Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
File:                     V1pu0ww3OtQ00VpmXdoudk7Imso.mft (raw, json)
Hash identifier:          +EyZ1SNzTgb+Oohv0NQVNbj0tuAuuiqh6kLoJR3B3D4=
Subject key identifier:   98:A0:F2:11:75:16:83:18:00:41:58:ED:9A:E7:1C:BF:6F:90:05:3E
Authority key identifier: 57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA
Certificate issuer:       /CN=A91827C5/serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
Certificate serial:       B4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
Manifest number:          AE
Signing time:             Fri 05 Sep 2025 06:36:35 +0000
Manifest this update:     Fri 05 Sep 2025 06:36:34 +0000
Manifest next update:     Fri 12 Sep 2025 06:36:34 +0000
Files and hashes:         1: V1pu0ww3OtQ00VpmXdoudk7Imso.crl (hash: EnqYne5IRaW9kpX92ndhYjrmX0UbiXwU2Tm9pg11bTo=)
                          2: 6F591F00671411F0A568F124C4F9AE02.roa (hash: x0s+a8n0tfUspvoFu90euoP3YJ9IRWh7FQTQNg+CfNA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl
                          rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 06:36:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91827C5, serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
        Validity
            Not Before: Sep  5 06:36:34 2025 GMT
            Not After : Sep 12 06:36:34 2025 GMT
        Subject: CN=68ba84f2-5f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:55:b6:d6:13:99:36:94:79:af:91:85:cc:01:
                    bb:76:de:42:7c:6f:37:99:e5:74:86:5f:b2:1c:d7:
                    16:61:2c:1e:c7:40:d7:e5:dd:86:67:4c:2a:4c:7a:
                    1b:e9:69:99:e1:61:98:66:3c:cc:0b:91:a4:2c:9b:
                    3f:83:94:32:85:c8:75:26:49:6e:e1:d5:2e:42:d3:
                    8a:3c:2d:5f:e8:8a:c8:ad:e4:99:6a:d4:95:00:c3:
                    b2:1d:c3:b1:f2:9e:a3:ec:e5:a8:bd:f8:e4:4a:ef:
                    fd:4b:49:21:8b:e0:4f:41:b1:5a:5b:b8:b5:64:2f:
                    f6:0e:51:fe:18:49:fc:d1:89:76:32:66:b1:4f:c2:
                    d9:8e:bd:1f:fa:88:ac:20:a1:99:3d:9c:79:37:7c:
                    af:89:43:83:53:59:bf:5a:01:03:ea:c3:33:83:bf:
                    52:0e:98:6c:04:70:d3:f0:ed:e5:94:e1:41:e2:c9:
                    39:61:08:e6:91:c0:63:12:f8:5a:ef:1f:19:a6:4b:
                    24:1c:40:cb:d5:59:7a:bd:e2:2a:17:56:24:6a:06:
                    44:8b:88:74:05:cb:cf:d5:01:ec:e2:77:02:ac:a1:
                    9b:80:6a:2b:a8:52:a8:1a:a1:f7:a6:94:c0:e7:d6:
                    72:08:78:4b:99:09:5c:a0:ad:95:b4:c0:39:54:3d:
                    c2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A0:F2:11:75:16:83:18:00:41:58:ED:9A:E7:1C:BF:6F:90:05:3E
            X509v3 Authority Key Identifier:
                keyid:57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:00:30:8d:b8:10:e0:b9:f0:38:89:8f:3d:72:3b:6b:8f:3c:
         f1:31:3e:2c:33:dd:df:03:b1:d7:0c:04:c7:44:f8:3f:8f:62:
         3f:b5:ba:20:d9:5b:c1:ed:af:72:8f:37:bb:cb:a2:5a:b6:b1:
         d9:09:3f:ce:9d:14:23:e7:51:10:a7:6d:77:52:88:af:07:a4:
         dd:98:6d:fb:29:a7:f6:ce:0b:70:51:ea:a0:b4:68:5a:d4:46:
         fa:14:20:c5:3f:42:41:ec:e9:4a:df:c3:40:99:54:cd:8b:92:
         8a:43:c5:94:f5:6c:3a:a8:c7:69:9f:1b:99:39:ba:a6:a9:f0:
         28:9c:04:04:24:a9:ab:dd:8b:cb:15:7c:96:1d:e6:86:e6:c9:
         0a:5d:a5:54:a4:59:03:ab:4d:46:94:ae:19:df:95:45:00:9c:
         76:a6:85:36:5a:b1:f3:14:b6:41:d1:db:1e:5c:dd:06:fd:be:
         a4:98:a9:12:94:ca:83:44:8f:be:a2:7f:c5:bf:13:ee:1b:69:
         1b:2f:2c:65:fe:19:79:06:c2:d4:eb:ea:2e:31:e1:ff:ae:8a:
         47:47:e5:08:03:4c:2a:75:c6:e7:ac:ce:8c:3d:82:e0:52:61:
         01:7e:52:cd:81:0c:8b:c8:79:fc:07:cd:8a:2e:c3:9a:da:7f:
         49:48:e4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 21:30:35 2025 by rpki-client