Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft
File:                     yvogqQGAldIp8KxDkg3NQ6Zr61I.mft (raw, json)
Hash identifier:          SFIZOyMNWtgE7yLC5uyUYSmHlmueT1gXYuVUWS4zBog=
Subject key identifier:   44:DC:FE:A8:5A:7B:78:21:7D:46:6B:23:23:EE:1D:0F:58:A8:51:D2
Authority key identifier: CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52
Certificate issuer:       /CN=A91C4FB5/serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52
Certificate serial:       11AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft
Manifest number:          1184
Signing time:             Sat 06 Sep 2025 17:20:27 +0000
Manifest this update:     Sat 06 Sep 2025 17:20:27 +0000
Manifest next update:     Sat 13 Sep 2025 17:20:27 +0000
Files and hashes:         1: yvogqQGAldIp8KxDkg3NQ6Zr61I.crl (hash: QxzmRBggXXabw3aCMqJjmWhwImbnOuMp9gvDCItS23Q=)
                          2: 08BD74841A4F11EA8DFECB86C4F9AE02.roa (hash: 5pPzlX8jdTNFookFj/rSeOJPoKLM49nAfSCOByjLKkM=)
                          3: B9F821D4462D11EC93DFE63CC4F9AE02.roa (hash: I8lWHibGq7xqWHXndBv/JsEhBfdVBWJiR9FoofIbTMA=)
                          4: F7ACE748AD3C11EA95DFF369C4F9AE02.roa (hash: eva2CwxKJKJqWQ6I0wp7A0DX5eeMMT63BYKB14R391I=)
                          5: F6609DDAAD3C11EA95DFF369C4F9AE02.roa (hash: RU5uDzdAkRAS9qZ8SwVPWAXrYZQRzn4OHSyBtdDYzzE=)
                          6: D3258BFA7AE711EFB4F5E235C4F9AE02.roa (hash: IqcKshpk+qASTKe+nVLkoXyik/TGszfm7PEMyL1PxRk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl
                          rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 17:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4522 (0x11aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4FB5, serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52
        Validity
            Not Before: Sep  6 17:20:27 2025 GMT
            Not After : Sep 13 17:20:27 2025 GMT
        Subject: CN=68bc6d5b-002d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0e:84:e3:09:9a:f6:58:1d:b7:9b:f3:04:16:
                    bf:8f:ad:0a:54:ac:6e:b5:27:21:89:a2:14:e8:07:
                    fc:da:0c:4e:8c:25:36:39:fc:d6:7c:e4:8f:ba:35:
                    eb:16:9b:ce:4d:e7:1b:88:61:bb:41:40:73:d2:c9:
                    6b:8e:2f:90:a0:ea:f2:66:18:d5:23:e8:b0:7e:60:
                    99:a6:bf:7e:23:0d:11:11:3c:c8:73:91:1e:cb:da:
                    b4:f8:d6:ec:8a:b2:3f:09:97:93:47:c0:c3:3a:c2:
                    2f:11:5d:2f:0e:5d:71:e3:98:9b:dc:d5:2f:51:66:
                    1f:44:9b:44:f7:80:0f:da:9a:22:60:83:ce:58:ed:
                    75:7b:fa:3e:9e:1d:48:8a:52:08:86:54:18:46:21:
                    8e:f5:48:35:cb:77:c9:54:4f:0e:e3:29:83:53:1f:
                    2b:96:b8:d8:c4:8b:38:8e:1b:fd:be:91:f5:4d:7d:
                    69:d3:6b:40:5a:35:e3:0b:41:ce:18:e0:2f:88:54:
                    f3:53:d8:8b:b0:a3:f8:d8:3a:9d:4b:df:b8:33:07:
                    8b:80:bc:54:7e:05:68:73:26:5e:e3:71:d0:da:bc:
                    3b:75:3c:67:57:7c:4c:13:e2:a0:ec:70:52:17:70:
                    53:0c:48:b2:d0:39:77:7c:60:8b:27:29:e3:44:44:
                    ba:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DC:FE:A8:5A:7B:78:21:7D:46:6B:23:23:EE:1D:0F:58:A8:51:D2
            X509v3 Authority Key Identifier:
                keyid:CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:4e:b9:9a:d3:14:92:33:72:43:b1:0b:6e:1b:37:7e:52:80:
         11:1c:4f:30:14:aa:d2:d0:4b:57:db:10:f7:5b:cf:30:00:e9:
         21:a5:d0:d8:0e:bb:05:20:0a:6f:75:7c:ec:96:bc:7c:27:ea:
         b4:3d:cc:1a:e7:c2:ff:43:68:fc:c5:fd:4d:52:2d:b2:e7:45:
         39:37:47:52:79:dc:cd:00:96:96:7b:fc:29:fe:ab:98:dd:f3:
         d9:7e:e7:3a:c0:60:f2:31:53:77:1d:1d:6d:43:7a:26:0f:ba:
         c8:fb:da:e9:48:26:59:ef:33:9f:61:5e:5d:c7:bc:27:d0:7e:
         dd:8a:e2:07:b8:60:84:f2:51:41:f9:4a:9f:76:1b:e3:8b:aa:
         f5:f5:76:48:32:14:ba:af:a3:53:18:4c:48:6b:21:6b:58:68:
         71:7b:7f:6c:3e:c9:31:83:7e:0b:fc:dd:5f:f5:39:c6:89:bc:
         02:da:33:07:a8:f1:af:07:47:88:4a:7d:f1:0c:4b:b5:65:fc:
         c9:21:f7:01:aa:63:95:8e:e5:a3:cc:8c:9e:22:4a:7e:a2:21:
         e7:58:44:61:e0:2d:85:b1:4d:52:e4:6a:4b:cf:ea:a2:57:be:
         5a:5e:56:b8:06:36:7f:3b:f8:67:b9:3e:df:03:fd:3a:39:f4:
         6a:2d:ac:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 00:44:20 2025 by rpki-client