Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
File:                     gnj0fexbetwgGJf5m8xuK_qI0BU.mft (raw, json)
Hash identifier:          mxPIKoYuQXzDfCu7D9S02aoodQwnUCfsnDZyjTcJkdo=
Subject key identifier:   00:6D:94:A7:AF:DD:82:30:B3:6F:5E:9B:FA:D4:7F:BF:CA:3F:E2:30
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       3FA0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
Manifest number:          3B2D
Signing time:             Sat 06 Sep 2025 14:20:19 +0000
Manifest this update:     Sat 06 Sep 2025 14:20:19 +0000
Manifest next update:     Sat 13 Sep 2025 14:20:19 +0000
Files and hashes:         1: gnj0fexbetwgGJf5m8xuK_qI0BU.crl (hash: 8HjFQ/1SE9UctFA99Mk7k9+kiH7DW7vm3rbhZBMUXtI=)
                          2: F0F17BEC9D5911EEAA9F0413C4F9AE02.roa (hash: zIbTXKElzSRDJDgFmgpHOKMMizwQLMFjRvUcTHCmSxI=)
                          3: EF57185A9D5911EEAA9F0413C4F9AE02.roa (hash: +mgdTNP414SUTOGaWf8OsfORlNcz2M/R4gZld0HJ9Ck=)
                          4: F025BAB69D5911EEAA9F0413C4F9AE02.roa (hash: zGDGvlgT7VbRq78nqt2KCJawvdgk5RBzL4wyIDNIpkw=)
                          5: 9703DB3A870311F099FAB64CC4F9AE02.roa (hash: o3x3WNu8DVpOALptWI63rwh2Z21Ks2owpGrEUHSGlCk=)
                          6: AF4D576AC55E11E9A634E487C4F9AE02.roa (hash: TQSzjpxrOYYy8gpn8cpyl7UgdqE6NAtOL8QTPBk1Mrs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
                          rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 14:20:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16288 (0x3fa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E, serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: Sep  6 14:20:19 2025 GMT
            Not After : Sep 13 14:20:19 2025 GMT
        Subject: CN=68bc4323-f269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5d:8f:6f:45:51:88:e2:c7:18:6f:f2:0a:c3:
                    02:72:15:9a:ff:a1:bf:c3:a9:1f:db:ab:ff:14:55:
                    17:b0:e4:eb:b2:da:49:a2:0c:d6:48:07:6d:b9:1c:
                    51:ee:75:b3:51:c9:9a:93:d7:80:b3:de:3e:36:39:
                    61:d5:ce:6f:e5:ac:02:5d:38:2d:dd:2a:45:a9:11:
                    30:a9:14:cf:50:08:94:89:1f:7d:05:6f:ff:6a:1b:
                    7d:5d:30:fb:c2:02:7f:03:b7:95:93:96:85:cf:ce:
                    41:9f:57:d5:36:cd:97:c5:12:e0:5f:7f:82:0c:6d:
                    48:ac:d7:71:15:33:ff:99:80:79:b1:9e:d9:74:67:
                    fe:7a:40:13:c5:a9:46:03:92:c3:e7:3e:23:87:f6:
                    87:81:1b:46:dd:6e:c7:b4:43:39:89:e9:65:fa:d5:
                    08:80:a9:f9:0c:43:9d:62:fe:1e:3b:a6:65:0a:ab:
                    8f:97:4c:cc:66:94:5f:a4:0a:5b:23:88:cb:4e:4d:
                    07:94:33:93:68:b1:2e:88:11:ed:05:18:dc:dd:dd:
                    9f:df:96:fe:ba:9a:07:24:9c:96:23:17:1d:58:7f:
                    a0:d8:22:89:34:e8:90:69:1b:74:54:5c:d1:cb:ac:
                    c2:a0:15:c9:b7:01:3b:87:a5:e7:fc:06:58:05:83:
                    30:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6D:94:A7:AF:DD:82:30:B3:6F:5E:9B:FA:D4:7F:BF:CA:3F:E2:30
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:f2:2d:b3:78:cc:aa:84:f0:51:19:47:c1:b4:f5:bf:8b:8a:
         44:16:ef:6b:30:05:d3:cc:e0:df:11:d0:51:72:84:99:f4:5a:
         81:99:7c:0c:3a:0a:88:23:3c:a2:1e:43:8b:c9:d5:c7:41:56:
         3e:39:44:cd:bc:b6:cf:81:e4:0f:7a:27:f0:bf:c4:ea:12:4f:
         2d:2f:9c:db:1e:e7:00:5a:95:81:52:ed:45:8c:07:cd:d8:9d:
         46:95:60:5d:6c:43:d5:bc:b3:89:fc:a1:fd:28:58:19:43:af:
         11:22:82:f9:04:b7:cc:d0:aa:1e:80:77:dc:e0:70:8c:7c:c6:
         b6:7a:6a:6a:9c:31:d0:97:1d:17:03:81:c8:6f:5a:f6:2e:d8:
         aa:7b:a5:f4:5e:39:7b:c6:a3:79:20:ce:c3:50:0a:58:fc:14:
         d6:16:6c:fd:cb:18:24:b9:2c:20:ab:ad:c3:b5:d0:32:cb:7e:
         36:e5:ed:6d:5b:dc:fb:3d:26:b7:3a:1a:7e:37:fe:ea:54:13:
         31:92:e4:76:a0:5b:68:76:eb:aa:0d:36:99:fb:5e:c3:d8:46:
         7c:c5:2d:1c:89:ec:65:eb:3a:90:01:e4:5c:a8:ef:07:58:7c:
         58:86:62:92:2c:cf:7c:84:2a:2d:af:ab:9e:07:49:f0:7d:d1:
         59:a6:f7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:49:59 2025 by rpki-client