Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
File:                     ruF924xrNZlkYYfQgefI95iD4Z0.mft (raw, json)
Hash identifier:          4V8KFY65vQBUSM6wNNQ+x8gN/IBDVthjWrU/k1L2Uck=
Subject key identifier:   33:A1:89:AD:25:3F:54:68:D1:99:CA:05:CF:BD:66:06:41:19:07:1E
Authority key identifier: AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D
Certificate issuer:       /CN=A91BB221/serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D
Certificate serial:       34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
Manifest number:          2E
Signing time:             Wed 23 Jul 2025 08:08:25 +0000
Manifest this update:     Wed 23 Jul 2025 08:08:25 +0000
Manifest next update:     Wed 30 Jul 2025 08:08:25 +0000
Files and hashes:         1: ruF924xrNZlkYYfQgefI95iD4Z0.crl (hash: etIJML1/YNu1t1A/tR3Q7TLQCMRSwltYGnHlx9Ldt0s=)
                          2: A433C1262D0311F0A91F647CC4F9AE02.roa (hash: rpfBuY4xqKMYE45ZTaNcRBU8E1C/kMxDVjLVLcwIScU=)
                          3: 44E001183C5C11F095C6A259C4F9AE02.roa (hash: UIAwr+xolshjF2OO5cazsfh4ngJlaSJ3aa0HRbMpd70=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl
                          rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 08:08:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB221, serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D
        Validity
            Not Before: Jul 23 08:08:25 2025 GMT
            Not After : Jul 30 08:08:25 2025 GMT
        Subject: CN=68809879-f809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a8:1b:ab:26:35:ea:d1:99:e8:65:37:43:b7:
                    e3:63:af:b8:53:96:dc:01:8c:4b:3f:3a:e7:c2:38:
                    7c:a0:ad:bd:cc:c2:46:66:c1:d5:97:65:2d:05:89:
                    a7:35:cf:aa:90:fe:20:ce:fa:42:ae:6b:f8:cb:e9:
                    e2:55:54:25:bf:b0:e6:47:4a:97:72:81:4b:ae:1a:
                    21:8f:9e:94:ff:82:3a:e7:bf:1f:bc:5f:af:9d:c9:
                    cd:c8:88:bd:eb:89:5d:25:fa:df:3b:a7:96:77:9c:
                    88:a1:31:ed:c9:7c:11:67:55:f8:97:b2:31:1b:00:
                    07:db:ba:37:03:f1:82:c9:14:57:21:c8:5b:84:59:
                    a1:91:76:63:c1:c9:6a:cb:91:f1:78:a3:08:db:e6:
                    c2:d6:2b:11:c9:5a:df:9f:33:6f:ac:aa:3b:11:69:
                    cf:83:2d:3c:e2:cb:77:42:78:27:b0:77:78:52:fb:
                    79:78:85:86:64:ba:49:1f:5a:ee:1a:94:a2:f5:6c:
                    88:99:94:e4:af:80:29:20:14:ca:66:87:9b:ae:60:
                    d7:7f:7e:d9:12:83:99:c9:9f:04:ba:e5:0b:6e:9a:
                    98:5d:3f:04:b9:b4:62:54:72:6d:d8:08:fc:86:5e:
                    67:d0:cf:30:0b:ec:27:a0:ce:33:95:a9:ea:42:d5:
                    d9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A1:89:AD:25:3F:54:68:D1:99:CA:05:CF:BD:66:06:41:19:07:1E
            X509v3 Authority Key Identifier:
                keyid:AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f0:9d:63:51:5d:31:d0:9d:52:19:90:3f:a8:4c:d0:57:21:
         92:a2:4c:29:9c:6d:e4:7b:04:ca:08:26:c5:f5:64:34:e2:34:
         ca:03:18:a5:c7:ad:6d:4a:9c:51:bd:5a:c3:bb:8f:6c:45:ba:
         b6:08:e9:5f:18:f4:f3:5c:3e:03:71:dc:33:6a:eb:06:34:bb:
         06:71:04:a0:29:ad:a3:50:33:2e:74:e4:c3:76:6c:bd:d8:1b:
         9f:5d:a6:c2:51:bd:f7:f5:a6:ec:16:8f:23:9b:a1:fc:db:56:
         31:1d:83:8f:71:12:7c:aa:64:c5:a0:f8:2e:50:8d:fe:6c:c1:
         f5:e8:d9:65:bd:cf:d6:5d:f3:1b:79:6e:78:ae:4b:19:9d:5b:
         bf:ff:aa:03:55:19:62:65:7d:b0:2b:fb:07:d5:43:eb:b2:1e:
         29:81:16:80:02:35:ba:c9:b2:6b:c2:de:45:75:df:62:4a:ab:
         00:a2:a8:04:09:d7:09:94:11:f6:ad:6e:63:ca:a4:aa:52:e1:
         96:ce:ad:ff:c5:f8:43:47:d6:d3:b3:e2:c1:88:d6:d4:fe:b7:
         bc:4a:6d:1b:68:97:bf:e8:35:e7:56:16:c8:76:a8:68:60:98:
         16:0a:54:95:3f:ca:c2:ce:f6:0d:86:16:ee:5d:28:d6:34:f5:
         73:e9:a1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 05:06:20 2025 by rpki-client