Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
File:                     l1u5QYJWgUoFLa9U9woa3FNv35s.mft (raw, json)
Hash identifier:          0oVw3UPL3zM3QbHGDnARIn4186Crvj5WiJOFTDgNatA=
Subject key identifier:   94:BA:EB:B1:AC:08:41:6F:6A:61:05:3E:E8:4E:38:65:E2:70:22:21
Authority key identifier: 97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B
Certificate issuer:       /CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B
Certificate serial:       03F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
Manifest number:          03F1
Signing time:             Fri 05 Sep 2025 00:49:20 +0000
Manifest this update:     Fri 05 Sep 2025 00:49:19 +0000
Manifest next update:     Fri 12 Sep 2025 00:49:19 +0000
Files and hashes:         1: l1u5QYJWgUoFLa9U9woa3FNv35s.crl (hash: fvuhgtB584h85m+3rgq+VysrtRdcWCffUU8ua7G1FzM=)
                          2: 615BA1B8D91411EF9940471AC4F9AE02.roa (hash: 41dvwuGONsbAf2NNxcw97I3G8Q6DNf+rajP9T/KIeiw=)
                          3: 622B3AEAD91411EF9940471AC4F9AE02.roa (hash: q51gHdBYG+mFAHDh24P09p42ENPRR4e2b1fq2dGY3KM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl
                          rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 00:49:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1016 (0x3f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7842, serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B
        Validity
            Not Before: Sep  5 00:49:19 2025 GMT
            Not After : Sep 12 00:49:19 2025 GMT
        Subject: CN=68ba338f-3b7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a7:f2:01:07:2d:23:d7:67:6d:12:99:04:ef:
                    13:ae:1e:04:39:71:68:38:bf:ba:95:45:e0:f2:6b:
                    35:e9:42:4a:ca:14:43:15:ca:21:48:93:24:f6:58:
                    0c:05:41:bd:70:ca:4e:eb:e7:9b:64:eb:14:80:4b:
                    08:14:24:7d:2f:97:8e:36:60:c0:44:ae:5f:de:ec:
                    ea:0f:01:4f:4f:b3:e3:2c:69:5d:38:9c:59:43:f0:
                    38:d6:e9:da:ca:7f:e5:7c:4f:84:f1:88:4f:92:86:
                    f6:78:64:eb:7b:3e:a1:02:95:ba:9a:12:0c:14:8f:
                    31:59:96:31:bd:99:df:03:92:ee:18:53:eb:ad:1f:
                    8d:74:7d:89:c8:37:9d:93:00:d4:07:64:0b:cb:62:
                    30:03:58:e4:bc:21:40:46:7a:ef:06:b9:f9:d9:f0:
                    36:89:b9:f9:43:99:66:5c:51:d4:ae:97:d5:09:be:
                    33:e9:da:2f:eb:ae:75:d2:b1:20:d8:ef:04:eb:8d:
                    9e:9a:3f:ed:28:d7:f5:1f:30:1d:11:fc:02:40:9f:
                    07:52:5c:92:e4:07:09:37:80:91:ad:a5:fb:6d:8f:
                    06:e1:a3:49:86:2a:f6:e6:fc:45:ed:b1:eb:cc:d8:
                    62:8c:78:1c:e7:f0:59:3a:fc:bf:56:1c:61:e8:50:
                    ec:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BA:EB:B1:AC:08:41:6F:6A:61:05:3E:E8:4E:38:65:E2:70:22:21
            X509v3 Authority Key Identifier:
                keyid:97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ac:d3:bc:ed:8b:5c:2c:86:3b:d0:3b:1a:18:55:8c:88:e4:
         d0:01:45:34:e7:b5:2a:ed:6a:72:60:30:1a:03:2d:ba:30:27:
         40:ff:1c:c2:95:85:74:21:70:29:81:d8:66:c6:c7:c4:7b:34:
         4c:86:66:4a:ee:6a:35:54:99:53:d1:6f:d1:74:f6:f4:de:3a:
         c9:95:0e:4a:2b:bc:2e:7b:ec:76:22:67:94:33:81:92:2f:ba:
         f3:c4:e7:ee:d9:0e:cd:3a:7c:53:9d:3e:b5:63:8d:23:f6:eb:
         a1:be:d0:7c:1e:98:30:f2:ec:1c:6e:01:86:9d:50:4e:99:10:
         f6:05:1f:b7:6f:96:0e:05:2d:03:8f:40:9c:1e:a0:76:54:34:
         df:3d:a7:0d:2e:23:74:33:0d:96:e0:c4:0c:72:38:41:fa:9d:
         9e:f4:cc:59:36:68:b7:00:1d:01:f8:6e:fb:dc:d2:62:46:66:
         84:74:cb:d1:47:6c:6a:96:43:2e:25:49:77:d1:38:32:a6:59:
         87:1d:01:0b:31:69:38:c8:98:a8:b0:b9:13:52:9c:4a:df:90:
         0d:27:ab:73:08:32:4f:2a:a4:38:41:0b:f6:5e:94:a4:28:b8:
         08:da:be:f4:51:ab:67:8a:80:9d:7a:0c:64:3a:72:87:a4:ea:
         34:f3:68:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:40:32 2025 by rpki-client