Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
File:                     S8VilW0H0G-q3JIziLmGYPcofJo.mft (raw, json)
Hash identifier:          bkE9ZOeqxY9jmTz3Y26C8NguS/7jL613EprCkUZOPpM=
Subject key identifier:   46:07:00:A0:21:BA:A9:49:C4:C9:DD:FA:9E:ED:0B:07:B8:D6:F7:41
Authority key identifier: 4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A
Certificate issuer:       /CN=A91BF039/serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A
Certificate serial:       0B35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
Manifest number:          0B2E
Signing time:             Tue 16 Sep 2025 19:27:00 +0000
Manifest this update:     Tue 16 Sep 2025 19:27:00 +0000
Manifest next update:     Tue 23 Sep 2025 19:27:00 +0000
Files and hashes:         1: S8VilW0H0G-q3JIziLmGYPcofJo.crl (hash: tN8iiZnojqHLvc+9kUFxS62HVwkjMs8QENVBVQb1XLQ=)
                          2: 6D49440845BC11EAB591BD20C4F9AE02.roa (hash: d1emA2UMoO8VznsV+Ait8FlVXTOyXdepIAgXYTBBJeI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl
                          rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Sep 2025 19:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2869 (0xb35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF039, serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A
        Validity
            Not Before: Sep 16 19:27:00 2025 GMT
            Not After : Sep 23 19:27:00 2025 GMT
        Subject: CN=68c9ba04-d2c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:83:51:6f:f0:9d:59:92:9e:a2:f1:6a:ad:f0:
                    94:3d:0e:1c:df:e7:6b:6f:9d:69:e1:62:9a:c5:7d:
                    c1:d2:53:0a:db:1a:4c:50:fe:76:67:a9:c9:ec:d8:
                    72:c5:6c:d3:1e:7c:36:d3:8a:ac:e1:e3:70:5e:60:
                    45:5c:2c:00:97:28:b2:42:b7:11:59:d4:90:9d:cd:
                    75:43:92:b7:72:3e:bb:04:e8:a7:70:86:c2:91:bb:
                    3f:65:39:c7:79:78:2e:f3:e8:99:33:12:8d:fc:81:
                    25:53:90:56:74:91:b1:05:fc:b1:5f:41:34:73:aa:
                    d1:e3:e7:23:48:68:ba:1b:9d:14:56:26:07:5d:73:
                    75:b5:fd:ca:7e:7b:1d:7c:3f:11:a6:b7:12:2d:73:
                    14:e9:8c:28:7b:0f:ac:36:70:20:74:08:a9:78:9e:
                    19:7c:11:3b:4f:31:1c:ae:dc:2f:e5:56:18:ca:73:
                    f1:97:5a:a0:a6:a7:c3:3a:b0:68:3e:4f:11:7a:24:
                    2e:98:11:3d:3a:08:ff:2a:43:c3:e9:34:4c:4e:93:
                    83:7d:6b:d3:64:6b:55:c1:9a:cc:42:c8:06:fc:82:
                    5e:75:4a:fa:6a:18:21:c9:2d:4f:6f:86:bf:26:c9:
                    d9:7d:17:75:12:60:17:2b:a2:5b:f5:f2:f5:d6:85:
                    56:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:07:00:A0:21:BA:A9:49:C4:C9:DD:FA:9E:ED:0B:07:B8:D6:F7:41
            X509v3 Authority Key Identifier:
                keyid:4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e4:54:78:70:83:6a:7d:ac:1f:30:18:24:b1:8a:4a:c9:5e:
         3e:b4:cb:e7:24:ef:ec:c2:a1:0c:90:e1:65:f8:5c:9e:94:0f:
         28:9e:c1:78:0c:2e:bd:2a:9e:0d:33:3c:bc:ba:e5:b8:81:4a:
         9a:d0:74:a3:64:18:f1:91:cf:d7:85:1a:2a:48:04:77:cc:46:
         8f:64:fa:51:9d:ab:da:f6:af:d6:70:80:31:03:d7:29:89:b3:
         d1:b8:7b:ef:11:71:3c:d9:0a:b2:03:19:68:5e:e3:3b:b8:80:
         ad:ff:70:29:bc:87:53:e6:9e:3b:e1:a3:ee:a2:38:55:5a:3c:
         16:03:ab:5f:63:7a:02:dc:01:a6:be:36:5d:8c:72:1b:59:c6:
         62:3f:14:a2:93:48:85:b7:2b:d3:d7:89:4b:45:99:cb:99:5f:
         fb:e5:96:59:80:23:46:ec:a9:51:fd:37:fc:61:e1:85:8b:e3:
         8b:cc:b0:68:b0:7b:bb:92:d0:a8:d3:2b:fe:ff:b0:ab:95:57:
         1b:26:27:fa:10:44:a7:8b:4d:de:d5:cf:9f:39:93:e3:90:2b:
         b0:2e:77:ad:b1:13:63:b1:7e:a2:5e:41:2c:dc:a9:5c:a4:8a:
         4f:04:77:bf:7a:90:7b:18:73:a4:e9:a6:5e:12:eb:af:1a:75:
         d4:65:21:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:35:27 2025 by rpki-client