Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
File:                     c_S729eiHW57nkv1sMgXIszCHWc.mft (raw, json)
Hash identifier:          u7anIldzbuqdLPu4h0fZ1C4nEMEpikBkDj/sp/8tAE4=
Subject key identifier:   79:6E:FC:C6:91:88:66:19:1E:9C:3B:4A:40:E3:61:2F:2D:89:D5:53
Authority key identifier: 73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67
Certificate issuer:       /CN=A91BDDB8/serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67
Certificate serial:       11E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
Manifest number:          11DA
Signing time:             Thu 24 Jul 2025 17:19:52 +0000
Manifest this update:     Thu 24 Jul 2025 17:19:52 +0000
Manifest next update:     Thu 31 Jul 2025 17:19:52 +0000
Files and hashes:         1: c_S729eiHW57nkv1sMgXIszCHWc.crl (hash: lV8sr3qosJXMAQwJJ4lAaMYbe0cEiPqluxh9rM8eWgY=)
                          2: 732BAF02BF5D11EB8199C943C4F9AE02.roa (hash: 19PePHoFF22nUkndMtbal1vAJr/Bweg8ayj4IBTrMGk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl
                          rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 17:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4584 (0x11e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDDB8, serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67
        Validity
            Not Before: Jul 24 17:19:52 2025 GMT
            Not After : Jul 31 17:19:52 2025 GMT
        Subject: CN=68826b38-ff42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:72:0c:7e:4e:c0:84:cc:28:f7:2f:40:24:7c:
                    3c:b0:b6:8b:fc:c4:d6:fb:5a:b0:d2:2e:b8:1f:89:
                    dc:89:cf:a5:29:8b:7d:34:f6:77:b9:41:c9:3e:0c:
                    48:11:b3:f4:e5:1f:b4:60:e3:3d:c8:8a:d2:a5:46:
                    f6:ac:98:eb:cb:cd:9f:d5:2b:d7:9d:9d:51:c5:97:
                    01:56:e3:eb:1e:f4:54:63:4e:c2:2e:d4:ea:67:06:
                    d1:8b:e7:59:9d:8e:6b:12:ec:c1:0b:52:e3:1b:00:
                    05:7a:1e:9c:2e:10:6d:fd:4a:70:d8:90:4d:23:60:
                    f8:64:8c:72:f3:79:e8:24:1d:9f:d1:e3:79:9b:a9:
                    4b:a1:68:f8:90:e7:cb:7f:ab:87:43:23:6b:6d:c4:
                    13:3e:2c:b7:c9:25:87:48:87:f2:01:e5:b9:41:79:
                    8f:55:4b:04:02:89:2a:6c:7c:49:38:0d:b6:6c:09:
                    40:e9:e0:9e:54:c5:dc:03:6d:bc:63:ae:b0:13:1c:
                    2d:4f:bb:ca:61:fc:2e:ef:2a:4c:5c:e9:72:65:76:
                    7f:1f:f0:6e:a9:4c:e0:ac:81:da:ba:b7:31:30:f6:
                    0e:ef:d8:44:b6:3b:c4:ab:d5:c8:b8:59:dd:48:e6:
                    7c:dd:69:ab:2f:dd:73:c3:e3:d9:ae:99:85:82:5b:
                    a9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6E:FC:C6:91:88:66:19:1E:9C:3B:4A:40:E3:61:2F:2D:89:D5:53
            X509v3 Authority Key Identifier:
                keyid:73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:37:a2:52:20:b8:ec:a6:c8:dd:f2:c6:c6:d2:67:65:2f:aa:
         5b:fb:15:d9:6b:d6:48:ba:3d:79:e7:2a:8c:2d:b7:c4:81:20:
         e4:ce:19:a7:3c:f1:aa:69:c6:d2:a6:d0:bb:f4:ac:b8:b4:61:
         8b:10:b9:f2:11:68:62:2a:72:56:d5:84:b0:0b:e4:5a:a0:9c:
         21:d8:49:b5:ad:70:af:b4:fe:37:1d:6c:08:eb:8c:d2:c2:02:
         d9:da:5f:bc:4b:0b:92:e9:d2:5f:7a:9c:5e:cb:a1:fe:dc:5a:
         c3:29:49:38:f1:0f:c9:53:c3:0a:d4:5a:3b:b6:0d:d7:d8:e1:
         85:ab:85:cc:97:81:6f:8f:a3:67:f9:5b:08:34:a3:8d:f3:a2:
         f6:f6:3a:66:ee:c8:f1:e1:a8:e1:4f:2b:fe:7a:7d:1b:3c:75:
         b2:6d:43:72:00:ce:ec:2a:9c:d7:cc:bd:8b:64:b2:1b:66:31:
         2c:cd:0e:94:45:b1:fe:3d:ec:d3:ed:5b:30:e8:41:eb:6e:25:
         2f:34:1c:7e:11:4f:0e:b0:a8:1e:1a:6b:30:63:78:c8:38:62:
         ac:73:11:20:24:e6:55:ec:d8:6d:66:88:78:61:cb:10:bd:87:
         ff:06:f9:4b:96:1a:dd:b9:23:21:39:ef:1c:b3:48:dc:54:a3:
         0c:eb:7c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 18:25:35 2025 by rpki-client