Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft
File:                     V7aHJ0szGe2QcblmFY-birZK5vc.mft (raw, json)
Hash identifier:          dgk2bAo+Fm5JEwdaX2qwTjoyiEiRTeOwVDWoGlQ12KM=
Subject key identifier:   8E:5D:13:D2:83:FF:6B:DD:1C:02:BF:65:1B:CE:95:EA:3A:15:25:A2
Authority key identifier: 57:B6:87:27:4B:33:19:ED:90:71:B9:66:15:8F:9B:8A:B6:4A:E6:F7
Certificate issuer:       /CN=A91B527E/serialNumber=57B687274B3319ED9071B966158F9B8AB64AE6F7
Certificate serial:       27C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft
Manifest number:          27B9
Signing time:             Sun 24 Aug 2025 15:35:56 +0000
Manifest this update:     Sun 24 Aug 2025 15:35:55 +0000
Manifest next update:     Sun 31 Aug 2025 15:35:55 +0000
Files and hashes:         1: V7aHJ0szGe2QcblmFY-birZK5vc.crl (hash: v91MaO04n5LlzPFLgQCC0trlNp13D2qQJu2u/CJeYYo=)
                          2: C22BA9D094E411EA9076F758C4F9AE02.roa (hash: 0PS4/rj5Rh5J9qWit0urM3xL4w3DPtmcsnvl2FziSAo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.crl
                          rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Aug 2025 15:35:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10177 (0x27c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B527E, serialNumber=57B687274B3319ED9071B966158F9B8AB64AE6F7
        Validity
            Not Before: Aug 24 15:35:55 2025 GMT
            Not After : Aug 31 15:35:55 2025 GMT
        Subject: CN=68ab315b-17d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:89:e4:f5:cb:bb:11:b4:7d:49:f8:f3:e3:d0:
                    58:ce:db:65:4e:b0:0a:fa:f4:56:e5:2c:b4:72:bd:
                    f8:4e:f0:88:64:34:5d:e1:d9:3a:8d:4b:66:46:5c:
                    1b:f1:ba:2f:3c:1e:0e:99:50:04:4d:03:8f:60:fb:
                    c3:65:4a:4a:8d:bc:45:ba:5e:80:60:56:bc:1d:17:
                    76:ac:6e:3b:fa:1c:80:61:41:de:6e:26:48:9b:38:
                    87:8d:e0:90:b9:08:04:50:10:15:64:62:0d:43:cd:
                    18:74:e2:5f:58:3d:ad:b6:3c:64:af:54:a0:f3:2c:
                    13:c1:f4:24:b5:69:1b:f1:a2:75:2e:3b:51:0a:d3:
                    19:3c:30:7a:44:1c:22:df:73:f9:ea:53:5a:f0:d5:
                    20:a6:0a:cd:3d:85:99:f5:be:3d:cf:87:59:20:b3:
                    15:e4:ae:54:09:a0:c1:dd:81:ab:89:72:53:2b:96:
                    aa:7f:6e:89:1c:8a:18:cf:45:25:bd:66:e4:ea:69:
                    de:9a:34:6c:d6:19:7d:97:5a:1f:cb:2c:2d:1d:e5:
                    42:65:c1:78:fc:6e:76:5e:9d:09:3a:52:c3:fe:0a:
                    97:c4:8a:c5:16:71:7d:d0:d3:9d:4c:33:ab:1d:57:
                    47:94:db:5e:e6:14:f0:63:05:2b:a6:2a:4a:1c:0d:
                    7a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5D:13:D2:83:FF:6B:DD:1C:02:BF:65:1B:CE:95:EA:3A:15:25:A2
            X509v3 Authority Key Identifier:
                keyid:57:B6:87:27:4B:33:19:ED:90:71:B9:66:15:8F:9B:8A:B6:4A:E6:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:2c:f0:a1:ab:c8:27:db:ad:11:bb:c5:c3:8e:67:23:7b:be:
         27:98:79:a2:b1:8c:3a:1e:57:5d:75:e0:4c:1b:69:33:d9:c2:
         2f:67:fa:49:17:e1:1d:3c:08:60:79:fc:c3:dc:ee:7a:b0:e2:
         2a:5e:22:88:63:fc:58:94:20:d1:88:a8:84:bb:e9:3b:fe:1f:
         01:b0:16:9c:5f:6c:92:8e:ff:23:eb:56:89:b3:ae:b9:3d:9c:
         9c:62:e6:a6:25:a0:77:5c:2c:e6:5a:c3:e7:c6:7f:c8:42:4b:
         75:18:bd:9b:2b:14:d7:8e:dd:28:c6:14:04:22:af:77:12:08:
         c0:7d:19:ca:b2:89:a1:09:36:1b:a1:90:9e:2e:1a:28:82:44:
         ec:0c:5b:a1:12:5a:39:e3:56:d9:a5:47:c5:97:f7:5a:4c:df:
         24:fa:04:c7:e6:80:49:91:a8:e3:f6:4a:8f:49:15:1d:2c:e4:
         ff:14:31:c6:63:c6:fb:f8:05:e8:26:1a:1d:f1:61:26:db:d4:
         ca:45:aa:4b:a8:2c:1d:1c:6d:b9:46:ad:08:19:f2:3d:45:51:
         bf:2c:93:7b:4c:c5:a0:9a:da:8e:d7:ab:c3:fc:7a:9a:22:36:
         fb:45:82:2c:f7:ff:42:24:4a:f2:85:92:52:6f:0b:35:1b:5d:
         37:45:e0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 21:31:14 2025 by rpki-client