Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
File:                     u8EDVhr9epMDbRxy3UwKfCpOKc4.mft (raw, json)
Hash identifier:          JNBe4vdyNEWajtlLYc++AERcYOh1lwiWi9o4b9NQHtw=
Subject key identifier:   E5:AD:7D:D8:2C:91:37:E8:46:FE:47:10:26:11:5D:5E:5C:28:46:56
Authority key identifier: BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE
Certificate issuer:       /CN=A91F277D/serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE
Certificate serial:       0681
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
Manifest number:          0669
Signing time:             Sun 20 Jul 2025 22:19:42 +0000
Manifest this update:     Sun 20 Jul 2025 22:19:41 +0000
Manifest next update:     Sun 27 Jul 2025 22:19:41 +0000
Files and hashes:         1: u8EDVhr9epMDbRxy3UwKfCpOKc4.crl (hash: 7ITkw5ZAW9sFSes7Ggv4bMPNB6nFkdcoQRB/hwr04ek=)
                          2: CEF8E22E711711EDB49CE11AC4F9AE02.roa (hash: MXG2UaX3e+u+Jgkl2hW9VaZ5bWI3Hg2FUtWl1xPKFxI=)
                          3: 70A77C348D6C11EBAFD23A2EC4F9AE02.roa (hash: A5KK9SQwb+EDWJ4jMnTUQq3SJ0SvbTU26Y/s1pM+n+I=)
                          4: 0BABC0DCB15D11EB8937582CC4F9AE02.roa (hash: myGu3py2MJoX+9pcsdAEfeXFlVuZbTSedA0MlFyQwmI=)
                          5: 715924988D6C11EBAFD23A2EC4F9AE02.roa (hash: IRx8YlQZD3iZNO8ZkV5fm0YkjEB3fazq27IMfHjcxDQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl
                          rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 22:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1665 (0x681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F277D, serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE
        Validity
            Not Before: Jul 20 22:19:41 2025 GMT
            Not After : Jul 27 22:19:41 2025 GMT
        Subject: CN=687d6b7e-4980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:13:7a:4c:b8:94:2b:35:e8:e7:99:bd:43:b7:
                    cf:38:a3:d5:34:4d:8e:88:3f:77:fd:79:96:84:ed:
                    e3:50:07:41:d9:9e:5b:67:bc:ae:58:c1:23:30:4d:
                    c3:b5:20:77:cb:97:b8:d9:6d:f8:73:fe:20:57:68:
                    e1:5c:85:ad:d2:55:d7:b9:99:0d:9d:2e:15:9b:37:
                    0d:eb:cf:7e:bc:c6:5d:71:95:cd:8c:b2:8f:c2:3e:
                    50:e4:78:a2:c3:bb:bf:b8:51:f3:84:55:3b:46:74:
                    09:5b:4d:93:63:2a:e0:2c:d9:4d:ed:a0:8a:dd:e8:
                    15:5f:14:fd:e3:56:3f:84:02:9e:31:4e:37:59:bd:
                    ce:8d:44:7d:c3:8b:3d:d6:8c:a6:b9:61:23:ec:50:
                    cf:0b:5c:76:93:39:ce:ac:4e:67:25:23:25:68:ab:
                    0d:78:dd:ce:37:cd:63:79:a5:0d:53:89:cf:c7:53:
                    b8:97:34:e2:23:2b:0f:d1:b5:2c:fc:86:85:62:0e:
                    cc:2f:79:cd:06:b4:e4:c4:00:ec:9b:21:f6:ff:c2:
                    ed:51:63:75:20:38:46:9e:b8:73:54:5f:e2:01:4b:
                    ad:8f:2b:ee:c7:99:87:76:06:54:15:87:67:60:24:
                    a9:2d:ab:15:68:00:62:28:91:5a:a8:b0:e6:11:21:
                    b7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AD:7D:D8:2C:91:37:E8:46:FE:47:10:26:11:5D:5E:5C:28:46:56
            X509v3 Authority Key Identifier:
                keyid:BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:31:bd:91:2f:73:cf:8c:6d:1e:6b:f4:be:43:28:3e:4d:e7:
         98:93:77:e9:8c:97:aa:91:b8:6b:8e:6c:4a:b8:20:9d:f2:b9:
         7a:a6:34:85:d8:64:ed:a5:dc:9c:5a:49:a3:3e:29:4d:92:f8:
         2e:d3:2f:10:33:c0:13:2e:aa:c9:dd:61:fa:62:f9:d9:ad:41:
         7f:70:2b:19:81:63:58:4c:20:ef:e7:2b:5f:27:a6:c3:99:e0:
         2d:be:ab:be:29:97:6e:e5:28:68:88:dd:79:9c:88:50:73:10:
         88:ef:8c:9b:96:fb:d8:c7:c2:44:42:25:e0:f7:85:07:40:1d:
         95:63:42:dd:41:49:fe:c7:bd:62:74:b4:24:8b:f1:0a:0b:7b:
         25:86:2e:fd:ab:5a:70:53:2e:bf:55:55:e9:5d:cd:78:e7:e5:
         d3:d4:56:a6:f2:a4:18:1e:46:55:95:33:69:df:c5:fc:4c:1d:
         07:6c:e9:d9:ed:35:c0:a2:28:86:e0:66:40:60:62:d8:55:4c:
         e5:86:47:cd:93:e1:79:7a:2d:0e:44:21:05:99:61:11:0c:ab:
         04:e1:c1:6d:70:a3:25:d1:1c:98:80:bb:d7:90:0d:54:39:40:
         8f:f8:c5:02:53:7a:37:09:be:3a:04:7c:89:8e:d7:b4:d3:73:
         55:86:26:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 12:26:40 2025 by rpki-client