Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
File:                     rea1d9VLWrCQBc5hO7E2SGUuams.mft (raw, json)
Hash identifier:          083EFYBw0XnFOgTrVhRfBrjyTjI1Hy6qYaSx9yJWRdc=
Subject key identifier:   9C:60:AF:10:79:A3:9F:34:A7:85:7B:48:44:6C:90:03:94:DF:6A:77
Authority key identifier: AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B
Certificate issuer:       /CN=A91F4553/serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B
Certificate serial:       0573
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
Manifest number:          056E
Signing time:             Fri 18 Jul 2025 23:39:44 +0000
Manifest this update:     Fri 18 Jul 2025 23:39:43 +0000
Manifest next update:     Fri 25 Jul 2025 23:39:43 +0000
Files and hashes:         1: rea1d9VLWrCQBc5hO7E2SGUuams.crl (hash: h8VFr4J5+/x2OmmnaH/3T1y6xq6/yXQuEhm4euqQ3vs=)
                          2: A1491F7CEB7811EB9134133BC4F9AE02.roa (hash: C9U0iPB8A/9VqWcnQG5AxuP08um0L5X8KsDf++uFfPM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl
                          rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 23:39:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1395 (0x573)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4553, serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B
        Validity
            Not Before: Jul 18 23:39:43 2025 GMT
            Not After : Jul 25 23:39:43 2025 GMT
        Subject: CN=687adb40-962a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:aa:af:bc:cc:c3:90:45:7c:0b:6f:62:15:84:
                    c7:1f:34:b7:c2:56:ac:33:d1:51:bd:18:1f:70:38:
                    db:93:5e:79:01:c0:a2:21:3a:01:99:2d:d2:e9:79:
                    bd:42:1b:f4:fa:49:97:94:f2:46:7f:5d:3a:8f:f8:
                    cb:a2:93:5b:4f:78:1f:09:ea:e4:a7:54:00:d3:76:
                    db:2b:87:bf:27:e2:da:c1:7d:ac:3e:4b:8b:e0:fd:
                    6a:c4:cf:d0:7c:13:d6:aa:3e:16:8b:69:ba:aa:f3:
                    14:4b:61:fc:ac:5a:fa:d0:9f:53:d7:15:48:76:d3:
                    01:c1:85:fc:24:bc:53:f4:2d:a0:8c:57:33:70:30:
                    8d:63:ec:da:03:1b:3e:b3:8c:08:4e:d9:d3:c1:58:
                    01:61:58:81:10:70:28:4e:36:f2:6b:fd:d6:6a:eb:
                    d8:8b:40:4e:58:22:c0:5d:50:cd:5a:c3:27:03:a7:
                    b4:63:0b:51:d0:62:17:bd:13:7e:e9:64:34:c2:c2:
                    84:92:a8:4d:0c:3d:cc:ca:9e:4a:e5:3f:e5:a9:6e:
                    f0:68:0d:1d:f1:fb:c5:c6:d2:2a:c2:fa:32:af:b7:
                    0f:70:e7:a8:e4:c8:40:fb:45:83:b5:39:eb:3d:44:
                    83:90:ae:d3:00:5a:19:e3:16:ef:61:e3:17:a0:14:
                    53:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:60:AF:10:79:A3:9F:34:A7:85:7B:48:44:6C:90:03:94:DF:6A:77
            X509v3 Authority Key Identifier:
                keyid:AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:b7:43:23:b4:14:91:e5:50:32:6e:48:15:f4:d2:7c:73:60:
         79:be:11:08:60:48:69:a9:43:8a:9e:15:f7:29:57:82:94:5c:
         bc:47:8f:63:0b:94:31:82:b3:5e:d5:b7:b8:37:e1:2f:05:5c:
         31:4a:ff:a9:83:fa:3e:3d:3f:46:f1:e9:40:31:d2:9e:1b:0f:
         71:c0:35:80:cb:9e:34:07:ea:6d:e6:98:cb:da:19:d0:b6:3b:
         57:b8:07:3e:76:e4:c4:5b:07:07:02:dc:f1:fd:73:c1:e7:71:
         bb:a0:a7:7d:e1:1a:1a:9d:06:65:96:d1:60:3d:ac:7e:1b:be:
         ee:69:e8:2e:d9:5f:e1:cb:4e:29:e5:d8:82:87:00:c1:9b:7c:
         5a:a1:56:71:fd:e5:14:d9:cd:62:63:b1:81:07:42:45:67:75:
         18:15:7a:8c:6d:ca:60:6b:cd:eb:80:9c:b8:ba:4d:7e:d4:0d:
         86:c2:3d:5d:52:d3:82:69:4c:5d:33:18:ee:3d:c0:0d:8a:69:
         42:b6:f4:c9:9f:6b:ff:68:92:29:3a:ad:71:7d:25:ae:f5:c2:
         ee:29:ab:79:fb:ea:e8:f8:56:f5:ce:5f:16:48:7e:a2:3a:5f:
         19:e5:22:aa:c4:10:10:50:d4:dd:31:e3:69:94:bc:78:f0:c5:
         05:af:df:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:04:03 2025 by rpki-client