Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
File:                     SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft (raw, json)
Hash identifier:          06sUPgwRd6Fx638WTfpu6haTmEE8VDaIbmSspgpurtc=
Subject key identifier:   A0:6C:45:3A:D6:15:F8:5D:5C:E0:15:74:D5:A4:74:32:37:7D:79:1B
Authority key identifier: 48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F
Certificate issuer:       /CN=A91E563F/serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F
Certificate serial:       08F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
Manifest number:          08DA
Signing time:             Fri 18 Jul 2025 20:41:07 +0000
Manifest this update:     Fri 18 Jul 2025 20:41:07 +0000
Manifest next update:     Fri 25 Jul 2025 20:41:07 +0000
Files and hashes:         1: SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl (hash: Rj5OZp+vUaddyIGOU9FvASzvEHetdxrXKQB7wzj4UKA=)
                          2: E101BEF6BA1111EAA2AF621EC4F9AE02.roa (hash: S4rEl380BTJzcHGG2hyACdGlelyGvU4RyQMTlMFDOTU=)
                          3: EA41FB0EB6A911EAB0EB257EC4F9AE02.roa (hash: +NWxZ4+1DLoMUKpAzUV8GXujacBHu2pkEpYyl5zFIic=)
                          4: EABCE94C932111EE8C70453EC4F9AE02.roa (hash: 3jZ9nHpwySfxwNtadAmSfYTid2BMJXTKTIVS2D09msI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl
                          rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 20:41:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2293 (0x8f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E563F, serialNumber=482016E56A0241FD2D35BFD77BC972E673CE9F2F
        Validity
            Not Before: Jul 18 20:41:07 2025 GMT
            Not After : Jul 25 20:41:07 2025 GMT
        Subject: CN=687ab163-cbfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9a:72:98:bb:5a:0a:43:bd:b2:3c:0f:6f:1f:
                    6a:7d:78:92:17:ac:bd:43:f0:1a:2f:aa:b0:8a:d4:
                    d8:5e:06:05:47:bb:09:38:4e:5d:a4:2b:52:7b:4e:
                    92:a4:4b:32:42:b2:fd:ad:8e:2c:91:d0:21:2b:63:
                    82:a2:67:56:94:ad:24:b7:cc:7e:14:63:7c:9a:c4:
                    76:4e:d0:8f:06:bc:c8:47:18:16:8c:7b:f9:bb:63:
                    e0:1a:eb:d8:b7:59:bb:3e:f6:b1:10:d6:aa:92:37:
                    76:b3:1a:f6:62:40:16:ac:45:6a:79:61:b5:18:14:
                    ab:9a:42:0b:15:37:59:d6:5a:52:d0:00:8b:60:cd:
                    ec:e7:8d:3e:f1:e5:94:a1:13:7a:32:6b:6a:d6:3f:
                    bf:8f:87:5c:eb:92:a5:a1:83:ff:e5:56:7e:30:ca:
                    8a:5f:75:87:c7:dd:b4:39:52:2a:b0:28:af:79:10:
                    86:36:c5:a9:2b:48:ee:55:ca:7d:78:c4:fb:b9:b0:
                    e6:f3:7d:ad:61:5d:0e:39:72:45:01:b4:34:a1:8a:
                    d5:4a:f0:df:77:e4:01:e2:aa:98:9a:af:d2:f5:e9:
                    db:fe:a9:06:b7:cb:b0:4f:90:73:60:3c:cd:cd:00:
                    0a:c3:ce:15:e1:14:4d:0c:12:64:46:10:be:54:a0:
                    6b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6C:45:3A:D6:15:F8:5D:5C:E0:15:74:D5:A4:74:32:37:7D:79:1B
            X509v3 Authority Key Identifier:
                keyid:48:20:16:E5:6A:02:41:FD:2D:35:BF:D7:7B:C9:72:E6:73:CE:9F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SCAW5WoCQf0tNb_Xe8ly5nPOny8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E563F/0AB777DAB6A811EAAEE14F7BC4F9AE02/SCAW5WoCQf0tNb_Xe8ly5nPOny8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:c5:04:5b:4d:be:cc:65:36:6d:e2:83:a7:02:c9:d5:09:0c:
         3c:f6:ce:37:31:ad:4f:f4:cb:a3:50:10:04:b5:93:08:e6:62:
         16:b3:fe:af:4b:94:65:13:92:d3:7d:f9:53:fc:b1:0d:b5:e8:
         3a:d1:ec:f2:be:db:9f:48:09:7e:2f:26:37:65:0f:7c:f0:53:
         1a:a7:0e:90:2d:43:03:0c:ab:e8:43:d7:cd:47:63:95:71:51:
         ca:68:15:51:cc:8d:41:e3:bd:aa:05:48:b3:d4:e7:53:df:8d:
         49:c7:78:c6:f6:32:a0:d9:15:63:d4:40:3d:7b:dd:92:dd:60:
         7e:f7:d5:72:5c:1d:12:d8:6a:fb:53:b0:39:6f:f3:d5:b7:0b:
         ca:a8:21:bc:62:cd:95:26:b4:3b:7e:eb:f7:d3:2b:87:db:11:
         d0:36:cb:ea:77:2c:da:5d:61:e1:64:f0:80:c0:4b:3d:80:c7:
         c5:e5:e8:8b:e8:4f:b3:85:6d:06:4a:60:e0:36:2f:59:b5:12:
         00:cb:d2:4f:29:a0:36:98:bc:2b:d3:d7:72:aa:6d:b2:d4:8c:
         23:77:11:57:34:fa:43:4b:dd:e2:e8:b9:95:8f:70:27:d8:dc:
         f9:b1:86:1a:07:3d:99:be:87:ff:62:28:24:10:99:a5:3b:2d:
         af:73:7e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:22:58 2025 by rpki-client