Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft
File:                     z0HNr0HFcAEpBkzvKEADvvC5v8I.mft (raw, json)
Hash identifier:          6A/H3rBiVY+LOpaV6gxMVsKB3pzc+NH57hRSv80ZLxw=
Subject key identifier:   FD:41:BB:9F:FF:68:71:D9:58:98:29:B2:BA:15:C9:C2:5D:53:E1:AE
Authority key identifier: CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2
Certificate issuer:       /CN=A91C0D37/serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2
Certificate serial:       0161
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft
Manifest number:          015C
Signing time:             Wed 23 Jul 2025 04:15:56 +0000
Manifest this update:     Wed 23 Jul 2025 04:15:56 +0000
Manifest next update:     Wed 30 Jul 2025 04:15:56 +0000
Files and hashes:         1: z0HNr0HFcAEpBkzvKEADvvC5v8I.crl (hash: AAVmdt4ukY+cTIvFwZ0ftJl3nyoQC4mst4e+ze/Jrto=)
                          2: 00FEEFF0536911EE8594503BC4F9AE02.roa (hash: UhJmIkPW+O+GWS01w9gaCC6S0d+sAspRCQNygto2GKk=)
                          3: C85D80CE43F611EF84151D6FC4F9AE02.roa (hash: vWaXqpy2k96I+1CA27zHiuJx3GF9Cv72ehYlKrUeS00=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl
                          rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 04:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0D37, serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2
        Validity
            Not Before: Jul 23 04:15:56 2025 GMT
            Not After : Jul 30 04:15:56 2025 GMT
        Subject: CN=688061fc-f633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:98:ee:99:26:df:49:1a:3d:9b:f9:c2:14:ab:
                    43:3c:b5:21:5c:9c:50:32:ff:53:d2:e6:c3:78:5d:
                    a5:db:20:d8:cf:10:44:97:25:8a:6f:f6:3d:62:34:
                    db:6d:0a:c9:63:69:9a:62:28:16:c7:fa:10:8b:89:
                    a5:3a:c1:38:8e:4a:dd:7a:51:3e:06:cd:f0:c4:26:
                    73:21:53:73:df:03:3b:19:a3:1d:92:3f:5f:25:5a:
                    27:1f:72:63:0e:9a:46:f7:88:83:49:7b:a4:8b:41:
                    fa:24:16:62:b2:f9:c0:d1:56:40:51:f9:e9:83:ab:
                    ed:58:b0:22:5b:ee:42:46:83:58:dc:3b:71:60:49:
                    c4:15:06:c3:c5:f5:1c:f6:c5:c8:d3:3f:29:3e:7e:
                    f9:75:16:44:d3:66:4e:2a:20:79:49:ad:10:46:27:
                    03:e7:84:f1:8a:5e:ea:64:5b:52:78:1e:d6:29:14:
                    9f:cc:73:fd:d5:eb:a0:e0:aa:e6:fb:5a:63:8a:47:
                    b2:67:d6:68:da:13:f3:eb:78:96:7b:94:4e:91:29:
                    25:c5:57:5c:dd:11:b1:64:89:16:7b:8b:ef:86:91:
                    49:a4:1c:77:79:a2:cf:70:80:2e:38:2d:36:e0:4c:
                    dd:45:6f:11:7a:6a:ba:86:6a:7a:53:b8:7a:da:e2:
                    88:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:41:BB:9F:FF:68:71:D9:58:98:29:B2:BA:15:C9:C2:5D:53:E1:AE
            X509v3 Authority Key Identifier:
                keyid:CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:9f:13:a0:0c:23:6e:1e:c8:09:d8:56:00:df:6b:7a:15:00:
         80:6f:0e:ec:c8:3e:8e:84:b5:5a:64:cc:91:ab:62:d2:16:ee:
         d8:73:71:6e:bb:d6:88:e6:2b:40:46:8d:66:5b:b9:ee:c0:60:
         24:47:f6:66:59:d5:a0:28:b0:e7:09:96:b5:83:ed:34:c9:ad:
         a2:47:a2:6f:e9:6a:7c:91:06:1f:45:5b:90:84:73:66:62:a1:
         90:7a:05:f4:55:37:71:1d:86:b6:50:f1:01:03:84:7a:33:9b:
         f4:05:d2:3c:d6:66:b7:71:a7:fe:5e:95:6e:6e:9f:4c:3b:f7:
         0a:0e:96:de:dc:49:5b:f0:f5:88:fe:90:20:55:d7:10:84:6f:
         ae:3a:f5:6c:8b:5b:e7:f9:17:27:e5:a2:e6:1b:41:83:1c:68:
         8a:6c:8b:ed:e5:c6:29:10:07:40:63:89:c2:87:e1:0d:6a:4b:
         e6:ff:61:74:87:e2:9d:ef:e5:01:14:3f:24:0d:7b:f7:42:0b:
         5a:6e:b0:56:d1:dc:85:b9:9e:08:7e:5a:b9:28:fb:79:87:63:
         ba:a1:af:69:e9:19:9e:4d:c8:69:70:57:27:37:80:39:e9:1d:
         50:ed:00:a4:8b:92:78:9f:60:1c:b6:ed:d2:f7:65:f3:71:f0:
         17:b6:7c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 05:04:27 2025 by rpki-client