Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.mft
File:                     mqU9J74bthSVPDedOeC7xfHBJKc.mft (raw, json)
Hash identifier:          saNUqTvxRe+xNZxEXSD0p2sEL0vy3000n1a4bfPapJ8=
Subject key identifier:   FC:F1:82:54:7C:75:E8:0C:94:08:F1:DA:FB:26:8B:3E:F1:19:E0:61
Authority key identifier: 9A:A5:3D:27:BE:1B:B6:14:95:3C:37:9D:39:E0:BB:C5:F1:C1:24:A7
Certificate issuer:       /CN=A91814CB/serialNumber=9AA53D27BE1BB614953C379D39E0BBC5F1C124A7
Certificate serial:       0C0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqU9J74bthSVPDedOeC7xfHBJKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.mft
Manifest number:          0BFE
Signing time:             Sun 24 Aug 2025 18:48:17 +0000
Manifest this update:     Sun 24 Aug 2025 18:48:16 +0000
Manifest next update:     Sun 31 Aug 2025 18:48:16 +0000
Files and hashes:         1: mqU9J74bthSVPDedOeC7xfHBJKc.crl (hash: ptUskehNWh3XLFScFL6lrIwrFVb+F5qLYqDNOviUW7c=)
                          2: F4F827D6BB6C11EF80151572C4F9AE02.roa (hash: 25pluhiPmnAm9YwUWup9o5G24MQf1uEQRknQIFNX3KA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.crl
                          rsync://rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqU9J74bthSVPDedOeC7xfHBJKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Aug 2025 18:48:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3082 (0xc0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91814CB, serialNumber=9AA53D27BE1BB614953C379D39E0BBC5F1C124A7
        Validity
            Not Before: Aug 24 18:48:16 2025 GMT
            Not After : Aug 31 18:48:16 2025 GMT
        Subject: CN=68ab5e70-17ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5e:4b:50:f3:c6:74:57:29:35:02:f4:3e:16:
                    09:06:03:ce:c1:fb:1c:d1:7d:f3:cb:93:23:d7:d6:
                    e1:2e:82:f9:2a:51:98:57:9f:94:39:fb:b9:64:b2:
                    f0:23:6d:e8:17:49:ff:86:56:b8:3a:68:70:0c:da:
                    4d:fa:f2:96:97:00:f9:b9:c1:38:27:33:13:c5:b2:
                    53:67:9c:85:7a:c7:45:7c:f4:8d:24:dd:63:09:d1:
                    d4:f9:cf:69:32:2c:ee:6d:68:85:e9:3b:c3:ef:8e:
                    f0:32:53:af:97:27:9b:f8:45:9e:40:2f:fa:16:1f:
                    ee:47:77:2f:ed:5a:cb:bc:b2:a5:19:87:06:99:17:
                    44:66:75:bd:94:f6:ca:ed:f0:9f:3b:b4:15:c9:73:
                    1c:64:2f:f9:2e:5e:4e:0e:9b:40:89:96:87:0f:ca:
                    7f:a4:18:b0:3b:60:f8:2d:29:24:20:b7:d4:31:b5:
                    0a:05:67:0c:a7:0c:ca:f6:9a:92:e8:38:13:3d:3d:
                    c2:7a:56:fc:94:14:16:69:8d:ab:c1:93:3c:e9:5e:
                    fa:57:b0:25:f9:f9:8b:35:d8:03:bf:6e:d9:a5:05:
                    7e:78:7b:a3:ab:22:10:65:2f:35:46:4d:94:79:9b:
                    df:f6:94:f4:09:87:f0:6f:8a:e9:65:8a:7f:de:15:
                    76:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F1:82:54:7C:75:E8:0C:94:08:F1:DA:FB:26:8B:3E:F1:19:E0:61
            X509v3 Authority Key Identifier:
                keyid:9A:A5:3D:27:BE:1B:B6:14:95:3C:37:9D:39:E0:BB:C5:F1:C1:24:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqU9J74bthSVPDedOeC7xfHBJKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:db:cf:11:86:50:8e:07:ca:bc:82:9e:3d:28:ce:2c:ee:5d:
         47:e4:06:bc:23:e0:5e:e3:d8:cc:dd:9c:cf:b6:25:b0:e0:44:
         d6:26:f4:c6:f2:7a:2b:49:63:d9:49:6d:36:5e:75:a6:6a:2f:
         21:16:43:b1:46:a4:85:19:59:ef:81:91:1a:0f:33:cc:5c:23:
         71:ff:3e:9d:df:b9:38:b0:81:70:43:38:49:05:42:b8:7b:e8:
         68:5e:07:70:33:5c:ad:e7:4d:4d:c3:dc:06:81:36:70:f3:98:
         47:0b:09:5b:8d:02:fd:56:85:2b:e1:e6:8c:d9:80:66:87:78:
         a0:3a:71:dd:60:a4:73:6f:b1:40:e6:8a:f8:be:92:ca:07:af:
         4f:6f:16:36:6e:6e:a3:d6:a8:bb:f3:e4:df:6a:d9:97:dc:ef:
         ad:3d:e9:af:bd:4b:4c:e3:96:f8:d3:4d:c3:57:f7:7c:62:a6:
         25:66:0d:74:bc:d1:eb:84:cf:7e:ed:b2:cc:c6:b1:cc:0d:d2:
         1c:e4:4f:d6:d3:3e:f0:fd:9e:f9:36:3b:0d:6b:ae:e3:f0:8b:
         ee:bf:84:27:57:11:6b:97:cd:7e:08:d7:48:74:da:4b:b8:70:
         d2:6c:3a:01:45:5c:26:5a:52:24:b5:e6:2b:8c:c5:f6:cf:c9:
         a3:4d:69:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 21:40:52 2025 by rpki-client