Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft
File:                     _SW6lhEBtc5gFJk850iP228IpCM.mft (raw, json)
Hash identifier:          k8aaBO56tWBMVLFDBRRaLcw0w7aYcymBJR85xbElwoI=
Subject key identifier:   E1:09:47:B9:56:F9:AC:6B:6E:1F:F5:5B:58:19:8F:60:62:30:FE:AA
Authority key identifier: FD:25:BA:96:11:01:B5:CE:60:14:99:3C:E7:48:8F:DB:6F:08:A4:23
Certificate issuer:       /CN=A91F0CF4/serialNumber=FD25BA961101B5CE6014993CE7488FDB6F08A423
Certificate serial:       0835
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft
Manifest number:          13F5
Signing time:             Sun 20 Jul 2025 18:57:20 +0000
Manifest this update:     Sun 20 Jul 2025 18:57:20 +0000
Manifest next update:     Sun 27 Jul 2025 18:57:20 +0000
Files and hashes:         1: _SW6lhEBtc5gFJk850iP228IpCM.crl (hash: GTbmP36sKUidpZ0fA5xMcXErgDr2C9PmiR1ZKYmbe74=)
                          2: 9412C93EDC6F11EABFEF2548C4F9AE02.roa (hash: rU8D6mpdC1BmC/amQMPPP7kqQ/zxbdarw0Ro6gKcd88=)
                          3: 949F398CDC6F11EABFEF2548C4F9AE02.roa (hash: IQeY/vSsnV7lGmsF5ET0EctBxomkDxr65Km/1S0yvs0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.crl
                          rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 18:57:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2101 (0x835)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0CF4, serialNumber=FD25BA961101B5CE6014993CE7488FDB6F08A423
        Validity
            Not Before: Jul 20 18:57:20 2025 GMT
            Not After : Jul 27 18:57:20 2025 GMT
        Subject: CN=687d3c10-4313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2a:64:26:f1:86:85:68:7a:22:14:77:6e:db:
                    e9:29:77:9e:d9:9e:a6:aa:d0:65:2f:a3:79:5e:24:
                    f5:cd:28:35:d2:84:7e:6c:76:d1:e2:f8:3b:b7:27:
                    59:1d:ee:53:ce:ef:e9:de:3d:06:e8:fd:29:2f:bd:
                    76:f0:36:fa:57:dc:83:62:54:d5:a5:39:0d:ae:9b:
                    9e:33:5d:ca:fd:70:e4:6d:36:7c:05:a3:ad:88:ae:
                    d1:e2:27:f1:de:a2:2c:59:b4:7e:56:a1:75:8b:6e:
                    c2:d3:af:e1:1d:df:2e:bd:e9:1b:85:22:89:e6:5e:
                    ec:db:2a:f5:25:27:08:81:ff:2b:9d:1c:a8:41:40:
                    ea:26:35:89:00:16:63:76:31:70:fe:40:5b:01:aa:
                    6e:75:e6:ff:cc:73:49:5b:25:18:78:e1:4d:79:b5:
                    43:6e:bb:56:8d:49:31:cf:3e:a2:c5:7b:36:53:93:
                    2f:e5:52:ea:2c:f4:c3:a1:ba:2c:e6:f2:b2:db:c8:
                    22:53:75:1c:47:eb:fb:19:d8:6d:8e:b1:77:1a:a7:
                    a9:e4:34:48:ba:0b:1a:d8:2f:12:93:50:1a:0d:65:
                    2a:b0:96:1f:5f:94:8c:b2:6e:7d:d4:f4:01:89:f0:
                    47:95:61:6b:bd:0d:83:6f:3c:4f:16:3a:ff:ee:76:
                    6e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:09:47:B9:56:F9:AC:6B:6E:1F:F5:5B:58:19:8F:60:62:30:FE:AA
            X509v3 Authority Key Identifier:
                keyid:FD:25:BA:96:11:01:B5:CE:60:14:99:3C:E7:48:8F:DB:6F:08:A4:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_SW6lhEBtc5gFJk850iP228IpCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/_SW6lhEBtc5gFJk850iP228IpCM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:6b:62:d9:23:5b:e1:8b:92:00:05:2f:51:fb:55:54:48:8a:
         b1:89:ef:eb:f1:98:18:b2:a8:47:b6:7e:2b:7b:f6:5a:7d:f1:
         db:d7:1c:ac:4d:8e:de:d6:d5:95:a7:10:b2:60:8f:e2:9d:27:
         3b:bf:22:3f:ca:c2:5f:64:e7:c1:19:f0:83:f6:16:b2:7b:97:
         99:97:6f:fb:23:72:35:1b:0f:e4:de:c6:16:64:bc:80:8d:e6:
         d1:f6:64:96:42:31:c4:38:91:90:a2:cd:4e:a3:d2:2b:ed:ce:
         17:4f:de:05:0f:06:dc:60:60:42:a6:4a:e1:18:56:43:c8:17:
         ea:a6:a8:ca:4c:e3:9c:bb:57:ec:4b:66:4e:48:a1:5b:d5:7b:
         8f:79:ae:b1:81:3f:be:1c:21:bc:3a:b1:e6:1b:62:28:da:9a:
         ed:52:f1:a3:e4:31:ec:00:c0:b9:93:8c:e6:07:79:ff:e8:61:
         66:da:75:00:9b:ff:3b:73:5a:cb:ca:d6:e6:71:3d:be:66:2f:
         5f:b2:29:08:68:fa:f6:6a:d1:c3:8b:50:e0:2f:45:9b:80:3d:
         3d:88:26:08:12:60:b0:37:3f:21:30:c7:a7:ce:17:62:5b:8f:
         74:b5:b9:9b:e3:6a:1c:76:4e:8a:33:e0:90:0a:75:ca:23:c9:
         a0:80:6f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 06:14:03 2025 by rpki-client