Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
File:                     E1XVGH0uY9fm1JB42OcfoFHEVuM.mft (raw, json)
Hash identifier:          Gjw21A3JPEncyokjBrW3hHmROCWl0NqPxqvHBTHAaQI=
Subject key identifier:   25:08:06:3B:80:43:CF:B3:3D:57:87:94:F1:F6:23:57:E9:11:DB:C1
Authority key identifier: 13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3
Certificate issuer:       /CN=A91B3CB5/serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3
Certificate serial:       0CA3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
Manifest number:          0C8C
Signing time:             Sat 06 Sep 2025 18:30:28 +0000
Manifest this update:     Sat 06 Sep 2025 18:30:28 +0000
Manifest next update:     Sat 13 Sep 2025 18:30:28 +0000
Files and hashes:         1: E1XVGH0uY9fm1JB42OcfoFHEVuM.crl (hash: Y3+qepN3cPA/qta2SrMLd2QZSAaKERZeFqDLeC4yTtY=)
                          2: E26173CE050611EAA0470B49C4F9AE02.roa (hash: dNrcrB1ldAK21HJ4LwO0zPl4lvszMcZ0JAWqxSxU9s0=)
                          3: F2F8C8B2AAE311EFB889317FC4F9AE02.roa (hash: wQzyXgNB8e39dNmdtHKa5IWJxgKdAoXLBNvYY5X5/EU=)
                          4: 257E3B94E37B11EA84A20810C4F9AE02.roa (hash: ZW4D52b/QqoUPTvkPyb0ztzXgPBkyyW+b1SqWMCRNR4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl
                          rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 18:30:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3235 (0xca3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3CB5, serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3
        Validity
            Not Before: Sep  6 18:30:28 2025 GMT
            Not After : Sep 13 18:30:28 2025 GMT
        Subject: CN=68bc7dc4-33ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c2:e2:87:9a:68:ce:c3:90:be:7a:e3:05:61:
                    83:a8:18:6e:4f:77:c1:a0:92:0b:37:8f:76:65:dd:
                    ed:56:73:24:2c:04:38:c9:8c:0d:f9:71:17:df:2b:
                    65:69:e6:3c:0f:95:72:ce:e1:a1:f7:6f:19:4c:bc:
                    64:63:24:44:76:06:d1:15:58:4d:13:25:0f:fa:84:
                    fc:c6:f8:50:26:c8:67:fb:e5:a9:5e:43:7d:fd:21:
                    48:50:7b:f0:a1:7d:28:ba:bc:6a:8c:88:58:1a:f3:
                    91:0d:91:84:ab:95:52:18:0f:64:89:9a:93:9a:5a:
                    67:83:cf:3a:f0:65:91:0b:0c:6b:65:ab:6c:a9:fd:
                    8a:af:40:79:6f:2c:44:1a:1c:1f:93:70:b3:30:d6:
                    ad:dd:0e:47:30:46:30:7c:a4:df:09:9a:94:40:e9:
                    c0:1e:53:bc:41:d5:3e:6d:4e:5c:66:39:fd:ea:af:
                    70:93:2b:5a:bd:e1:b0:62:7f:1b:06:29:24:58:40:
                    54:f1:74:33:2a:46:bc:33:e5:87:4c:56:0d:bd:4c:
                    9f:9e:3e:a0:9a:d3:01:30:8c:2b:cd:f7:3c:d8:f9:
                    6c:cc:1b:ac:32:ba:1b:23:0f:bd:1f:2d:87:be:a7:
                    b2:5e:c8:c9:92:6b:cc:e2:c8:eb:70:41:14:39:c4:
                    8f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:08:06:3B:80:43:CF:B3:3D:57:87:94:F1:F6:23:57:E9:11:DB:C1
            X509v3 Authority Key Identifier:
                keyid:13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d9:35:9e:cb:26:93:2e:76:3c:9d:2a:41:c8:28:25:75:07:
         25:99:26:be:8d:e9:92:a9:91:da:c1:d3:35:f2:24:4e:17:4b:
         dc:4a:0b:70:bc:f5:2c:50:ee:5a:7d:f0:54:4a:66:e2:e6:d8:
         fb:31:70:2c:69:5a:8d:f4:43:08:6c:e2:9e:66:a4:42:bd:44:
         46:6c:4a:66:dd:2a:10:44:fa:b0:57:9e:a4:da:25:3a:3d:1f:
         7a:92:54:61:dc:0e:e8:f7:34:e1:1b:6e:6b:aa:50:3d:90:e6:
         2f:63:46:92:ee:da:87:e0:15:28:4d:6d:70:8f:af:3f:47:ac:
         a4:18:f4:c3:c1:03:6f:e5:fc:4c:f7:f0:f4:48:8c:61:87:d9:
         17:21:75:f2:51:3f:65:df:46:bf:a1:cd:2f:1b:2c:56:da:cc:
         1b:d8:56:a9:47:52:d1:c1:66:97:38:e7:ce:78:61:fd:09:cc:
         bd:b0:15:48:a7:b5:69:ee:20:3f:1f:6e:70:52:8f:46:9d:b6:
         32:30:68:33:cb:9a:9e:1c:50:65:43:91:08:bf:2e:71:da:e1:
         a9:6b:55:bd:0a:07:de:04:84:0e:1a:18:b6:20:c8:88:1e:11:
         37:0b:84:d1:e2:9f:4f:db:6d:ac:32:48:8f:27:ab:26:4d:69:
         bc:58:2b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 19:14:14 2025 by rpki-client