Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
File:                     0y2jboghgi5r08gs_6mE56kJw_Y.mft (raw, json)
Hash identifier:          Zlzjb/Vp9U6IL7bAcSYpip6s4yx/RpiP27EQXCtaT+U=
Subject key identifier:   DC:F6:1A:22:7D:2B:DC:2E:A5:EE:8E:32:82:2F:B6:48:C7:D0:2C:49
Authority key identifier: D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6
Certificate issuer:       /CN=A91B8EF9/serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
Certificate serial:       33F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
Manifest number:          33EB
Signing time:             Wed 20 Aug 2025 15:21:15 +0000
Manifest this update:     Wed 20 Aug 2025 15:21:14 +0000
Manifest next update:     Wed 27 Aug 2025 15:21:14 +0000
Files and hashes:         1: 0y2jboghgi5r08gs_6mE56kJw_Y.crl (hash: QKICn4/N2suN/kARZe9gmTKjfViUEP1GTRk3rR+J1jY=)
                          2: A1C2C79680FE11E985D53F55C4F9AE02.roa (hash: Ko3Luk3NXRMVTdrKjxB+T1Aq5Rz7BTBaPzcxuwLSdz4=)
                          3: A30DC17880FE11E985D53F55C4F9AE02.roa (hash: FAySI2su8cL3vKBRY/mDcgCBdpz6IW+fV0g4HW92eb8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 15:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13305 (0x33f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8EF9, serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
        Validity
            Not Before: Aug 20 15:21:14 2025 GMT
            Not After : Aug 27 15:21:14 2025 GMT
        Subject: CN=68a5e7eb-c842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:08:9b:0c:de:ac:6a:26:a8:80:3e:be:69:38:
                    c9:4c:c8:29:b9:86:68:3b:d7:20:65:65:7a:33:d1:
                    58:c3:b7:03:a2:22:a8:d7:33:d4:0a:4f:21:f3:05:
                    0c:79:f1:e3:03:f3:6e:4f:af:8e:20:59:22:bc:75:
                    43:a6:54:12:83:0f:be:20:cc:8e:35:74:cf:7d:01:
                    37:8b:cd:35:23:bd:d1:10:99:99:77:41:18:20:0b:
                    9c:d2:54:ca:4b:89:53:1d:ec:87:d5:25:aa:81:e0:
                    89:b7:29:2e:39:62:98:e4:78:db:6e:7e:dc:3f:dc:
                    04:5d:ad:48:3b:fa:02:fd:c5:65:1a:b6:23:d8:e8:
                    83:68:36:f1:87:0b:14:94:af:04:7a:5a:c9:8c:de:
                    41:13:17:37:54:d0:f5:fd:e2:a1:7e:c0:59:73:48:
                    5f:8d:e6:a5:58:5a:0e:09:48:4b:29:fc:78:38:6b:
                    c3:30:40:d5:59:31:11:09:d9:9b:5b:69:2c:25:2a:
                    bb:d2:bb:e7:d3:be:98:5a:1f:ff:73:e3:cc:c8:ce:
                    d4:e4:c2:59:ec:6a:ca:48:02:be:6e:83:e6:3b:05:
                    bb:e5:f1:3d:7d:0c:83:ac:e1:b6:91:72:d1:c3:28:
                    94:bc:73:57:29:c2:7a:64:3f:35:c3:b7:ec:68:26:
                    27:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F6:1A:22:7D:2B:DC:2E:A5:EE:8E:32:82:2F:B6:48:C7:D0:2C:49
            X509v3 Authority Key Identifier:
                keyid:D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:6b:a5:16:a0:4b:3d:2d:56:b2:96:b1:06:9d:07:99:74:b0:
         b6:76:f7:3a:06:34:76:47:9b:e0:b6:ed:d7:45:b0:9d:37:cb:
         90:e3:69:d6:0e:ea:92:dd:4b:24:a8:14:eb:23:13:dc:84:59:
         0d:3f:0c:82:3f:f3:fb:80:4e:24:d7:fb:bb:0a:91:ba:d1:fe:
         35:90:28:8b:a0:1a:94:87:34:93:ac:c3:f2:e4:95:93:34:24:
         4f:62:62:f3:c1:7f:b3:4c:d4:76:28:84:dc:87:f0:9e:1d:f8:
         08:98:23:9c:e2:02:b7:2f:47:dd:74:b9:23:10:39:45:fa:92:
         e7:86:85:dc:56:ce:1c:29:6c:e4:13:d8:ed:3f:d6:f6:3b:6d:
         67:12:7d:ca:7d:da:05:76:10:0f:87:4e:85:3e:7e:0f:49:87:
         4c:0f:15:3d:78:80:4f:c3:4a:ce:0e:76:f2:f5:ac:0e:1a:1e:
         1b:a1:2c:85:62:9c:79:83:01:32:89:0c:c1:84:ba:21:32:77:
         14:1c:d6:23:e1:46:f2:f1:25:51:0e:1f:eb:7e:ba:30:d0:26:
         f6:3f:2b:b8:4d:cd:a5:4f:d0:43:38:d0:7e:3f:55:15:19:51:
         0a:b2:26:c6:76:34:b6:bc:60:b1:41:1b:cc:13:43:f5:dd:c4:
         e1:1c:6c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:33:09 2025 by rpki-client