Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft
File:                     83VHbzI13D1SUXHivpIRY45JCEc.mft (raw, json)
Hash identifier:          cc4ByO7W+RDB9p39D1lYU6K7yY4KiRnaVjNuxzlWqzg=
Subject key identifier:   58:AD:4A:8B:19:38:CB:B6:8F:9A:A9:FB:2A:97:1D:3C:48:D9:E3:54
Authority key identifier: F3:75:47:6F:32:35:DC:3D:52:51:71:E2:BE:92:11:63:8E:49:08:47
Certificate issuer:       /CN=A91627F9/serialNumber=F375476F3235DC3D525171E2BE9211638E490847
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft
Manifest number:          72
Signing time:             Fri 05 Sep 2025 07:26:00 +0000
Manifest this update:     Fri 05 Sep 2025 07:26:00 +0000
Manifest next update:     Fri 12 Sep 2025 07:26:00 +0000
Files and hashes:         1: 83VHbzI13D1SUXHivpIRY45JCEc.crl (hash: AypQQavLeBqXqWb5dnlNhsTiz5u32BktW5hYUYNDT0I=)
                          2: BA8DB662085911F082EDFD31C4F9AE02.roa (hash: +kDevtWz9Zb8E9hUtq+Uoh1dNdwrgx3ww0ByNbhsSc4=)
                          3: 99E2D388E9C411EFAFABDD0BC4F9AE02.roa (hash: HyBY5t49VXGObL7xNBvYsj3P5DUndJz8OLCiO0M3LtI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.crl
                          rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 07:25:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91627F9, serialNumber=F375476F3235DC3D525171E2BE9211638E490847
        Validity
            Not Before: Sep  5 07:26:00 2025 GMT
            Not After : Sep 12 07:26:00 2025 GMT
        Subject: CN=68ba9088-acc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e9:87:e4:b0:21:f8:f9:1d:85:f9:cb:87:af:
                    46:ea:d7:8e:68:87:5f:e5:05:64:8b:80:cb:e6:13:
                    0a:ca:60:3e:82:e7:9e:a6:b3:0e:59:cd:d6:2e:9e:
                    0d:ce:65:35:93:d1:f5:5b:50:58:60:86:17:09:be:
                    53:fb:26:2f:14:a3:28:74:ff:8b:fd:81:04:0d:97:
                    f3:1b:97:be:88:3d:86:20:92:12:41:1a:69:18:6c:
                    de:7d:a2:19:fb:f6:8c:45:ca:bf:aa:f2:ab:b8:84:
                    5c:db:b5:da:0c:8e:33:3f:13:14:e8:42:cb:03:8c:
                    6d:a8:2d:6b:0c:6c:ec:07:68:eb:a1:52:6c:d4:70:
                    88:7c:fc:0e:13:82:02:22:c8:32:06:e1:f5:31:ec:
                    1f:0c:b4:55:98:81:7b:26:6b:23:80:85:fb:e1:c9:
                    ed:a0:ea:d6:5c:24:08:7c:8b:43:5e:0d:c9:ff:84:
                    5c:60:79:27:07:b0:d3:4e:27:bb:ef:c9:1e:c6:9b:
                    75:2d:12:66:4f:23:33:7a:42:0a:d2:c6:7f:25:27:
                    9f:d7:6b:4a:25:fe:7f:96:7c:89:76:e2:5c:b9:31:
                    1b:7d:a9:bd:35:fa:82:32:08:d3:25:a7:f9:43:0e:
                    8d:99:b2:cb:39:14:be:1b:b9:d4:89:39:76:8e:35:
                    e0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:AD:4A:8B:19:38:CB:B6:8F:9A:A9:FB:2A:97:1D:3C:48:D9:E3:54
            X509v3 Authority Key Identifier:
                keyid:F3:75:47:6F:32:35:DC:3D:52:51:71:E2:BE:92:11:63:8E:49:08:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83VHbzI13D1SUXHivpIRY45JCEc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627F9/288DF14AE9C411EF9920930AC4F9AE02/83VHbzI13D1SUXHivpIRY45JCEc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:8c:e6:ad:72:9a:b2:47:2f:f1:7d:a4:2c:5c:37:dd:9a:cd:
         ac:7b:72:68:da:cb:96:7c:6a:b0:37:5a:97:97:23:c6:bb:00:
         0f:68:2a:fe:3c:05:28:7e:42:3a:ef:97:36:f8:17:71:10:0a:
         7d:9f:ae:f6:e6:e0:de:fe:35:05:56:20:ed:a7:76:68:d6:e7:
         b0:b2:00:26:32:de:30:cf:8d:75:de:8c:c2:6a:27:00:ae:d2:
         11:52:fd:69:b6:57:16:ce:90:f6:1d:de:9a:01:65:b5:3d:ef:
         3f:54:01:1a:85:43:a0:59:21:9c:e8:fc:7f:c6:32:e7:15:96:
         4f:7d:48:dd:5b:01:ce:32:dc:ab:db:75:02:16:4f:80:b8:f4:
         d4:cc:f0:c5:cf:69:94:90:72:18:97:87:72:9a:67:bc:05:14:
         38:82:36:c5:45:35:62:5e:f0:de:c2:02:9b:95:31:15:89:ed:
         a2:7b:59:78:41:11:74:e2:2b:1d:d4:2a:47:5c:c5:18:43:9f:
         43:bf:c3:bb:34:38:24:47:2f:c1:f2:e7:31:d4:77:02:9e:02:
         a0:1f:21:a2:9e:94:96:54:53:0d:d3:25:1e:b7:6b:50:3b:86:
         4a:01:6a:b0:1a:49:18:b3:0b:3a:5b:ed:c6:d7:94:ad:bc:4e:
         00:74:19:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 07:02:49 2025 by rpki-client