Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
File:                     T191psKYj1i2AwEqjbRFofN9XXI.mft (raw, json)
Hash identifier:          uB6dmDo/nysGc0hd/idKuQypbzzdohZ6kHFGOWVL5hM=
Subject key identifier:   82:52:8B:A9:6A:86:92:09:86:98:92:4E:DF:08:96:6D:B9:8A:5D:59
Authority key identifier: 4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
Certificate issuer:       /CN=A914C3FB/serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Certificate serial:       6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
Manifest number:          62
Signing time:             Sun 07 Sep 2025 07:45:56 +0000
Manifest this update:     Sun 07 Sep 2025 07:45:55 +0000
Manifest next update:     Sun 14 Sep 2025 07:45:55 +0000
Files and hashes:         1: T191psKYj1i2AwEqjbRFofN9XXI.crl (hash: PNYR1DKanooapnwhr78coYIumzWaDA4BOUiTlYFUtjQ=)
                          2: 41E7BB1C0BA211F08457541BC4F9AE02.roa (hash: SLWKUoxyCCrW041ENZCKTkuF3OJqQTSoY0CsLhDIP04=)
                          3: 850942E4325311F081E87832C4F9AE02.roa (hash: YKfa7XcZECRGtp0hZwgH99jMIjA/4Bdgt+cMhZRSKcQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
                          rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 07:45:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C3FB, serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
        Validity
            Not Before: Sep  7 07:45:55 2025 GMT
            Not After : Sep 14 07:45:55 2025 GMT
        Subject: CN=68bd3833-ecb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:23:0e:f9:60:33:8c:0c:af:6e:4d:05:e1:7d:
                    4a:a2:04:4e:28:b7:dc:ed:a1:26:51:d3:3a:47:53:
                    c7:e3:a2:b5:2a:6a:df:c8:d9:5c:54:e1:95:de:03:
                    c6:60:00:68:db:55:6a:ad:36:05:66:7f:fe:df:a5:
                    00:b4:9d:08:6d:ec:4f:98:85:45:86:4c:68:46:7f:
                    34:54:57:49:f4:48:36:69:8f:e1:f3:90:00:16:24:
                    3c:46:42:b4:17:57:34:98:e7:eb:8f:05:9f:c2:f0:
                    c5:8e:67:50:b6:00:c6:4b:fb:6e:f4:e1:b7:91:93:
                    e0:98:9c:35:be:45:a0:c5:e2:21:ef:02:aa:bc:9e:
                    35:3e:f2:c4:63:48:bc:39:21:cb:58:e0:a4:fa:34:
                    0c:66:2a:50:e8:e6:36:02:77:dd:15:33:ab:dc:bf:
                    53:59:c3:7f:80:5f:aa:90:da:f4:97:b4:11:c5:ce:
                    21:dd:3a:2e:85:53:b0:a9:ee:28:17:d3:38:94:c9:
                    66:b8:ee:8d:b4:d1:ca:1c:6d:19:7a:ad:72:64:54:
                    10:ac:5e:19:42:d8:2f:74:ac:0d:82:22:4d:24:85:
                    e3:e1:f4:22:dc:3c:3b:6f:b7:26:5a:c6:47:aa:05:
                    c0:18:e9:7b:3d:50:af:7f:e2:9d:d9:78:29:3e:f0:
                    65:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:52:8B:A9:6A:86:92:09:86:98:92:4E:DF:08:96:6D:B9:8A:5D:59
            X509v3 Authority Key Identifier:
                keyid:4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:e9:e3:ab:89:dd:c6:2f:75:ce:37:0c:78:e5:f5:c5:22:14:
         54:71:ef:d6:43:82:c8:38:eb:cb:bf:d9:43:26:6f:4b:23:33:
         89:ab:72:10:f2:53:19:ed:f2:f7:b3:18:74:58:24:a7:a6:2c:
         0e:60:98:b9:d5:a5:20:01:94:ff:39:2b:e2:e4:2b:83:3c:f2:
         c2:9d:cc:87:c5:e6:f2:fe:61:91:ac:6e:ad:48:33:47:ff:ae:
         df:8f:c4:85:34:b6:30:b2:c0:26:ad:90:47:af:97:90:19:c1:
         bd:79:37:7d:b5:da:3e:39:7d:34:5f:2e:d2:9c:e5:95:86:d7:
         04:f4:77:6a:57:d7:c5:89:93:68:74:03:01:a5:41:17:31:e8:
         b8:dd:cc:48:df:a9:5a:5d:d1:05:30:57:0d:f1:df:71:a3:28:
         b6:22:aa:e1:fb:b3:6d:9a:8a:8e:f8:00:99:43:e1:b1:db:f9:
         09:8d:69:cf:ab:25:de:35:25:2a:05:5c:2e:92:a1:19:25:1f:
         de:5b:0d:b2:c3:61:1c:c5:74:17:8d:45:9c:06:9e:5e:77:f0:
         d1:9e:76:d0:04:c4:8c:6c:63:0b:e9:c1:70:75:cd:7a:15:33:
         56:75:a9:4c:9f:52:1b:9a:60:dd:12:02:20:5b:24:72:27:2d:
         ee:20:f4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 00:39:30 2025 by rpki-client