Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
File:                     5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft (raw, json)
Hash identifier:          RnIzcaYFSjA3ESrNITCcCYUq2b+OqAEz9uCs8SVpWAs=
Subject key identifier:   69:5B:07:E7:76:23:38:B5:34:B3:2F:C3:7A:F8:7F:73:11:90:88:71
Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03
Certificate issuer:       /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
Certificate serial:       08DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
Manifest number:          08D1
Signing time:             Sat 06 Sep 2025 20:37:51 +0000
Manifest this update:     Sat 06 Sep 2025 20:37:50 +0000
Manifest next update:     Sat 13 Sep 2025 20:37:50 +0000
Files and hashes:         1: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl (hash: eGAjWgoaulOJ8yj/7KfVAw7CvYPaaaXuieMDFYYjoF0=)
                          2: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (hash: JY394gUy9qqM6BqtEt3A+TeeEC3ZSaP+KRzIxp12INs=)
                          3: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (hash: pwrQo06SW1WaZHmpSMN3Di6drTMadsg0IhrZWaRW7r4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl
                          rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 20:37:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2268 (0x8dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
        Validity
            Not Before: Sep  6 20:37:50 2025 GMT
            Not After : Sep 13 20:37:50 2025 GMT
        Subject: CN=68bc9b9f-ed8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b7:f1:94:14:03:bb:76:7d:58:c1:c8:5a:7d:
                    f7:98:5e:f9:53:35:f9:85:b6:a4:70:01:51:7d:ce:
                    ad:fe:86:5f:c4:2c:19:d3:b0:28:bd:ee:56:31:d3:
                    3a:34:d1:b2:c5:bf:7c:1c:bf:fb:d1:a2:b4:52:1b:
                    6b:f0:dc:d4:f8:51:11:90:58:3b:f1:ec:ac:83:a1:
                    d6:88:a3:7c:91:17:fb:bb:59:05:c9:80:cb:b3:da:
                    44:78:aa:4b:84:86:07:49:3f:a4:63:ae:b0:6c:c9:
                    23:b3:70:e8:fa:f0:05:33:4e:12:d4:04:2f:73:bd:
                    a0:1c:22:4f:ce:8a:6f:8f:64:65:be:23:5b:33:4e:
                    cd:89:3c:84:0d:8a:86:76:f3:3f:06:16:cf:50:2c:
                    53:2c:06:b8:70:bc:1c:8a:96:52:2a:88:76:ac:0c:
                    5e:a8:a1:4e:42:ee:b4:72:5c:a0:2e:45:19:b8:3b:
                    1e:7d:73:84:78:31:61:51:a0:d0:cb:2f:2e:15:35:
                    b2:65:bb:7d:82:46:66:51:39:21:2d:8d:9a:8f:fb:
                    cb:5d:5f:0b:48:73:75:06:97:69:61:c1:56:e8:76:
                    74:86:70:af:2b:45:70:ac:06:fc:33:17:9a:15:12:
                    5e:e8:3e:1f:83:78:24:0c:7e:fd:92:de:2f:a5:20:
                    22:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5B:07:E7:76:23:38:B5:34:B3:2F:C3:7A:F8:7F:73:11:90:88:71
            X509v3 Authority Key Identifier:
                keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:10:9c:3c:de:c2:8f:3e:53:f0:dc:fa:b3:bf:3a:bb:0c:4e:
         d9:4a:4c:4c:9c:83:7f:17:7b:10:36:80:c2:a2:52:39:8b:e1:
         62:15:10:40:88:9b:d2:cf:94:60:91:41:24:64:60:be:e9:4e:
         48:d1:77:6a:71:48:a5:4c:38:f2:41:b0:c8:2e:3c:28:34:7d:
         2a:56:d3:a4:da:fb:14:c2:57:68:d3:6e:0f:5c:67:8d:91:9c:
         49:fb:0f:1a:1d:3b:7c:4a:0a:6d:1b:29:06:3e:f5:96:c5:08:
         ae:e9:42:f2:42:60:a4:15:31:0f:fa:0b:96:33:a6:af:10:bc:
         fa:a6:da:1b:70:5c:53:ec:ca:bf:47:d4:6c:2f:65:2e:80:18:
         e3:7f:ed:90:0f:4f:58:9e:27:c9:a3:40:5a:59:4d:4f:6e:c3:
         c4:e2:a9:fd:90:18:0a:1c:9f:aa:9f:8c:0a:a7:67:60:fd:16:
         7a:90:ed:01:a5:f2:df:f2:93:29:ba:17:d3:55:ea:00:1e:3f:
         45:d8:d3:36:29:1e:38:a3:db:1a:b5:21:37:47:0a:1d:9b:f9:
         94:b2:6b:9d:30:4d:ca:6f:73:89:94:f5:ee:95:ea:33:56:f5:
         b4:41:a4:bb:45:b7:e2:98:7e:ca:16:25:34:d3:90:66:6e:6c:
         51:b6:50:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 03:07:01 2025 by rpki-client