Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
File:                     JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft (raw, json)
Hash identifier:          uXOFMsKez79h01dsbNESWLExBuEmYVzy894q2owVFTw=
Subject key identifier:   14:DD:43:6C:03:E4:3A:D8:4E:22:B4:FE:45:C8:C1:CC:0B:6E:68:05
Authority key identifier: 24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F
Certificate issuer:       /CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F
Certificate serial:       076B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
Manifest number:          0751
Signing time:             Thu 04 Sep 2025 21:59:19 +0000
Manifest this update:     Thu 04 Sep 2025 21:59:19 +0000
Manifest next update:     Thu 11 Sep 2025 21:59:19 +0000
Files and hashes:         1: JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl (hash: vz+ht9I/kvrWgV+E6DBsu6h3wMM5cXffhyVlKbVWYIY=)
                          2: A46317803F5211EBB1B1701FC4F9AE02.roa (hash: FMNZ9SsPDMaBsxCn7D6dqqqWjFTqP/F+Fz8blXpHCbk=)
                          3: C74B01CA3C3E11EBA08CAC72C4F9AE02.roa (hash: IWEwNMzAHK/ef+4K/t2BfxtQJgKm9A+qNvlUUfJjqyg=)
                          4: A50523F43F5211EBB1B1701FC4F9AE02.roa (hash: MXwTZ0HTMZgGNdBLgLlhrgI3zl9svxesevJasfZECFs=)
                          5: 65DA620C798111EBBD22251CC4F9AE02.roa (hash: /RISfiBtXbfKLP2ghs+Yyw4wfbS03k7nxtHus8aqX1g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl
                          rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 21:59:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1899 (0x76b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B58FF, serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F
        Validity
            Not Before: Sep  4 21:59:19 2025 GMT
            Not After : Sep 11 21:59:19 2025 GMT
        Subject: CN=68ba0bb7-1762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9c:82:e7:66:d2:11:61:24:91:5c:06:bb:a7:
                    a6:33:6e:be:e8:25:e7:fc:6c:a8:5c:9c:8a:74:2d:
                    2b:2a:bb:90:09:03:16:f7:7c:41:3b:75:34:e4:91:
                    f2:88:95:83:3c:ff:6e:50:64:f6:86:04:0c:6a:d1:
                    e0:4d:d5:c0:14:f6:8f:1e:6a:8b:22:73:3c:60:81:
                    fe:a8:23:27:fe:e5:7d:90:20:fb:f6:78:3d:5a:92:
                    75:2f:5f:ca:5b:4c:ff:da:a9:00:80:3c:4b:81:a2:
                    de:bb:17:2c:e9:0f:50:89:78:d1:be:39:d4:d8:6e:
                    26:fd:38:a5:d8:2d:cc:28:99:d4:8a:27:4e:49:24:
                    06:a2:67:44:9d:c3:4b:0a:94:3c:ec:35:74:0f:79:
                    b4:4b:74:77:91:c1:ed:03:45:d2:23:96:7b:a6:12:
                    b7:56:81:41:25:61:17:fe:fa:98:89:74:8c:f0:bb:
                    05:aa:2e:75:75:a7:bd:90:0b:f6:45:47:57:9a:b1:
                    14:fe:77:54:cc:40:c2:07:a4:01:4d:41:4d:f8:39:
                    5f:d8:3b:3b:d0:31:5a:fe:95:39:da:a7:8e:1d:b4:
                    e9:cb:bd:c4:fa:fd:f8:a2:03:f5:2d:10:e2:d0:ca:
                    4a:24:fe:23:4d:b9:53:5a:25:40:11:4e:af:99:32:
                    bc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DD:43:6C:03:E4:3A:D8:4E:22:B4:FE:45:C8:C1:CC:0B:6E:68:05
            X509v3 Authority Key Identifier:
                keyid:24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:fd:16:77:78:2a:4c:cd:a7:5c:58:ae:f7:83:8d:69:e5:7b:
         dd:e2:81:73:14:13:89:a5:c1:85:1d:d4:9b:8d:2c:fa:a8:2c:
         78:e3:73:e3:f8:c7:b7:47:4d:d2:24:6e:61:66:3e:2e:dc:df:
         82:f9:97:e4:d7:28:33:c0:ea:41:8b:27:01:04:33:73:d0:7e:
         ce:32:b6:f0:23:30:db:5e:6a:79:b6:db:cd:65:64:ba:39:cb:
         b0:3e:5b:86:88:16:43:55:1a:d7:8c:98:7c:90:80:3b:94:09:
         73:e8:76:85:28:d3:8c:10:e3:f6:2c:65:67:e8:f9:0c:cb:47:
         e7:93:97:12:c5:31:03:0a:e0:27:56:62:83:13:e0:ad:ad:99:
         9e:6f:ee:ec:2a:cc:f5:a8:01:ac:bf:05:26:96:03:0b:e3:78:
         c1:23:5c:a7:15:9d:85:43:d8:66:bd:1e:84:f0:99:9d:3e:44:
         ac:bc:48:d5:5f:26:2a:5c:b7:38:63:06:7c:bc:08:cf:47:35:
         4c:77:28:2d:74:36:d0:73:b6:2c:66:8a:8b:34:20:41:83:b9:
         06:8d:c0:12:4e:ea:2f:52:02:67:5b:d2:25:01:fd:73:63:90:
         e6:cc:62:76:17:dc:02:bb:4d:c6:00:55:74:66:45:68:1f:9e:
         dc:ee:7f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 15:44:15 2025 by rpki-client