Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
File:                     aj72cYLbsPbM88pBN4wBGYBq6b0.mft (raw, json)
Hash identifier:          BjCvX5M0lHf/g2Uk+Fr0WzCJ4kRZEd57p8GYXdwkle4=
Subject key identifier:   4D:27:9B:C9:61:D3:4D:43:75:98:32:AA:E4:F1:5A:8B:B2:FA:AA:6C
Authority key identifier: 6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD
Certificate issuer:       /CN=A91A0A2E/serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD
Certificate serial:       65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
Manifest number:          62
Signing time:             Tue 19 Aug 2025 07:32:18 +0000
Manifest this update:     Tue 19 Aug 2025 07:32:18 +0000
Manifest next update:     Tue 26 Aug 2025 07:32:17 +0000
Files and hashes:         1: aj72cYLbsPbM88pBN4wBGYBq6b0.crl (hash: 66JnBiqtFmNxR02Yz5MTmO+7dF1qdGiaf8vVz12oqIA=)
                          2: FDE6938CE90C11EFB9D98326C4F9AE02.roa (hash: EQY90pkMKZS20T7XhciTL191HbTMnbpWtQHaja8QyGI=)
                          3: F449A3FCE9C811EF9972A934C4F9AE02.roa (hash: 7MwfNHRXASMEn22ZfT4zj9oG/ZQKY9GDP1pjifjdSXI=)
                          4: FD63D5BEE90C11EFB9D98326C4F9AE02.roa (hash: XHfUu+5yh0x5y1fbUjOYEtUpMyJC2J2Z1oZf8nnZcak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl
                          rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 07:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0A2E, serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD
        Validity
            Not Before: Aug 19 07:32:18 2025 GMT
            Not After : Aug 26 07:32:17 2025 GMT
        Subject: CN=68a42882-0676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:34:3e:61:86:82:78:33:a6:d5:09:fc:77:4f:
                    da:23:47:d6:5d:d3:3b:03:67:4c:ae:57:a3:97:b6:
                    d8:71:dd:dd:fc:76:11:a7:a5:5d:1b:0c:57:d7:37:
                    68:74:b9:00:77:ec:84:74:f5:9d:67:d3:ca:67:e7:
                    72:6d:79:6d:8e:8b:b2:6f:56:77:e7:36:55:92:03:
                    0d:5c:3c:a8:0a:e0:79:e3:d9:13:78:c7:18:0c:21:
                    c0:38:29:4b:c0:50:61:49:1b:5a:43:f0:23:51:67:
                    0b:f5:42:44:2e:b1:8e:cb:9e:ef:14:08:50:45:2e:
                    f4:d5:2b:0c:cd:51:80:49:f4:2a:81:e6:61:38:e5:
                    5e:6f:05:ae:bd:59:c4:93:d3:31:75:2a:ad:f6:30:
                    4b:49:ff:bd:4a:c5:00:f5:ed:4f:e3:12:84:44:fa:
                    ab:8c:17:f1:4d:5f:4b:c0:13:bb:5c:27:32:d0:7b:
                    9a:8d:90:ac:6e:a7:bb:30:4c:19:62:6e:1e:1c:d0:
                    de:7c:0e:8d:9f:f8:f3:5e:1f:ca:d2:4f:73:0b:30:
                    7d:ce:0d:b5:20:ca:46:b5:3f:fe:fa:cf:bd:38:ef:
                    6d:fa:ef:cd:ca:d4:9b:07:8a:16:58:1e:84:68:eb:
                    8c:09:d2:ec:ea:6c:ab:e5:b2:a9:84:6d:68:c8:35:
                    a9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:27:9B:C9:61:D3:4D:43:75:98:32:AA:E4:F1:5A:8B:B2:FA:AA:6C
            X509v3 Authority Key Identifier:
                keyid:6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ae:11:bd:ec:4f:97:77:79:7e:02:b2:48:93:fc:8c:68:78:
         c7:e2:41:e6:d8:00:d4:d2:bd:3a:18:a5:ec:ed:1c:1d:c9:da:
         82:d8:b8:11:57:80:0c:80:5d:f6:d1:89:e3:c8:7a:fb:35:7c:
         33:c4:e5:8d:9c:06:e7:5e:45:c0:83:cf:a3:06:a0:b5:9f:e1:
         09:53:61:e5:34:0f:e9:a7:aa:45:80:78:b6:78:c8:71:41:5f:
         81:c3:19:ed:5b:69:66:86:2f:ea:28:51:df:59:30:6d:20:71:
         5b:16:da:4b:b3:58:8a:69:59:21:0a:11:1e:87:8b:4b:04:2f:
         b1:59:d4:04:41:ac:c8:64:b4:d7:ab:68:37:65:93:51:c4:8e:
         88:16:3b:22:6f:e9:9e:a3:1e:2d:1b:85:7c:a3:ac:15:5a:4e:
         aa:e9:29:24:7f:93:8a:33:43:2a:fb:47:a8:52:b3:33:01:3b:
         36:6f:d9:1b:e2:71:8e:b0:1f:f2:83:6f:1a:dd:4c:76:13:53:
         0c:65:64:50:be:ef:7e:d4:ce:48:f8:b9:c6:0c:64:cb:ef:c4:
         d3:f2:a9:87:04:72:71:81:ad:eb:40:d1:5b:89:c5:0d:13:15:
         e1:4d:fe:11:e3:93:8f:f1:23:93:c6:85:e1:c6:c9:0e:46:c9:
         15:c6:01:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 17:19:31 2025 by rpki-client