Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
File:                     iJGVOO7eyDINXq9rHzKymCOreBA.mft (raw, json)
Hash identifier:          t3Dbb4EAxNlBLK597Rd5njCDYhz6DCta9lGJWgZDiVE=
Subject key identifier:   1A:1E:20:10:50:EE:35:4D:EF:0C:E9:7E:91:32:83:2D:77:71:67:A4
Authority key identifier: 88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10
Certificate issuer:       /CN=A91B4460/serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810
Certificate serial:       34
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
Manifest number:          33
Signing time:             Sat 19 Jul 2025 07:53:32 +0000
Manifest this update:     Sat 19 Jul 2025 07:53:31 +0000
Manifest next update:     Sat 26 Jul 2025 07:53:31 +0000
Files and hashes:         1: iJGVOO7eyDINXq9rHzKymCOreBA.crl (hash: 6ZGgzW2K59PiuUzC2TCRAdpMywMn8JoaTogeL5uxlQs=)
                          2: 7A85F9D2148711F0AF960528C4F9AE02.roa (hash: v93VVwAanSucSOqj9EwS1pD5Lqih1cuGiSwwM282Dpg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl
                          rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 07:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4460, serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810
        Validity
            Not Before: Jul 19 07:53:31 2025 GMT
            Not After : Jul 26 07:53:31 2025 GMT
        Subject: CN=687b4efb-c19a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:56:ec:8c:a8:29:c5:7d:8b:b3:6f:fa:6c:d2:
                    df:3c:19:d5:90:8a:77:94:d6:8f:6f:ec:f0:af:bb:
                    43:fa:0b:7c:51:df:7a:62:8c:25:b7:d1:89:50:d4:
                    35:94:fb:b2:54:18:67:14:72:73:80:14:66:cd:97:
                    7e:83:6d:36:84:6d:94:f3:ed:4e:7d:b2:51:d6:1d:
                    cd:ab:65:0f:00:e2:75:31:90:50:04:e1:15:3a:08:
                    1d:4b:f5:f9:3f:d0:30:34:8d:8e:1b:bc:7f:f3:b9:
                    7d:b5:91:94:dc:c9:c2:26:54:62:89:09:19:6e:66:
                    c2:73:9b:ff:8d:9f:66:25:0a:e6:7b:b1:10:8d:7b:
                    51:c7:9d:d7:46:86:f3:56:24:90:57:ac:18:56:cc:
                    e8:1f:cb:e1:3c:80:db:bf:81:4e:b6:f2:a1:7a:5a:
                    9d:76:35:fc:a6:a2:1f:41:e7:d0:ab:35:f4:ca:21:
                    88:2b:3c:e9:49:e7:12:34:65:f5:40:99:a8:ac:ef:
                    6c:4c:3e:ea:2b:b7:00:f1:ce:8e:ad:6d:fb:b6:a8:
                    1f:1e:6c:30:57:6b:e4:cb:a8:a4:aa:30:3c:ce:46:
                    e7:5b:79:3c:f8:97:21:a3:6e:8c:4f:5b:5f:e2:9e:
                    0b:cd:43:8e:39:32:4f:b9:1f:7e:8a:27:bf:98:5f:
                    c5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1E:20:10:50:EE:35:4D:EF:0C:E9:7E:91:32:83:2D:77:71:67:A4
            X509v3 Authority Key Identifier:
                keyid:88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:2d:33:fa:20:15:28:bd:8f:e8:33:a5:99:74:a4:c5:36:18:
         17:d4:22:35:3e:37:3a:24:71:b8:d7:66:86:ca:80:8e:a0:e9:
         cf:dc:91:ef:c9:f8:54:70:4b:79:6d:4e:ed:a4:47:16:42:d3:
         89:3f:72:f2:9d:ee:ed:92:e0:e0:67:55:2f:77:04:a2:8e:2c:
         2d:df:85:83:f7:ce:b6:56:d2:0e:b7:de:d9:f4:f1:4b:d7:ed:
         33:b3:91:9f:13:01:d9:6f:81:40:48:5a:65:04:52:ec:7b:b5:
         54:47:2c:c8:86:57:df:3f:05:8e:ec:40:28:3f:76:d7:76:13:
         15:3a:70:f9:29:15:22:fe:d0:f2:0b:73:b8:0f:81:1f:bb:84:
         ca:6e:d9:80:ac:fa:02:2b:88:d7:28:bf:09:f5:20:e7:79:b0:
         a2:4e:8f:6b:62:04:9d:3d:70:2b:ad:3c:79:a9:66:61:a4:5c:
         87:16:c4:a6:7a:b3:08:a3:3a:c2:0c:de:52:52:1e:4a:49:c7:
         58:84:1f:c6:57:61:bc:88:2a:6a:e6:ce:22:b5:7c:a5:ac:94:
         2a:84:dd:60:ef:e5:3b:39:71:a3:28:f6:30:42:e4:ab:63:0f:
         a5:2b:0f:6f:f6:f0:1a:06:50:94:cb:bb:4b:d8:54:54:31:ec:
         5c:87:77:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:59:27 2025 by rpki-client