Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
File:                     dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft (raw, json)
Hash identifier:          A7Lji92fRbEEJrA7B2oIgY92KeTTntvSFyGxWVbeucc=
Subject key identifier:   24:F5:AE:D8:DC:6F:31:E8:11:85:62:AA:77:4F:D1:9D:64:95:34:60
Authority key identifier: 76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11
Certificate issuer:       /CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
Certificate serial:       06B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
Manifest number:          0693
Signing time:             Thu 18 Sep 2025 01:55:12 +0000
Manifest this update:     Thu 18 Sep 2025 01:55:12 +0000
Manifest next update:     Thu 25 Sep 2025 01:55:12 +0000
Files and hashes:         1: dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl (hash: wffbcGQ6ZRByEP9AklMakw+U5CjsOI4YKKbEd14SsPM=)
                          2: 4FE5F30290D411F0B8A56049C4F9AE02.roa (hash: ogqSNp7qBMLYB91emP/LP/U3n1tElbQC7zVeXY17XBw=)
                          3: 3CEDCE18900D11F0BD65E474C4F9AE02.roa (hash: S8BkDgkB+teQACEKAhdExV5xGoqrMJ7uZNKZ0G5lh/0=)
                          4: 8158A3A6943211F0843A1075C4F9AE02.roa (hash: aJKX9bflIZ/GB6hCa4dj7Tw5KiF9/0GhzGAFQ3kUJ0s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl
                          rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 01:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1715 (0x6b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B29F8, serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
        Validity
            Not Before: Sep 18 01:55:12 2025 GMT
            Not After : Sep 25 01:55:12 2025 GMT
        Subject: CN=68cb6680-43c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fe:b1:e1:5a:69:3c:fc:37:f5:21:d7:32:87:
                    92:88:43:99:84:7f:33:42:3a:ce:92:56:da:a5:b1:
                    8e:67:d1:3e:9f:7c:a9:9a:78:76:2d:29:e5:bc:a8:
                    6c:71:da:68:f3:57:b2:a2:4a:81:bc:36:a8:26:81:
                    47:94:46:ca:12:cf:cb:17:ab:b9:3a:66:57:f8:5c:
                    5e:1f:1a:0f:ae:4a:26:76:e9:59:b4:0f:79:a3:31:
                    30:c6:22:44:57:e6:89:fe:d2:3b:c8:28:9f:d2:84:
                    11:f1:14:5f:de:70:10:da:e2:fc:ed:e3:d6:75:08:
                    81:2d:83:dd:2d:79:29:e2:65:14:cc:40:c9:e6:4c:
                    19:3d:26:6e:ab:f9:27:2a:19:54:db:d2:a5:42:28:
                    94:97:8e:86:3c:b6:c1:35:3f:c4:7c:fc:ab:a3:8e:
                    88:8c:f7:51:ca:6d:76:3b:ae:5e:9b:f4:bd:cf:2b:
                    59:6f:89:af:eb:85:1a:b9:d3:b7:53:2d:16:62:0c:
                    1e:2e:25:a5:e2:74:db:09:8b:43:59:15:e9:0f:08:
                    3c:d5:d6:a7:c9:58:93:c0:19:a9:00:4d:48:f4:e6:
                    be:b4:4e:0f:d1:67:fb:6e:0d:4d:0f:19:cb:b5:01:
                    eb:78:4f:44:8b:75:70:88:f7:3d:c8:f0:70:a8:46:
                    b3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F5:AE:D8:DC:6F:31:E8:11:85:62:AA:77:4F:D1:9D:64:95:34:60
            X509v3 Authority Key Identifier:
                keyid:76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f7:a3:65:60:fb:ac:43:41:77:21:87:47:50:42:e6:5f:93:
         fa:db:a0:3d:a7:a3:cf:8e:2a:b0:cd:53:96:e8:df:dc:6d:91:
         cc:85:a6:ef:7f:99:39:99:5a:6b:6a:86:49:6f:7c:2c:55:9f:
         9f:53:7d:64:21:71:cf:4b:cd:9d:b9:35:df:04:77:b1:e9:3b:
         7b:96:89:b2:e3:41:4d:e5:d3:9f:1e:43:53:ed:f7:4e:cc:b6:
         cd:26:23:0a:4e:b1:e5:45:13:49:b3:a5:88:90:ad:4f:c6:ed:
         64:95:db:c5:fa:25:80:45:0a:c6:b0:74:37:50:22:f4:58:b2:
         f7:79:94:75:fd:16:26:c0:fd:2f:52:ad:18:a6:5a:32:f0:d4:
         52:10:4b:78:c6:4e:ab:5c:d0:35:e3:3d:87:f5:47:d4:d6:3e:
         79:d4:ef:da:cb:57:72:af:f6:a4:77:0e:93:5c:ab:fe:9a:9f:
         8b:1a:34:05:2d:78:21:cd:ac:d7:62:d4:05:bf:3e:a2:3d:fc:
         0b:f9:f7:cc:af:f4:79:ad:aa:39:fa:5f:d4:55:b2:12:ad:6b:
         47:5c:47:fc:6e:fd:15:20:d6:ef:10:b0:9a:d4:f9:5d:73:df:
         98:ec:be:2a:f5:88:c2:c4:cc:89:23:7b:e4:e0:51:56:3f:f2:
         3c:1e:91:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 21:58:12 2025 by rpki-client