Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
File:                     AwUYVzXgl--zaoYGU7JTq-n-EVw.mft (raw, json)
Hash identifier:          FX26QaH7EBGt+gEuLD+yIJmUfTpxALFnvWtgvMEXbUk=
Subject key identifier:   24:1C:B4:8F:41:58:90:93:AA:46:ED:D8:96:24:E8:14:76:EF:FE:4F
Authority key identifier: 03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C
Certificate issuer:       /CN=A91AEE40/serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
Certificate serial:       02B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
Manifest number:          02AC
Signing time:             Sun 07 Sep 2025 01:58:37 +0000
Manifest this update:     Sun 07 Sep 2025 01:58:36 +0000
Manifest next update:     Sun 14 Sep 2025 01:58:36 +0000
Files and hashes:         1: AwUYVzXgl--zaoYGU7JTq-n-EVw.crl (hash: Y2IpIwlj65vY+f3aLdXvNpRs7UZYlU2IbQlCxnI0Cpg=)
                          2: 411831E23FC011F097A38852C4F9AE02.roa (hash: Z3YuqjlFc86KvX6uGgqRo2M31ge97SaPeoOB1KbRkKk=)
                          3: 485DCAA8418111F093EDEF69C4F9AE02.roa (hash: 98L2p4S3Z9XBKGOrvf/7lu6oUXBZwojag9kKA7jW8zY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl
                          rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 01:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694 (0x2b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEE40, serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
        Validity
            Not Before: Sep  7 01:58:36 2025 GMT
            Not After : Sep 14 01:58:36 2025 GMT
        Subject: CN=68bce6cd-90ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:98:01:a8:4f:69:14:f7:27:4b:6a:0d:1d:93:
                    71:a0:bf:2b:7a:79:e8:7d:26:77:ca:6e:51:2f:65:
                    6c:96:59:09:a0:20:f0:f5:02:9b:ed:2c:67:36:25:
                    11:cf:b7:4b:9d:87:0e:43:b8:64:76:02:1a:f7:ab:
                    2b:0c:42:e4:08:db:29:ed:72:f1:eb:a9:46:99:78:
                    5a:10:66:2e:a4:19:ca:2b:28:3c:f4:ca:36:89:6b:
                    4c:60:6a:66:20:d7:fb:fe:d4:59:7f:ee:11:91:e2:
                    2b:8f:f9:2f:71:f2:88:f2:61:ab:0b:9b:f9:9e:9d:
                    37:ab:7a:2d:2f:6e:47:94:02:9e:fe:c9:b0:01:f8:
                    96:a7:d7:01:77:c2:38:24:0f:07:b5:47:fd:8c:28:
                    0d:f0:f7:84:24:22:24:24:04:72:57:fe:22:6e:5d:
                    87:09:a7:67:3a:8c:7d:58:bb:4a:bd:c5:da:18:57:
                    b1:b5:2e:11:60:0c:c0:e0:fa:a8:bd:2f:fc:22:ad:
                    19:f9:36:a1:d8:74:c8:4c:1c:ba:d6:68:d4:a1:cf:
                    65:7a:c6:ea:e1:df:3c:c1:d7:63:58:2c:4d:48:40:
                    dc:25:ad:96:a5:da:7a:bd:96:2c:93:8d:0e:f1:ce:
                    ef:b8:5e:ca:03:29:9e:1f:01:65:90:98:c9:ab:09:
                    26:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1C:B4:8F:41:58:90:93:AA:46:ED:D8:96:24:E8:14:76:EF:FE:4F
            X509v3 Authority Key Identifier:
                keyid:03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b7:47:1a:80:e3:45:d5:73:59:10:19:3a:52:09:71:b3:87:
         5b:db:c2:f1:9b:68:f3:16:33:4b:9b:c6:d9:1e:e9:4f:3c:5a:
         b7:ca:e7:9c:56:31:5c:48:5e:6b:87:24:b3:78:2b:c4:02:e9:
         21:2d:a8:8c:87:28:e5:42:ee:01:3e:ec:24:6f:c2:8e:0d:b7:
         91:2d:13:c8:fc:b9:01:45:8c:cf:4f:ba:97:63:72:6f:92:37:
         96:fa:a7:79:9e:a2:01:0e:d6:4f:cd:d1:78:2e:6d:e9:06:13:
         1b:fe:b0:b2:16:ca:96:e0:f8:6c:90:3d:90:66:71:64:46:2b:
         d0:62:b8:a9:d3:e8:f2:d9:e3:67:7d:d6:3c:7f:be:f5:a9:9f:
         34:4e:db:c6:ec:07:9d:10:89:f3:c5:a3:62:e4:d7:79:df:76:
         39:17:39:dc:af:d0:76:bc:38:0c:95:91:18:31:b1:11:e9:7e:
         6b:23:13:b1:19:2f:06:55:cc:21:1e:7d:61:4e:e9:8d:f1:de:
         ff:a4:2a:9f:54:8b:c5:c9:44:1b:8d:59:56:e1:5b:19:e2:15:
         0e:c1:55:fe:97:ce:ed:3d:36:78:0b:62:ec:56:55:47:22:87:
         8d:96:04:da:dc:6d:c1:f6:05:96:f4:12:2f:24:1a:03:ca:5a:
         01:95:cf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 04:17:28 2025 by rpki-client