Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
File:                     k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft (raw, json)
Hash identifier:          gkPkgrvYbqAkcseClILSj18EJIK5qQ4VPaUNq1TSaNE=
Subject key identifier:   27:31:AB:6C:1D:E9:02:04:CA:C7:2C:EF:1B:AE:9E:6C:40:E3:66:CC
Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92
Certificate issuer:       /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
Certificate serial:       147C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
Manifest number:          145B
Signing time:             Tue 22 Jul 2025 17:03:42 +0000
Manifest this update:     Tue 22 Jul 2025 17:03:42 +0000
Manifest next update:     Tue 29 Jul 2025 17:03:42 +0000
Files and hashes:         1: k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl (hash: ZUYyaYMtsHe4btqKCLuePp4ZQIgq4lOUxnCiqEBL5iA=)
                          2: 6BB6EF78EB5F11ECB4060F86C4F9AE02.roa (hash: bw2KVyHN6CitUBxUyBMWnfwdT8P8OVOkY8BYkur67D8=)
                          3: B6DA2BD8E33F11EB9832A354C4F9AE02.roa (hash: u7oqRMExCmv2yUvpdQUhy93ikSgUZkKJq35cWOYkBRM=)
                          4: B7F93F86E33F11EB9832A354C4F9AE02.roa (hash: F7sXs8wz7vi0K+MviVDC99PWP7OiPZ+mlBu4ZQRrCgU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl
                          rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 17:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5244 (0x147c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C56FB, serialNumber=93C058A0DF1773012459164B5A80D85372C7E292
        Validity
            Not Before: Jul 22 17:03:42 2025 GMT
            Not After : Jul 29 17:03:42 2025 GMT
        Subject: CN=687fc46e-8520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:26:0e:98:87:ef:e3:65:31:17:86:c8:88:76:
                    7a:c4:d1:59:fa:e7:69:94:57:32:f9:83:8c:dc:4d:
                    76:65:8c:ef:d5:69:7c:42:94:25:71:9f:ff:cf:81:
                    16:e4:25:2e:81:89:46:a7:51:52:eb:36:4a:2c:c6:
                    a1:17:e2:f3:d3:6d:8c:e4:f7:19:07:3f:1f:bb:46:
                    56:8e:12:3e:af:af:33:a4:1c:dc:1f:66:3c:db:64:
                    88:52:ef:e2:ae:d0:43:1e:47:89:31:89:ff:44:31:
                    fc:93:29:37:9f:c3:8c:de:54:59:c6:54:89:32:86:
                    96:dd:fb:fe:3b:32:67:f3:35:5b:a5:76:35:8f:9b:
                    3f:3c:b7:bc:0f:92:17:15:36:e1:d4:aa:8a:34:27:
                    05:b2:51:d8:a8:20:04:52:13:8c:be:1b:52:ef:67:
                    66:3a:5c:d4:99:27:57:d7:cb:cb:3c:dc:db:e4:5a:
                    88:d9:71:f7:1d:5a:22:d4:59:c3:b4:7d:13:fa:c0:
                    48:dc:f6:f6:98:a3:5f:98:4d:f5:a7:de:0f:9d:11:
                    a6:51:10:52:cc:bc:dc:34:4f:59:0a:9f:fd:23:66:
                    55:89:23:99:b6:b0:a3:7b:77:43:27:c9:af:28:a5:
                    ea:f0:a8:68:a0:b3:e6:c2:fb:49:81:e0:4b:e0:08:
                    dc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:31:AB:6C:1D:E9:02:04:CA:C7:2C:EF:1B:AE:9E:6C:40:E3:66:CC
            X509v3 Authority Key Identifier:
                keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:be:b0:77:43:38:f1:05:d6:da:5e:90:80:0a:75:30:67:5d:
         67:fe:62:9e:49:19:7f:98:67:f4:ef:17:c2:4b:5d:3c:ae:6b:
         30:42:f1:b2:6d:11:ab:57:81:18:79:84:9f:2f:5a:16:09:37:
         7e:7a:91:d9:ba:0e:35:f3:0a:4f:07:c4:15:88:02:90:76:8b:
         92:55:d8:4b:19:c2:82:68:18:b0:85:ba:ac:08:d6:69:0c:32:
         cb:a1:41:cf:2f:4a:56:78:e2:88:9b:f5:ac:31:1e:04:4c:c4:
         b3:cc:27:af:21:4f:61:3b:56:9d:ae:52:33:fa:f4:35:39:5c:
         ed:9a:52:fb:28:8a:29:cc:80:a9:ea:c1:f1:8e:fb:2f:f7:b5:
         73:7d:42:e6:ed:f3:e4:ac:db:72:4a:2b:85:5e:db:51:02:15:
         0b:7e:66:1b:d2:78:0f:3e:f3:08:11:87:66:bd:a6:e8:af:2a:
         33:0d:b0:0d:95:01:c8:24:e2:b0:ed:38:92:df:ac:e4:9d:75:
         57:cd:a3:35:e5:81:f4:6a:1e:a6:eb:50:9c:81:d0:92:bd:cd:
         e7:2e:24:e6:89:a4:ea:21:f4:e1:b6:c5:44:7f:21:27:89:60:
         4d:07:1c:4f:ab:cd:b8:62:4b:53:d7:fa:09:d3:84:c7:91:9c:
         7e:20:4b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:28:30 2025 by rpki-client