Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
File:                     aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json)
Hash identifier:          Bk4SkyFRyD4ROk7471TQNcJ6gvLUT7xBeiOdClnEr3c=
Subject key identifier:   59:E7:AC:F5:3F:32:00:F7:37:EC:DB:61:52:6F:90:FF:A2:95:B3:67
Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9
Certificate issuer:       /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9
Certificate serial:       0200
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
Manifest number:          01EC
Signing time:             Sat 19 Jul 2025 02:55:13 +0000
Manifest this update:     Sat 19 Jul 2025 02:55:12 +0000
Manifest next update:     Sat 26 Jul 2025 02:55:12 +0000
Files and hashes:         1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: DC30P5lEik98SWq/p/BGi5BEevdJbPZG4FR+y5IdKF4=)
                          2: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: cR87tK+M2QvPpStj15TUAHSw7pMeZSCsKtclKhkYsV4=)
                          3: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: Ez3fMRvxWFNiR5F6idq+GUYygoYJpqIuMgbojOp3vAE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl
                          rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 02:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512 (0x200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9
        Validity
            Not Before: Jul 19 02:55:12 2025 GMT
            Not After : Jul 26 02:55:12 2025 GMT
        Subject: CN=687b0910-7646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d3:2f:73:54:4c:b5:62:98:9f:5e:1a:f8:2e:
                    dc:4a:d4:e7:08:19:f0:54:b9:b1:72:27:e3:f7:96:
                    48:dc:ce:83:6e:0e:67:48:f5:81:25:ed:bf:80:b2:
                    56:f8:34:c1:73:89:2a:3a:22:e2:37:21:ab:6a:d2:
                    8a:31:46:01:0c:5e:9f:35:a4:5a:56:4c:3b:4b:83:
                    b0:01:1c:fc:6a:f4:48:40:7e:e2:d5:20:fd:4b:21:
                    90:66:21:4f:6d:92:c2:55:00:de:2f:7b:a8:87:27:
                    56:54:1d:8e:b2:77:f1:ee:a0:fb:e7:b7:14:5e:30:
                    ee:70:01:cf:c2:56:1a:d4:97:87:5b:e1:8a:20:d4:
                    2a:e0:d0:0b:73:90:47:10:d2:65:36:59:df:4c:ee:
                    87:ff:10:6b:0f:a3:f7:ef:0e:4e:8c:20:36:db:db:
                    bc:0d:57:16:6a:38:de:0c:36:2a:4f:71:4e:0a:95:
                    ca:0f:18:3c:e1:d9:f0:ac:f1:2e:ac:99:5a:c2:a3:
                    c0:b9:42:7d:7f:c8:aa:68:5e:ff:9e:24:50:72:88:
                    06:f0:59:c9:9a:d2:1d:b3:03:95:69:69:ed:24:f0:
                    83:bf:88:e5:7a:fa:e9:01:91:4e:7e:44:f4:ff:83:
                    bc:67:1c:78:15:36:e4:41:09:b4:4c:4a:26:ba:0b:
                    ad:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E7:AC:F5:3F:32:00:F7:37:EC:DB:61:52:6F:90:FF:A2:95:B3:67
            X509v3 Authority Key Identifier:
                keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:65:26:f7:e5:d5:e7:32:b9:43:ba:ea:c4:60:05:55:9c:f6:
         dc:c3:7f:4f:78:cd:4d:02:5e:83:f0:77:63:a1:77:52:1b:3b:
         15:d0:1d:08:ff:39:b2:f7:0c:3e:24:dc:fa:55:27:e5:dc:82:
         0b:80:ed:cb:33:49:6c:6f:59:33:63:de:99:42:55:81:1b:b8:
         1a:7b:b8:ff:81:94:61:5c:ef:b4:f4:0f:0d:38:3a:66:03:8e:
         29:4d:9c:dc:b9:a0:a1:b8:7d:2e:83:e8:0c:dc:ba:28:3d:c1:
         ff:01:3e:f7:0a:f3:15:02:6c:a1:64:2f:7a:6b:5f:27:d4:e9:
         da:b4:f2:1a:86:f2:fb:f1:da:2f:43:db:3b:2d:73:4f:34:8e:
         5e:47:1c:ca:1b:62:54:49:77:ae:b9:93:93:7c:bf:60:5f:55:
         77:af:a4:86:10:aa:58:3c:5f:b7:f9:2e:13:b6:a2:cb:50:db:
         93:3c:22:c4:46:2a:9d:21:25:bd:2f:3e:be:31:23:19:7c:16:
         12:b6:c9:82:dd:6d:32:7b:0a:f1:88:7e:16:a4:1c:67:b3:27:
         61:c8:9d:7a:d4:38:57:7f:47:ff:18:e2:e1:a2:6e:ba:b9:a5:
         5c:b5:bf:e7:1d:de:19:25:af:e3:24:29:d7:51:0c:cf:c5:8d:
         bb:2a:7d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:30:13 2025 by rpki-client