Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
File:                     4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft (raw, json)
Hash identifier:          GlNy9SIAd4j28KIIpjZlw3zvfsNF8lNUvrDDrr01xj4=
Subject key identifier:   E5:3A:9F:6B:E3:D3:75:A2:92:CD:A4:24:64:17:85:D6:23:97:DA:7A
Authority key identifier: E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31
Certificate issuer:       /CN=A91278D5/serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
Certificate serial:       0AFF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
Manifest number:          0AE0
Signing time:             Sun 24 Aug 2025 19:27:35 +0000
Manifest this update:     Sun 24 Aug 2025 19:27:35 +0000
Manifest next update:     Sun 31 Aug 2025 19:27:35 +0000
Files and hashes:         1: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl (hash: Gsud8f+CWFil71Hkim8HczStIZi9UMpusg68N24oinw=)
                          2: 19D0C9444D6A11EFB5578F3AC4F9AE02.roa (hash: 0ivrrhOuD8rnlDAlVKRxt/gAlv7oVMt+OxJAV2VhnEQ=)
                          3: 2BACE2284D6B11EF9595843FC4F9AE02.roa (hash: eJEKTYYjPmJgzHgGsGpnpxLPRqE5UDEGdtp3iWb4OV0=)
                          4: 76D38708D64611EE98C44371C4F9AE02.roa (hash: Qz146VM4QvlDNRuGBcUC54NXkp571EsnSbuspPg45Lo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl
                          rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Aug 2025 19:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2815 (0xaff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91278D5, serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
        Validity
            Not Before: Aug 24 19:27:35 2025 GMT
            Not After : Aug 31 19:27:35 2025 GMT
        Subject: CN=68ab67a7-9d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0f:e6:4b:7f:0f:02:93:79:14:5e:ff:f6:84:
                    fc:d9:fa:96:95:e8:9a:e2:b4:8f:97:65:be:ac:14:
                    b9:8a:35:20:a5:de:07:71:8b:3e:b2:0b:4a:cd:f8:
                    40:4e:18:3e:54:49:7d:bf:15:dc:e3:25:20:82:31:
                    6d:ef:19:e8:f0:e7:02:50:71:b5:d1:d4:a9:dd:f8:
                    23:32:78:a6:fc:73:71:c6:94:c4:6e:44:4e:73:c2:
                    8a:27:01:31:ca:69:05:5b:1f:0c:91:a6:a3:b3:b2:
                    ce:0d:8d:6f:19:9c:87:b7:f9:0d:6a:12:aa:7f:d1:
                    fc:a1:fd:75:a4:02:5d:2f:b0:7b:6a:92:2d:e6:2a:
                    17:95:f5:9b:e1:be:0f:1a:a4:c1:1c:ec:74:3a:63:
                    80:6a:08:4a:3a:3b:a1:e3:ce:9c:4f:2b:08:26:e3:
                    ea:7b:a6:ab:c3:23:e9:dc:3e:6d:2b:95:52:4c:0c:
                    7a:85:89:25:2b:94:08:01:72:78:a5:f2:dc:39:96:
                    95:14:7d:59:ff:f2:37:26:b1:42:77:8d:e4:56:1c:
                    3a:80:5c:9b:54:b1:dd:c2:f5:d9:6e:39:ee:a5:40:
                    48:1f:b0:a9:3b:e4:32:18:d0:ab:ba:11:13:da:90:
                    ea:7b:4d:30:bc:06:ae:70:d9:52:7f:f7:b8:45:da:
                    a9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3A:9F:6B:E3:D3:75:A2:92:CD:A4:24:64:17:85:D6:23:97:DA:7A
            X509v3 Authority Key Identifier:
                keyid:E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:54:c6:97:c2:d9:e3:08:3f:52:61:0f:9e:b7:fa:87:2f:eb:
         cc:5c:aa:99:9e:88:ce:fe:a6:00:43:64:a7:b8:95:9e:99:5f:
         cb:66:c8:6f:bd:08:9a:24:1a:6e:38:c0:76:3a:8e:ce:9a:4d:
         6c:2c:3a:22:b8:e0:cf:20:45:c1:ed:c1:b9:42:fa:d1:3b:bd:
         dc:e8:7b:eb:88:fe:90:8a:ec:e8:d4:e6:08:95:b0:fa:3d:4e:
         cc:fb:04:6e:cf:4a:21:47:dc:ab:06:e4:3a:81:00:b5:40:12:
         2a:42:c1:e2:23:c6:ab:93:14:21:d3:b4:ee:73:cc:fc:21:fe:
         b6:ce:b7:c8:21:fc:6c:27:44:bb:49:73:17:25:99:4f:ad:cd:
         24:46:68:92:e0:ce:87:25:e7:39:cf:1c:82:7d:d4:84:e5:81:
         96:eb:7c:fb:fa:e9:0e:d8:1f:56:6d:c6:dd:f8:44:56:92:fa:
         25:2d:86:33:30:64:e8:34:ff:a7:c8:d3:40:6c:9f:ff:7c:88:
         64:e7:b9:ea:c6:48:53:3b:83:97:4b:f7:1b:d7:0e:62:56:4d:
         ff:5f:93:c6:76:4d:6b:c6:11:67:84:c1:34:37:8c:26:ae:3c:
         ee:21:85:f6:9b:ff:a9:42:f6:c8:6c:31:33:cd:1e:b4:71:88:
         82:c6:fb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 22:13:40 2025 by rpki-client