Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
File:                     B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft (raw, json)
Hash identifier:          xZRg57+8ONucpHvPsnAchlpX4u8yCK+nbX+d/jeCmWY=
Subject key identifier:   0E:0A:C5:D6:AF:3F:49:66:5F:55:D9:47:2C:B7:41:77:77:70:E9:48
Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
Certificate issuer:       /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Certificate serial:       08D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
Manifest number:          086A
Signing time:             Sun 20 Jul 2025 20:59:59 +0000
Manifest this update:     Sun 20 Jul 2025 20:59:59 +0000
Manifest next update:     Sun 27 Jul 2025 20:59:59 +0000
Files and hashes:         1: B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl (hash: yL8JAaKt1bZOTnLvGhmFBZeHfu6FEYqoIQiqF3uwg1E=)
                          2: F8C02F3CDA4E11EC9C09A446C4F9AE02.roa (hash: fQqKRj97YwSX01j4RLkIYLyoFuesKb4QSmD9wM54Hnc=)
                          3: BA1752AE176B11EF9ADED980C4F9AE02.roa (hash: E4ey91ujkF/MRIeBzx9ZLQooU0yVAuuvKVrBh8MDQSg=)
                          4: E518ECC6D52A11ED99D55E2EC4F9AE02.roa (hash: 8ZNPpyzaCSOR7XArDiXTgpwOZdqi5o9nlzrrurZ8f2Q=)
                          5: FEEC2C90643811EB9D7F624EC4F9AE02.roa (hash: huVUXhJ3Ojs1r05u1jG7Kov4uI++w1LAbAYi/YZa49g=)
                          6: 007CF9924F1111EFA7D2F345C4F9AE02.roa (hash: jDHZwFF5yPuG0E/+EVJniBRe11d0Z59ErydSm1FeI2Q=)
                          7: 5B5CBC68751B11EB9065A822C4F9AE02.roa (hash: PfplpurYpM5Nlhs4wMvQOWeVvjM0XGHzdK7n61JNfpc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
                          rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 19:22:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2257 (0x8d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
        Validity
            Not Before: Jul 20 20:59:59 2025 GMT
            Not After : Jul 27 20:59:59 2025 GMT
        Subject: CN=687d58cf-b8cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:50:5a:0b:8f:70:b6:a8:93:ff:ff:a9:3f:ea:
                    2c:64:dd:58:1f:75:c9:6a:7b:bc:1f:ce:d8:9e:64:
                    f6:03:57:3f:bf:95:3f:63:b6:e4:7d:fa:7b:61:e1:
                    1a:24:cc:fc:86:66:c4:6d:b6:e7:f8:67:df:42:60:
                    dc:f8:50:65:52:75:75:14:09:5b:7e:31:b3:f1:17:
                    fa:11:15:05:da:ad:f9:f7:60:ab:c5:be:8c:2f:45:
                    e6:f2:48:35:ed:91:b7:2b:f4:c1:6d:e1:13:ef:ba:
                    33:0b:b0:75:e1:e9:fb:c1:3c:77:b6:59:85:33:dc:
                    37:5d:9a:55:5b:f8:db:40:8c:13:33:a2:e0:f3:81:
                    80:1d:68:09:f5:f0:47:a1:53:0e:b8:f1:bc:47:7a:
                    2d:ee:35:50:bf:06:98:39:0f:ed:5f:da:48:33:2c:
                    10:96:26:7d:62:6f:86:ac:ad:18:75:77:2e:3a:74:
                    70:01:0c:a0:d6:58:9d:de:1a:16:99:6c:7f:e1:d3:
                    db:c4:32:89:87:c5:2e:5c:40:4d:a1:ea:41:9b:19:
                    ef:2c:92:4b:e6:50:01:55:f5:59:f3:9e:1a:6d:43:
                    2d:c0:96:d0:c5:7d:1d:c1:63:df:28:4c:e9:a1:0a:
                    de:b1:bf:d6:dc:d4:cd:b2:41:ca:82:d6:5a:ca:42:
                    0c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0A:C5:D6:AF:3F:49:66:5F:55:D9:47:2C:B7:41:77:77:70:E9:48
            X509v3 Authority Key Identifier:
                keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:4b:11:1b:16:4e:54:0c:de:54:29:70:82:23:45:c2:53:d1:
         66:75:a6:fe:c1:84:04:f3:c3:80:60:15:8b:c1:db:f7:85:0e:
         0f:57:02:59:a8:0e:b3:85:32:15:54:3a:f3:69:c7:16:f8:2d:
         0d:8d:7f:39:a2:48:a1:d0:bb:0a:1a:9f:ae:6e:2d:e4:37:cf:
         14:d4:11:c3:05:4a:da:5c:2f:e1:80:6a:9c:a6:72:0a:25:ca:
         6d:09:3d:cd:79:eb:c0:25:83:7c:d5:1e:0b:03:c8:b4:6f:93:
         6e:87:b0:77:fe:cd:b5:e2:29:58:bf:48:9c:1b:87:09:c3:41:
         81:c9:31:77:44:0a:03:db:6f:a6:6a:82:f6:66:1f:d7:e2:c8:
         72:41:c4:5f:3c:7f:ff:fa:84:59:9d:96:91:85:6e:79:02:e2:
         d5:74:ba:6b:bd:61:d6:f0:4c:19:d1:7c:55:1b:ec:07:03:28:
         f9:20:c1:d2:78:49:51:91:13:72:ee:58:08:3d:71:63:9a:c0:
         fd:d7:1c:45:ad:17:3e:63:9a:e9:fd:90:6e:ca:75:73:88:6d:
         79:0b:1f:b3:ae:0a:05:01:80:76:e1:8b:da:0c:89:2b:87:71:
         fe:eb:f7:45:b0:d1:b0:12:1a:fe:2b:ef:54:8a:6a:04:a8:68:
         46:9b:84:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:28:15 2025 by rpki-client