Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft
File:                     -2uUY2HwxcguKwZ0DUuosLmTU_g.mft (raw, json)
Hash identifier:          5ztbc0pa8RWQy6NEUv7g8faMIb+NE5mk4XubWvSUm78=
Subject key identifier:   E0:E8:B8:9D:FF:90:9C:C1:42:F9:AF:96:12:02:C7:44:F3:A6:24:95
Authority key identifier: FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8
Certificate issuer:       /CN=A91C6A35/serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8
Certificate serial:       60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft
Manifest number:          5F
Signing time:             Mon 21 Jul 2025 07:16:36 +0000
Manifest this update:     Mon 21 Jul 2025 07:16:36 +0000
Manifest next update:     Mon 28 Jul 2025 07:16:36 +0000
Files and hashes:         1: -2uUY2HwxcguKwZ0DUuosLmTU_g.crl (hash: bEzZ2X9IcUQIWXGGxbijnO2/EfjJgqpUyDFR1n4BODk=)
                          2: 06D77958D49411EFA8DF5E69C4F9AE02.roa (hash: SIysPbQ0shw6SImSP7LGItvtceoka+GBhE2dzjDub+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl
                          rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 07:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6A35, serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8
        Validity
            Not Before: Jul 21 07:16:36 2025 GMT
            Not After : Jul 28 07:16:36 2025 GMT
        Subject: CN=687de954-516e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4a:32:6f:36:c4:7e:7a:fd:75:29:87:b5:63:
                    ed:aa:bb:0c:fa:61:c1:fe:48:b8:dc:c2:fa:a6:e8:
                    b0:0e:42:bc:6c:71:aa:46:69:82:9c:5b:36:a9:8e:
                    0b:07:63:56:e6:24:bd:38:1a:e8:54:28:bc:b2:2b:
                    48:b8:8a:04:12:a7:40:e9:d5:a3:d9:aa:0c:29:b0:
                    e3:be:38:8b:2b:cb:e5:98:27:d7:70:e2:d0:05:74:
                    20:ce:ae:da:44:cd:5c:bf:bf:5c:5d:98:76:27:56:
                    43:31:2b:57:f2:21:7b:fa:03:d4:ce:44:d7:4b:4d:
                    44:0d:50:5f:f1:6e:0e:28:a9:b5:49:14:fe:06:e7:
                    44:a1:c6:85:7b:a1:f0:db:61:ac:03:b9:26:21:47:
                    c9:65:1c:f6:90:4c:85:53:52:13:f9:48:9a:5d:f6:
                    4e:ae:48:e0:e2:0c:1a:40:4c:85:7b:52:10:60:50:
                    d0:5f:be:f6:6f:cc:8a:29:91:58:88:13:54:4d:f5:
                    e8:b5:20:4f:2a:b4:cb:a8:cb:8a:5e:0a:95:96:ba:
                    35:00:44:69:b7:53:e6:d1:e0:65:b9:74:78:31:58:
                    70:ca:85:89:e7:8f:f7:ad:be:ae:85:23:56:8c:09:
                    be:32:1c:c1:17:88:1d:aa:31:55:a9:39:1c:4a:aa:
                    a8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E8:B8:9D:FF:90:9C:C1:42:F9:AF:96:12:02:C7:44:F3:A6:24:95
            X509v3 Authority Key Identifier:
                keyid:FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f1:39:9e:60:a3:1a:38:d3:3b:cb:26:06:a4:8f:96:6c:9e:
         f3:4f:89:59:b8:dc:e9:3a:3f:5b:6d:a8:67:b1:68:7f:f1:92:
         81:ea:65:56:ff:95:f7:09:97:fc:8c:52:dc:8d:17:b2:6a:f9:
         f5:94:e0:a9:5b:ab:3c:b5:c8:35:55:a8:53:66:4f:80:43:b8:
         d9:ec:c6:d1:6c:8e:fd:84:de:28:3f:57:23:26:49:94:5a:a4:
         86:5d:11:05:b6:0e:d6:c2:bb:9d:71:54:1b:db:da:31:20:b7:
         d7:3a:9b:85:52:df:18:3a:44:19:05:bd:47:fb:27:ae:86:2a:
         f7:74:cb:ed:ed:e8:aa:fa:fb:fe:c6:44:bf:54:f5:4a:f0:15:
         49:37:fd:78:e5:b4:63:93:b6:5d:a5:d9:86:18:70:1f:bc:4e:
         ed:55:fb:a3:54:66:5e:e3:d2:c6:97:f9:f5:a9:7b:52:6a:d8:
         a7:d5:6a:53:04:97:12:80:76:b7:10:77:c3:28:13:4c:b4:1b:
         0c:4f:5a:64:04:7d:3d:8b:bb:b0:73:94:72:9f:a5:47:80:91:
         1b:34:a4:51:e0:99:80:91:b4:90:24:54:c5:d3:e9:f5:83:f6:
         d2:76:1c:06:63:62:a4:a1:6d:87:94:54:13:92:70:95:93:8d:
         f8:fd:46:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:27:07 2025 by rpki-client