Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft
File:                     NDyCcTdhxY6CRQ2UqleWffm0bxU.mft (raw, json)
Hash identifier:          Lx6mkrHPqL+XEPC875GIwtdDMgfDV7U4m8FSxJQW4wI=
Subject key identifier:   3C:7B:0E:A8:93:11:28:AA:F4:E5:B3:5C:64:2E:16:BB:6F:3B:FB:AD
Authority key identifier: 34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15
Certificate issuer:       /CN=A91DE10F/serialNumber=343C82713761C58E82450D94AA57967DF9B46F15
Certificate serial:       1829
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft
Manifest number:          181F
Signing time:             Fri 18 Jul 2025 16:38:56 +0000
Manifest this update:     Fri 18 Jul 2025 16:38:55 +0000
Manifest next update:     Fri 25 Jul 2025 16:38:55 +0000
Files and hashes:         1: NDyCcTdhxY6CRQ2UqleWffm0bxU.crl (hash: /H/5VG27WOoAbtPqy78utX6H0U+T25f7YRAsJXw6mBI=)
                          2: 31AA8496B62811E7882B893BC4F9AE02.roa (hash: 0Z6kDXRBMxwvIo1Q10HNFq5Rb/AOMQ+sUO12LNkbJR4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.crl
                          rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 16:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6185 (0x1829)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE10F, serialNumber=343C82713761C58E82450D94AA57967DF9B46F15
        Validity
            Not Before: Jul 18 16:38:55 2025 GMT
            Not After : Jul 25 16:38:55 2025 GMT
        Subject: CN=687a78a0-5bec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9c:08:a9:13:b3:36:94:e7:ae:8a:a5:f0:cf:
                    c4:f2:75:94:23:9d:b3:8f:e8:76:90:81:02:b0:cf:
                    e5:7f:e1:84:e0:b1:e2:53:2b:e4:2c:b2:de:94:d7:
                    dc:67:82:00:0a:65:e8:59:15:95:35:5c:b5:c5:67:
                    15:e7:5a:87:84:6c:c3:8f:e5:d5:2b:cf:65:b0:e3:
                    42:96:6b:05:c4:17:d1:65:65:4e:1f:3d:85:27:93:
                    f0:1d:f6:d7:44:cf:74:9e:76:c3:0c:43:5f:5f:e8:
                    e2:88:d0:7f:d8:83:f2:49:a5:61:58:c7:39:e9:28:
                    e2:e0:88:0d:be:0f:55:92:3f:cd:61:7f:e6:c3:2a:
                    ba:b1:97:f2:bb:48:11:83:34:20:57:f5:ee:3a:52:
                    21:1d:be:76:f2:4e:41:ce:c9:8b:61:27:04:07:f4:
                    ca:cc:7d:a8:c4:32:1b:43:a7:e6:d8:c2:a9:2f:5c:
                    65:25:fb:8c:d0:51:ba:8d:e0:ce:2a:f4:7d:6c:21:
                    5a:b9:f2:12:74:c4:bf:96:77:1c:23:23:81:71:fd:
                    90:ae:08:69:99:82:d4:60:01:64:9b:16:05:89:fb:
                    bd:d4:4b:7c:f7:63:54:52:67:76:31:bd:4e:58:61:
                    c1:06:91:37:20:19:5d:76:3a:23:88:f5:fc:ae:ac:
                    a0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7B:0E:A8:93:11:28:AA:F4:E5:B3:5C:64:2E:16:BB:6F:3B:FB:AD
            X509v3 Authority Key Identifier:
                keyid:34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:01:2e:15:85:b3:60:08:27:9b:c0:34:5d:91:54:6f:89:ee:
         48:c7:94:28:ad:66:c8:3f:4d:08:8b:00:02:a6:bb:a0:b3:ad:
         58:ff:47:20:9f:04:61:09:f8:ef:96:79:c4:90:00:04:91:35:
         be:fc:0a:0c:73:bd:63:ed:90:79:87:6a:37:55:76:54:b1:90:
         a8:2b:b5:0e:42:14:4f:3e:2e:c6:c3:71:10:64:e9:28:3c:2f:
         63:26:b4:1d:fe:94:d7:99:1c:51:bb:90:61:bc:50:90:79:bc:
         68:e3:29:90:2f:f1:13:f5:5a:55:e7:b1:a2:f0:1a:01:eb:2c:
         b4:84:49:c8:76:38:64:a7:ea:5b:04:c6:81:b2:d0:13:08:78:
         b2:f5:69:db:a2:92:7c:ff:93:ee:48:98:0a:65:23:df:68:ad:
         43:39:d7:21:56:a3:d5:70:48:9d:2d:46:47:58:d8:b8:c3:96:
         0d:e0:26:94:5f:1a:52:1f:29:ff:e7:10:3d:f6:ad:c5:08:7d:
         6c:63:03:bb:06:0c:f5:aa:a9:44:bb:87:11:6f:0a:f1:1d:e6:
         cd:22:13:82:49:90:ce:21:66:45:25:7a:b4:12:6d:ba:3c:a1:
         8b:67:e7:99:5a:ae:a6:11:3e:a0:7d:7b:e2:29:66:15:2c:1b:
         bf:e7:07:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 06:33:49 2025 by rpki-client