Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft
File:                     N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft (raw, json)
Hash identifier:          TU3//Bo7m6Lp51Yeju+G4I9bXSQg5hsnuTHzUmYtP7k=
Subject key identifier:   23:66:6D:96:60:A9:81:B4:92:2B:A4:3C:61:09:91:D7:A9:B2:A1:13
Authority key identifier: 37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB
Certificate issuer:       /CN=A91E3E33/serialNumber=379743714CE012230AA978BB1AA8C790E70667AB
Certificate serial:       1228
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft
Manifest number:          1209
Signing time:             Fri 18 Jul 2025 17:18:58 +0000
Manifest this update:     Fri 18 Jul 2025 17:18:58 +0000
Manifest next update:     Fri 25 Jul 2025 17:18:58 +0000
Files and hashes:         1: N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl (hash: drkDfd14hYVZm4Oc/8820GpK4VuS4oWdq0pnC4kKoTo=)
                          2: D0B8C09E1BBF11EAA64ECF70C4F9AE02.roa (hash: EG7DAdh62MT15Z2IRnWNBPi8u6Tt+z9LL+klU2Atkq0=)
                          3: 29ED0D46839011EE946C5E63C4F9AE02.roa (hash: ieAu/eYOiYngZXOxKG9Shsj5mrubW8gne154rOLi258=)
                          4: 4551BE2CD19D11EAA120EE14C4F9AE02.roa (hash: Zb8K4a4S76xzShJsXA+J8BCfBTGu/Fav49T1ERobF/g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl
                          rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 17:18:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4648 (0x1228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3E33, serialNumber=379743714CE012230AA978BB1AA8C790E70667AB
        Validity
            Not Before: Jul 18 17:18:58 2025 GMT
            Not After : Jul 25 17:18:58 2025 GMT
        Subject: CN=687a8202-d268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fb:d1:a5:1e:72:52:0c:48:35:eb:b3:89:19:
                    8f:b2:e5:fe:0b:16:2c:1b:10:91:c3:03:92:57:5d:
                    89:9f:55:41:18:5a:ff:83:3e:ac:13:83:6e:70:2c:
                    3f:bf:58:02:b0:8e:ee:fe:68:1e:83:a2:36:ea:ac:
                    d3:9a:4b:8b:27:47:20:ca:de:d4:70:d0:80:68:cf:
                    16:f2:6e:fb:e1:ef:d2:dd:3f:1d:dd:c3:2c:00:56:
                    1e:43:06:02:97:55:fa:4e:56:6e:64:fe:b6:7a:8c:
                    7f:ee:13:d4:52:f2:ba:0c:ff:ef:74:59:fd:32:11:
                    bb:3f:82:ef:9f:4e:54:dc:31:25:2b:be:8c:a5:dd:
                    8c:ac:31:9a:d8:4d:1f:fd:1c:05:c6:5c:a9:c6:e1:
                    3a:78:7e:7a:b7:94:07:f9:1c:25:77:16:55:d0:9b:
                    87:03:02:f6:f1:53:c6:8d:c6:38:d2:14:0c:fa:cf:
                    f7:e6:54:83:ff:44:05:c3:4d:82:43:c0:ce:9d:7b:
                    14:73:a5:72:8f:b5:e2:c0:0f:4a:8d:04:60:28:b3:
                    07:cc:83:26:2a:82:fd:e7:c5:9e:43:03:1f:ce:03:
                    03:fd:ad:db:8b:5e:59:c4:e1:50:99:d3:4e:44:55:
                    7e:b9:19:5a:a8:79:d0:45:ff:34:86:cc:52:4a:64:
                    32:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:66:6D:96:60:A9:81:B4:92:2B:A4:3C:61:09:91:D7:A9:B2:A1:13
            X509v3 Authority Key Identifier:
                keyid:37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e5:9b:2b:39:19:a1:37:fd:48:a3:41:f1:8c:a8:48:99:c4:
         51:a4:3a:7e:39:d7:6b:e8:07:ca:9d:f8:9f:78:99:05:3d:ad:
         c7:b9:bf:e0:a5:67:bb:9a:55:fa:45:6b:9c:e3:63:f2:b9:37:
         15:14:e5:10:5d:91:a0:6e:d1:fb:dc:aa:be:63:7f:2c:60:dc:
         66:dc:d7:af:5f:7e:52:3c:35:c1:d4:ef:ed:1d:01:84:c8:58:
         42:0b:79:10:c8:0e:a0:da:2c:7d:fa:a0:45:73:06:12:51:30:
         53:9c:32:33:ed:19:bb:61:c9:bf:28:67:fc:68:f8:4d:49:e0:
         12:01:7b:fc:d1:f5:56:67:67:fa:00:92:af:0c:62:fa:d3:51:
         b4:55:c7:28:51:82:ee:56:e7:b5:c4:ed:90:6e:d8:3f:2d:38:
         35:6e:a3:25:dc:7d:ec:aa:f0:48:e3:3b:b4:ff:19:e3:71:2a:
         ef:4f:65:7d:81:93:87:8b:07:de:f7:e1:e6:40:51:a9:00:a2:
         bf:9d:60:4d:4a:35:97:3f:e5:d9:3d:68:d6:ce:cf:6f:34:aa:
         fd:5a:c6:51:e8:33:37:b9:87:3a:53:aa:b8:9d:d4:c8:f1:86:
         e1:f1:0b:16:0c:fd:1f:d4:af:d4:32:9c:3d:f8:61:d4:a8:1b:
         1a:1b:45:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 02:21:26 2025 by rpki-client