Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
File:                     cClGBbAXy3lsrYhC9e-6P0SHB_U.mft (raw, json)
Hash identifier:          R8SszesqMmsFxKst07I7nOGPzjyQp6/pRPkxQhoyjFI=
Subject key identifier:   42:B9:5F:23:32:89:D0:06:E5:B1:5F:2D:1E:4B:0D:89:74:12:99:72
Authority key identifier: 70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
Certificate issuer:       /CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Certificate serial:       0614
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
Manifest number:          05F8
Signing time:             Sun 20 Jul 2025 23:09:34 +0000
Manifest this update:     Sun 20 Jul 2025 23:09:34 +0000
Manifest next update:     Sun 27 Jul 2025 23:09:34 +0000
Files and hashes:         1: cClGBbAXy3lsrYhC9e-6P0SHB_U.crl (hash: UBkoN7uyPbr5lxCXbyf5HDmyaLBc8R2PFkEs0HXjx9c=)
                          2: 2B6E7D32FC5311ECBCE27247C4F9AE02.roa (hash: YWG8ZTu1MykDiOqV56oC4ORjTxnyQ1AQFIwIn6af5iU=)
                          3: FA18CEA2F07A11EBBEBB415AC4F9AE02.roa (hash: 0MKRGhD7VGcMSXw/ROEFU8wnZ9ENIjqkmhL8/Vmz8tg=)
                          4: 4FF82F28045E11EDB581B43EC4F9AE02.roa (hash: pzVGtJuglLRxF/Eq8FNCa3K2+vkm9IUKeDm8AbcXfX8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl
                          rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 23:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1556 (0x614)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1C16, serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
        Validity
            Not Before: Jul 20 23:09:34 2025 GMT
            Not After : Jul 27 23:09:34 2025 GMT
        Subject: CN=687d772e-9e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:42:af:fa:7b:13:99:48:2b:82:a7:ec:04:f2:
                    f5:87:f9:f8:63:c9:79:43:aa:40:38:f3:7d:08:8f:
                    94:40:bc:8a:b3:84:ad:9b:96:66:69:b2:29:6f:99:
                    dc:aa:6b:d3:b3:da:68:d7:91:92:a8:5e:0b:e0:47:
                    9f:a4:61:d1:c2:1f:23:6d:b6:71:53:59:31:58:ef:
                    e0:6c:91:e0:b2:22:fc:2c:d8:a7:bf:8b:1e:e6:6a:
                    84:b4:be:13:ec:bc:c7:e8:52:46:96:4a:63:cd:03:
                    69:e8:58:18:b1:04:9b:bf:9e:88:7e:81:f6:d1:f6:
                    ba:26:7a:15:bb:ea:80:c4:c4:c2:2e:78:8e:26:cf:
                    f6:07:11:47:0f:76:a3:0e:c3:0c:d8:ff:1a:58:fe:
                    25:85:9a:55:c8:13:06:67:70:d9:5b:ca:b3:55:52:
                    47:21:5a:91:ef:2b:26:e5:3d:a2:22:4b:a6:fb:7b:
                    2f:3b:df:06:12:8a:b1:a3:1d:eb:a8:39:5d:4a:85:
                    4f:e3:46:0e:19:21:62:4a:47:19:68:bd:c2:ef:3b:
                    8d:31:a7:6c:95:bb:ca:2d:46:8c:37:6c:31:f5:5b:
                    da:18:26:a5:e5:31:96:60:14:3c:35:44:67:69:0e:
                    04:af:fd:c2:ce:20:dd:95:2d:3d:64:7b:cd:07:a2:
                    c6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B9:5F:23:32:89:D0:06:E5:B1:5F:2D:1E:4B:0D:89:74:12:99:72
            X509v3 Authority Key Identifier:
                keyid:70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:af:c7:cd:d2:cc:84:a2:11:9b:76:e2:c0:01:ef:65:9e:6f:
         b2:c8:05:bd:7a:67:e3:36:9e:ec:01:46:43:6e:0b:26:1a:f3:
         39:76:db:06:70:d5:a0:cf:8c:6b:ba:c4:2e:e1:2f:0c:0f:1d:
         e7:4e:ac:78:99:b0:1e:fc:3b:3f:4b:e9:14:a8:35:ec:99:eb:
         a4:ae:a6:0d:cf:13:93:01:ee:49:6b:24:4e:ee:85:a8:4f:2d:
         42:6f:c8:54:e8:39:89:6e:39:14:46:d5:2c:cd:5e:c5:29:a7:
         16:fd:dc:ad:20:1e:18:f3:4b:6c:63:9d:70:9c:57:1c:ea:cb:
         eb:ae:58:56:92:ff:02:bb:80:55:13:0a:51:b3:3c:04:ad:87:
         02:f7:8c:41:38:e7:a4:b8:7e:4c:3c:51:31:0e:c8:f6:f2:ec:
         dd:94:bb:19:3d:76:51:9b:08:7e:6d:b3:8b:98:7f:87:82:16:
         1e:b3:6e:9b:4d:eb:57:45:4b:71:30:57:e5:27:61:1f:1d:fb:
         86:9a:20:fd:54:b8:3a:35:40:3f:cb:60:97:aa:e5:31:e0:60:
         36:75:7b:5c:ce:2f:82:9e:9b:76:0b:81:2c:f4:65:9b:59:cb:
         3d:53:6b:f8:5c:0c:0d:68:04:5a:ae:2a:ff:94:93:b1:02:84:
         fc:e9:c8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:47:06 2025 by rpki-client