56:
         e4:8a:91:b9:3a:19:53:8b:b8:dc:bb:94:10:bd:2c:5e:fa:f2:
         02:59:51:97:c0:6b:b1:74:68:b5:11:e0:c4:7d:10:d0:fe:b0:
         de:19:c8:af:2a:6f:f5:c9:b7:ba:3f:b1:13:1d:4b:86:78:37:
         89:35:ee:a9:c0:e4:fe:32:f7:8f:3e:a0:a3:46:aa:c5:12:8f:
         d9:45:08:68:66:d5:26:25:6c:c0:a6:3b:26:10:b1:4e:04:8f:
         9b:bc:fa:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 12:30:46 2025 by rpki-client