Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft
File:                     t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft (raw, json)
Hash identifier:          guP0CZ4qX5jlw1isZKvRLvmLEpXSg0LYT2wxURXIN48=
Subject key identifier:   D5:CC:B8:64:46:96:13:CF:51:17:FA:39:AA:39:6E:D1:7E:05:9F:F2
Authority key identifier: B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5
Certificate issuer:       /CN=A91B4E11/serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5
Certificate serial:       FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft
Manifest number:          F8
Signing time:             Fri 19 Sep 2025 05:47:29 +0000
Manifest this update:     Fri 19 Sep 2025 05:47:29 +0000
Manifest next update:     Fri 26 Sep 2025 05:47:29 +0000
Files and hashes:         1: t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl (hash: 2cT0qrDtdtcl1wO+Fz6Xri4esiOyCmjLsgk2FhSxy1c=)
                          2: A2939A381CB711EF8F98240CC4F9AE02.roa (hash: h1iGqKYaoNj3rvyh2GNyWQUuRTq6Az6gkGmiqF75xZw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl
                          rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 05:47:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4E11, serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5
        Validity
            Not Before: Sep 19 05:47:29 2025 GMT
            Not After : Sep 26 05:47:29 2025 GMT
        Subject: CN=68ccee71-22b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:88:60:0c:d0:6c:12:ae:bd:ce:4c:2b:5f:17:
                    47:b2:f8:ef:a2:7f:98:ae:35:db:82:a7:61:65:be:
                    21:30:1f:c1:8f:1b:d8:e2:94:ec:60:86:00:c0:6e:
                    e1:fc:e0:41:00:70:14:a8:0f:bd:e9:37:f3:f6:89:
                    89:cf:d2:49:92:40:36:71:d2:3a:ab:76:4c:8b:25:
                    91:26:59:aa:14:b8:ef:d8:40:9b:b2:f5:6b:82:ba:
                    35:e1:f9:81:8e:be:49:b6:3a:ac:ce:23:99:4a:06:
                    5f:5c:d8:47:c0:f5:82:8a:7b:1c:b4:cd:80:8e:60:
                    69:fe:e7:12:97:62:9f:22:44:7e:46:3c:b4:24:b9:
                    d5:d0:ea:08:fb:4d:f7:56:b4:a8:23:24:cf:eb:37:
                    99:ba:7f:36:b6:4d:f4:c8:5f:af:bd:8c:42:7a:59:
                    79:9b:62:c0:7f:13:6c:de:71:cb:2e:42:4a:c7:f4:
                    91:a4:a8:29:18:bb:79:8f:c6:9d:62:e1:bb:df:e1:
                    ae:10:c9:d7:88:e2:c1:05:2e:c0:1b:76:bc:94:54:
                    b9:7e:54:8a:a3:cd:e7:64:02:e3:f3:55:a2:6c:58:
                    21:59:4a:f4:8c:04:5b:12:5a:54:fb:7b:41:28:d7:
                    d2:75:95:9a:70:a9:6d:f7:e9:e1:76:54:3d:0b:38:
                    1f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CC:B8:64:46:96:13:CF:51:17:FA:39:AA:39:6E:D1:7E:05:9F:F2
            X509v3 Authority Key Identifier:
                keyid:B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:13:30:10:7f:ee:a0:b6:de:b4:1e:c7:19:86:3a:1f:61:86:
         76:ca:2b:39:1c:ea:0d:ef:c2:4f:5c:43:78:f0:ca:88:56:3c:
         03:ca:66:18:fc:d0:9c:65:94:5e:43:3f:45:56:de:c4:1b:7d:
         9c:0d:b5:98:79:74:7c:dc:56:bf:66:1a:eb:a6:1a:03:e5:d8:
         3e:6a:8a:e8:29:d8:3f:95:92:5a:65:46:6c:93:bc:98:e6:5e:
         25:60:79:41:14:23:30:fd:b2:6a:d1:0d:27:03:0b:b2:11:55:
         28:be:7f:84:4d:b8:c8:6c:0a:14:3f:36:5a:bc:8c:87:a1:95:
         28:0a:f1:64:3e:5b:d5:97:a7:81:73:5b:bc:ab:cc:ac:25:26:
         be:96:00:9d:f2:ff:0d:9c:79:ae:3b:b9:de:05:78:2e:9a:52:
         b4:86:45:c0:61:89:0e:60:77:c3:7f:77:90:df:e7:be:a7:fc:
         ac:44:07:60:20:7d:2d:ca:68:64:02:84:f6:91:aa:2c:03:0c:
         6e:d5:33:c7:47:f9:c8:68:1e:53:fe:6f:45:10:57:b2:f8:88:
         45:5a:c4:9a:35:55:b7:30:1f:4c:0a:65:49:fe:ee:f9:37:d9:
         ee:fa:12:fd:d2:47:d0:17:e7:0b:56:84:97:96:32:3d:68:fd:
         7c:ad:45:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 10:40:54 2025 by rpki-client