Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft
File:                     sboYaLp865TN1k8FdBOaAaULkNU.mft (raw, json)
Hash identifier:          k26lLFyKmyEVQ6WtZ8Pr9vKQXBAzwsKiDrwTlsZWg+g=
Subject key identifier:   F5:36:F7:9A:5D:A7:24:69:A0:32:5E:CA:85:40:1E:8E:0F:C3:90:4F
Authority key identifier: B1:BA:18:68:BA:7C:EB:94:CD:D6:4F:05:74:13:9A:01:A5:0B:90:D5
Certificate issuer:       /CN=A91DF233/serialNumber=B1BA1868BA7CEB94CDD64F0574139A01A50B90D5
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sboYaLp865TN1k8FdBOaAaULkNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft
Manifest number:          74
Signing time:             Sat 19 Jul 2025 07:04:54 +0000
Manifest this update:     Sat 19 Jul 2025 07:04:54 +0000
Manifest next update:     Sat 26 Jul 2025 07:04:54 +0000
Files and hashes:         1: sboYaLp865TN1k8FdBOaAaULkNU.crl (hash: pvKB2v8UDg61iEQq/jGF/GXE8xse1FLkLHR4RqXCB3Y=)
                          2: 386FD4FCB37D11EF8D6EAF63C4F9AE02.roa (hash: aJEyHw65stDKmv/A9AlKIYdtN6qUu7eSq0Nk49wiYVM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.crl
                          rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sboYaLp865TN1k8FdBOaAaULkNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 07:04:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF233, serialNumber=B1BA1868BA7CEB94CDD64F0574139A01A50B90D5
        Validity
            Not Before: Jul 19 07:04:54 2025 GMT
            Not After : Jul 26 07:04:54 2025 GMT
        Subject: CN=687b4396-e37b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e1:0b:80:16:d5:df:23:f8:c6:ac:63:20:8f:
                    60:fe:2c:ee:3a:2b:74:a7:33:db:19:61:d8:a8:48:
                    ce:40:b3:04:c7:48:21:6c:0e:82:40:5a:01:02:e5:
                    aa:1e:5f:f1:da:4a:52:86:15:f1:00:03:9e:0b:7d:
                    22:72:31:c3:b1:e8:dc:07:4f:f9:1f:db:7d:38:ac:
                    d4:b6:f1:72:c3:f7:5d:47:77:5b:11:85:40:ca:57:
                    d0:a1:e0:4f:fb:6d:d3:18:a8:d5:f6:0b:0f:be:5d:
                    e4:a7:1a:a8:dd:19:45:5a:e7:77:49:5e:f1:84:33:
                    7b:5a:eb:ba:f8:2f:ec:98:21:8b:dd:fb:77:ad:34:
                    f7:73:f8:a0:7f:34:2b:b4:27:c2:95:d0:84:06:fb:
                    d6:a0:a5:3b:6a:3f:01:2d:1a:01:be:4c:77:3e:19:
                    98:fa:42:69:c1:ee:b6:21:c7:62:cd:5e:8b:b9:24:
                    d3:f5:2a:b8:35:92:50:3c:14:3f:1e:64:31:7a:97:
                    00:40:5b:81:a6:f7:c6:c3:ea:06:95:51:77:30:85:
                    76:5b:1a:03:3b:80:46:29:bc:b6:1b:fa:1f:f2:7b:
                    d0:99:51:49:e8:3b:e3:e5:ab:47:4a:16:17:c9:45:
                    21:52:d6:83:a5:92:d6:ed:a0:4a:c7:42:7f:c4:51:
                    03:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:36:F7:9A:5D:A7:24:69:A0:32:5E:CA:85:40:1E:8E:0F:C3:90:4F
            X509v3 Authority Key Identifier:
                keyid:B1:BA:18:68:BA:7C:EB:94:CD:D6:4F:05:74:13:9A:01:A5:0B:90:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sboYaLp865TN1k8FdBOaAaULkNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF233/114E7DBAB37811EF88322B0FC4F9AE02/sboYaLp865TN1k8FdBOaAaULkNU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:05:fc:71:1c:16:59:34:7b:72:f8:7a:40:09:a4:47:00:0c:
         ce:14:83:1d:af:75:69:3b:cf:23:ff:5d:b4:3c:b9:2a:22:5a:
         fd:a2:83:b7:ec:1a:b3:ce:3d:5f:cb:c5:b3:df:ed:8a:f5:34:
         f7:42:00:cc:f9:39:17:b1:97:4c:7d:bf:22:e5:e9:55:48:a0:
         56:04:66:e1:02:ac:32:94:cd:0e:25:75:0e:79:90:04:7c:a6:
         54:51:61:35:64:02:65:93:02:90:fb:ee:da:dd:82:cf:f9:b6:
         d6:d9:ea:57:59:51:2a:5c:b6:bc:41:36:b3:d4:15:b5:dd:2c:
         ed:1c:83:77:1a:83:96:a4:69:18:f4:d9:7f:e6:e5:a8:36:b2:
         5e:de:48:28:64:e5:ac:63:39:0a:b2:88:38:e6:37:19:4f:5d:
         90:17:96:11:1f:0a:4f:0c:0f:17:27:f2:26:eb:24:f0:c4:a3:
         96:25:fc:e0:98:0c:70:94:fb:12:2c:c3:45:cb:9d:42:ea:03:
         e0:58:e7:66:7d:fb:9c:88:53:d2:6c:84:01:44:9d:7c:9b:28:
         b6:fc:d9:cc:6b:ad:26:cb:09:20:e3:71:82:33:57:f1:40:e9:
         8c:75:da:61:7c:2e:a3:84:58:7e:6a:2e:2f:2d:66:a5:df:26:
         cc:71:e6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 10:03:00 2025 by rpki-client