Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft
File:                     tPJi-ZhX4SDMnLxL_BftVKur4rs.mft (raw, json)
Hash identifier:          7QrWYBN4teEbg5qzVIjAfS7o/4VyU7xbw6kmgITXlPk=
Subject key identifier:   B2:93:73:4E:D1:3C:B5:FC:1E:43:AC:A6:58:07:D7:11:7E:A9:52:D4
Authority key identifier: B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB
Certificate issuer:       /CN=A91D2ADD/serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB
Certificate serial:       0335
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft
Manifest number:          032D
Signing time:             Sat 19 Jul 2025 01:32:54 +0000
Manifest this update:     Sat 19 Jul 2025 01:32:54 +0000
Manifest next update:     Sat 26 Jul 2025 01:32:54 +0000
Files and hashes:         1: tPJi-ZhX4SDMnLxL_BftVKur4rs.crl (hash: XZWVo9wItgX1IdU+V8vJ5vdHJMOqt2inYdptvP2dpAQ=)
                          2: 950791DAD0D811EC8DF4377FC4F9AE02.roa (hash: hj6HENiICkARpuosawtZoxcS59kBh8qchU0LK6i41Kw=)
                          3: 3DBB9F0C97EC11EE95979D63C4F9AE02.roa (hash: qi/f7a1lAHX2y6pi+09PuaKJSyxYj7DhpTy80V71vEM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl
                          rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 01:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 821 (0x335)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2ADD, serialNumber=B4F262F99857E120CC9CBC4BFC17ED54ABABE2BB
        Validity
            Not Before: Jul 19 01:32:54 2025 GMT
            Not After : Jul 26 01:32:54 2025 GMT
        Subject: CN=687af5c6-2a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:94:d9:ca:b2:2d:79:9b:52:7e:d3:32:0f:2a:
                    0e:3d:3e:1a:c7:cd:58:d6:b7:25:a3:74:0f:23:e2:
                    72:46:fb:f4:f0:66:dd:b2:99:c6:91:3d:cd:a6:a3:
                    0b:63:93:2e:ac:55:b1:7f:e4:68:cd:30:02:0f:dd:
                    47:3d:c9:14:23:c0:0d:59:7a:10:ef:d8:d0:68:ed:
                    2b:b1:9a:86:96:24:56:fe:7c:1e:8a:da:26:ab:55:
                    2d:8b:ed:ea:9d:8e:98:e8:7a:8b:01:fd:fc:1b:fa:
                    e5:d8:98:f0:ce:ea:61:34:b9:6d:ed:67:1a:f1:a3:
                    ee:e3:33:f5:42:2e:2e:43:89:a8:48:54:1a:26:a1:
                    be:28:cb:a2:37:dd:67:81:99:78:12:03:85:f3:2b:
                    d6:13:b5:b6:53:10:b8:28:cd:9b:a9:ae:73:8a:dc:
                    ef:25:aa:76:e3:9d:14:78:1f:78:32:3b:1d:26:d0:
                    e8:dd:02:9d:ff:0a:20:bb:95:c4:ba:cb:01:ff:c2:
                    52:be:49:32:0b:da:ab:ef:22:dc:af:6a:72:5c:d2:
                    5d:86:7e:b7:60:27:6d:f3:2e:df:eb:2a:41:a6:be:
                    bb:30:ac:c3:23:d0:86:c0:af:b8:88:18:68:26:34:
                    d6:e8:57:f4:87:32:6e:86:ab:4a:cb:ce:38:0e:5b:
                    ca:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:93:73:4E:D1:3C:B5:FC:1E:43:AC:A6:58:07:D7:11:7E:A9:52:D4
            X509v3 Authority Key Identifier:
                keyid:B4:F2:62:F9:98:57:E1:20:CC:9C:BC:4B:FC:17:ED:54:AB:AB:E2:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPJi-ZhX4SDMnLxL_BftVKur4rs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2ADD/EDC67614D0D411ECA2494A77C4F9AE02/tPJi-ZhX4SDMnLxL_BftVKur4rs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:6b:48:77:ab:74:11:00:12:5d:52:81:29:0b:5e:89:7b:b9:
         b7:7b:70:e9:a7:01:ad:ab:aa:4c:ec:00:92:cd:34:42:bc:23:
         13:4e:c5:56:ab:90:2a:d3:87:7f:7f:59:97:e0:72:fe:f6:04:
         f2:9c:00:e1:84:67:56:e9:dc:4e:db:3e:fa:77:be:77:5a:35:
         d0:29:73:83:6f:ff:dd:3d:92:cc:1e:e9:15:60:c9:35:51:2c:
         c4:a2:be:ed:d9:7f:bc:ba:93:27:d5:17:ee:9b:67:bb:d0:f0:
         f2:70:0d:5f:d8:e9:cc:1e:66:e3:be:4e:20:e1:02:93:46:c7:
         53:de:db:9c:07:89:c2:bb:ca:6b:e4:5d:9e:f5:27:dd:53:7e:
         4f:6e:70:a0:38:77:da:ef:3c:2d:8e:ef:42:e9:8b:58:37:f2:
         87:22:09:c1:cd:10:ed:92:29:12:97:fd:3f:4a:09:5c:c0:fc:
         3a:96:14:3e:e5:0e:25:a8:97:9f:0f:8e:9c:5f:b1:77:0d:a5:
         1e:f4:72:62:cc:47:b2:a2:17:3c:1f:fc:b8:82:6a:33:94:dc:
         7b:7a:ff:58:7b:d9:92:15:b9:31:2b:5c:10:b0:31:ce:73:89:
         25:50:9d:6b:32:1e:89:5f:d8:b6:74:74:81:5a:00:6e:8a:c2:
         de:3d:8b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:31:21 2025 by rpki-client