Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
File:                     _qutkjWu8XAjzc-xYZAm887bLH8.mft (raw, json)
Hash identifier:          mOaQeDBwuc2pnUl8xTkm6CC60b7vH7pHGTgS3S42nEo=
Subject key identifier:   4A:50:03:A8:BE:2A:16:19:CB:FD:1D:E6:F7:FF:FA:45:71:6D:25:3A
Authority key identifier: FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F
Certificate issuer:       /CN=A91443DC/serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
Certificate serial:       F0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
Manifest number:          EA
Signing time:             Tue 09 Sep 2025 05:29:09 +0000
Manifest this update:     Tue 09 Sep 2025 05:29:08 +0000
Manifest next update:     Tue 16 Sep 2025 05:29:08 +0000
Files and hashes:         1: _qutkjWu8XAjzc-xYZAm887bLH8.crl (hash: HsoprXHX95G2UCPh51x0dII3GbVCD43q5Jf8aCVgQVU=)
                          2: 557F3136DCA511EF98B72959C4F9AE02.roa (hash: cnxNZMj+QIRmXguv60UDDfKFR7YxS7hEgIs9b4OWAQ4=)
                          3: D4F9C46CDCA511EF9BCCFC59C4F9AE02.roa (hash: LbYezAC7HKWWVmK2xlsMHinqwJv1mR2uQHqkC2s/mFI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl
                          rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 05:29:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91443DC, serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
        Validity
            Not Before: Sep  9 05:29:08 2025 GMT
            Not After : Sep 16 05:29:08 2025 GMT
        Subject: CN=68bfbb25-2fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d5:a7:53:ea:2a:38:e2:0f:44:73:f9:59:18:
                    c6:4e:2c:09:d0:72:82:db:c0:f6:e4:91:0e:21:90:
                    a5:2c:0d:e8:e3:b4:be:13:e5:c1:cf:a6:40:1a:a1:
                    d5:15:17:28:99:4f:fb:86:64:90:d0:09:d2:fe:d1:
                    a0:a1:22:94:9b:96:9c:1b:90:30:60:11:22:9d:af:
                    ab:d8:f3:64:06:ef:13:bf:19:51:8c:a4:ad:84:d3:
                    0c:dd:02:0e:1b:67:e6:18:ce:2a:39:d4:3b:d4:51:
                    53:b2:2b:d1:4a:2c:40:11:02:d2:c5:83:a1:40:d3:
                    a6:ca:3f:96:f4:3f:08:fa:b6:cb:b7:95:3a:45:e4:
                    2f:03:b9:b2:88:d5:55:19:90:38:fd:01:84:b4:c2:
                    00:92:e2:b8:f3:50:61:0a:a9:88:96:d0:6f:4c:f2:
                    f0:95:ba:80:c0:6e:b0:9d:cf:c9:84:60:26:ea:9e:
                    0c:bb:30:1b:d7:5f:32:ae:eb:bb:9d:b6:39:1e:95:
                    c6:c6:93:6e:63:27:3e:b2:e9:8a:7f:fb:5d:08:75:
                    d3:91:e8:47:bd:1c:79:5e:73:16:cb:a4:20:e9:d1:
                    52:fd:79:3b:b7:a6:14:0a:b0:8b:6d:0b:ca:d2:0d:
                    51:74:b2:2a:7f:04:e1:9e:f0:8a:21:a2:b2:c1:d3:
                    db:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:50:03:A8:BE:2A:16:19:CB:FD:1D:E6:F7:FF:FA:45:71:6D:25:3A
            X509v3 Authority Key Identifier:
                keyid:FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:5e:44:e3:31:bd:87:a5:e5:1f:a4:51:94:c4:d0:90:54:73:
         d0:6b:8d:d3:3f:c4:34:da:ee:54:96:c3:c6:74:b8:9b:f2:66:
         67:e5:f5:c8:d4:52:c3:78:ce:0a:e0:af:a2:cb:f7:7c:da:87:
         82:e4:47:89:9b:33:73:77:c4:7c:4e:bf:86:59:33:0f:84:ec:
         f8:54:45:31:6a:49:04:05:bd:54:af:32:91:c7:72:7b:2f:02:
         b2:71:70:02:ff:7d:c6:52:41:55:91:51:d4:29:26:be:44:78:
         60:58:6f:27:59:38:61:2a:fe:78:67:ad:13:cd:65:a9:4b:68:
         23:a2:ca:ca:01:1e:8e:f1:cd:1d:98:f2:f4:05:4b:78:2e:ca:
         4c:d8:56:94:51:9e:5c:88:53:5d:32:d2:89:02:07:fa:f7:b5:
         a7:c7:b9:6e:d7:c1:d6:38:7c:27:a0:ec:2b:8e:5b:2b:6a:6d:
         d5:56:15:ed:e1:29:47:be:8b:54:d4:0d:6c:a5:ce:ee:11:a8:
         45:c0:01:c4:f3:ca:b9:28:88:c1:1d:ab:c6:98:83:b6:f0:b2:
         90:85:7d:a1:9e:80:e8:81:40:94:5b:2f:03:b8:35:32:6e:07:
         33:9e:ff:c1:82:04:4d:c3:71:90:32:21:ab:31:54:8e:f1:8b:
         7c:99:6e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:31:53 2025 by rpki-client