Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
File:                     G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft (raw, json)
Hash identifier:          ALC5nz8gL9TDkgo3+Pc6AnWT/OClUxSWkhqiNeP7MKY=
Subject key identifier:   02:DE:B8:7D:F6:59:FB:1A:FE:F3:8F:3B:04:0D:76:D2:74:D9:EF:0F
Authority key identifier: 1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52
Certificate issuer:       /CN=A91F67BB/serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752
Certificate serial:       1176
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
Manifest number:          114F
Signing time:             Fri 18 Jul 2025 17:24:29 +0000
Manifest this update:     Fri 18 Jul 2025 17:24:29 +0000
Manifest next update:     Fri 25 Jul 2025 17:24:29 +0000
Files and hashes:         1: G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl (hash: M6/cy5CcYxdVPFfW6+r/BDxQeryl3VE/vtwR6JqP6qA=)
                          2: 294F19380E5111E988F3C34BC4F9AE02.roa (hash: QAHQPcFmHI85jnhx3yTg0Uyrxvkcct/mLJCXfcGhkyU=)
                          3: FB675E140F0311E997412A4EC4F9AE02.roa (hash: nR4PLCRvWUgAotRGtX9lE5KuM6BWBXj0rPbeaYR4XNg=)
                          4: FAC7FE320F0311E997412A4EC4F9AE02.roa (hash: V2NhhwUM+gXJ6K0MxfFES/mwWiEj/nQp8QceYienoFY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl
                          rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 17:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4470 (0x1176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F67BB, serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752
        Validity
            Not Before: Jul 18 17:24:29 2025 GMT
            Not After : Jul 25 17:24:29 2025 GMT
        Subject: CN=687a834d-64e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:72:47:cb:76:d5:fc:36:76:cd:6c:b3:6f:af:
                    37:36:a7:5d:7a:99:4e:51:56:b6:f1:d4:4c:b8:f7:
                    3f:75:be:17:ff:6c:0a:64:6f:92:22:dc:02:1e:d7:
                    d4:53:65:3e:ff:2f:50:bd:1b:5b:d6:83:94:e8:d3:
                    9a:34:4a:ba:f6:22:05:41:3c:46:7b:8e:87:70:75:
                    36:7d:c2:ac:bf:f5:4e:75:62:31:50:0f:f3:ea:32:
                    49:54:3e:e0:23:67:df:63:89:a6:9d:70:09:11:5f:
                    7d:81:ec:da:3f:b1:b3:be:b1:40:9e:3f:e3:be:23:
                    2a:1f:58:df:af:4a:3c:24:45:0a:6e:ae:63:b5:0f:
                    c7:2c:ea:66:6a:d5:9d:0a:85:2c:dc:89:95:e4:7f:
                    5b:57:5c:4d:79:65:06:74:0b:a5:81:9d:22:f4:5b:
                    4b:09:06:53:ff:55:93:bf:be:81:35:4d:32:0e:0a:
                    f3:73:ca:33:55:a8:62:b5:fc:8a:ff:c1:dd:0c:59:
                    26:2f:07:e9:e1:f3:5e:6b:36:89:47:5d:2f:d6:ee:
                    78:3c:5b:07:1e:83:9e:a4:38:eb:0d:f0:d3:8d:d5:
                    a5:8e:17:73:18:de:1f:d6:a5:19:7f:5a:2b:55:47:
                    b0:a5:8e:cc:74:37:44:c4:7b:aa:fe:b6:01:65:50:
                    c9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DE:B8:7D:F6:59:FB:1A:FE:F3:8F:3B:04:0D:76:D2:74:D9:EF:0F
            X509v3 Authority Key Identifier:
                keyid:1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:5b:3c:2f:39:ad:69:8b:a2:58:a6:6f:56:ec:96:4b:39:67:
         4a:14:17:46:81:8d:ae:b6:28:ce:03:ef:0f:7e:c4:ec:93:46:
         12:1e:7f:7e:b0:dc:8e:93:62:47:19:d2:b4:69:b3:1e:09:b1:
         37:14:6c:6b:54:5b:6c:5a:97:4b:4f:ae:41:d1:ff:6d:8e:b0:
         2c:b4:70:16:24:fa:ec:45:08:7f:f5:16:de:40:d4:68:c0:9e:
         30:4e:c7:98:2c:2c:ec:14:35:ff:e9:0c:3e:60:fe:a0:db:ad:
         61:c6:d7:f3:67:97:3d:19:33:fc:2b:c9:43:ae:2b:1c:df:95:
         7f:fc:1b:fa:f7:1e:0f:f9:c3:c5:8a:aa:16:17:a8:d3:01:66:
         6a:3c:13:23:f5:c6:1f:77:53:e4:4d:24:c1:6e:8b:5e:28:3d:
         59:84:ca:ff:8c:f9:7d:d4:c8:c3:00:a1:8c:5f:77:b0:ca:eb:
         9b:d7:0a:29:99:7a:69:50:07:0f:1e:8c:be:26:1c:c0:30:9a:
         4b:8c:e0:89:86:e9:f9:a1:59:50:78:9a:19:72:b0:fe:62:dc:
         6e:ed:a9:08:f8:35:a9:a8:04:84:69:2c:9f:5f:41:9b:1c:95:
         53:73:cb:a9:f1:bf:63:27:34:ae:48:74:93:6c:28:30:73:b3:
         22:b7:8a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 06:14:55 2025 by rpki-client