Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft
File:                     -2uUY2HwxcguKwZ0DUuosLmTU_g.mft (raw, json)
Hash identifier:          9091PUUikulNoOx7yQDGI9A9mJellOLRqW1dPHw8veM=
Subject key identifier:   93:20:6F:E1:D6:3B:4D:27:B7:3E:30:BD:5A:0A:6F:F9:C5:EB:EC:63
Authority key identifier: FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8
Certificate issuer:       /CN=A91C6A35/serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8
Certificate serial:       79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft
Manifest number:          78
Signing time:             Sun 07 Sep 2025 07:16:49 +0000
Manifest this update:     Sun 07 Sep 2025 07:16:49 +0000
Manifest next update:     Sun 14 Sep 2025 07:16:49 +0000
Files and hashes:         1: -2uUY2HwxcguKwZ0DUuosLmTU_g.crl (hash: IrBN0i2kHLOMuEuW9xd4Hxqzs+WJQyGAuvdj6Syycic=)
                          2: 06D77958D49411EFA8DF5E69C4F9AE02.roa (hash: SIysPbQ0shw6SImSP7LGItvtceoka+GBhE2dzjDub+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl
                          rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 07:16:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6A35, serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8
        Validity
            Not Before: Sep  7 07:16:49 2025 GMT
            Not After : Sep 14 07:16:49 2025 GMT
        Subject: CN=68bd3161-f855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:22:3a:72:be:fc:88:4f:b3:1a:19:25:42:a4:
                    c7:62:13:4b:48:e8:34:5f:f7:c6:43:58:6c:76:ca:
                    24:a3:59:b9:3a:c6:dc:2a:b9:54:6a:4f:13:c9:0e:
                    8d:dd:d9:00:a8:43:c8:ca:49:c7:88:46:88:2f:4f:
                    08:ce:63:0d:29:b6:38:6b:e9:77:07:69:cd:7d:cc:
                    6e:77:0d:e0:47:00:1d:4f:76:d6:47:d1:cb:8f:8c:
                    a0:d1:bb:85:b4:a2:45:b2:b0:fc:20:5c:ab:b5:86:
                    00:10:fd:85:7e:1c:41:9a:84:dd:9d:41:b1:c9:7a:
                    5e:a3:b4:b0:1c:52:f6:f3:11:84:53:64:2b:31:08:
                    7a:85:36:ef:2c:e7:88:92:3c:29:2e:94:7a:7f:6c:
                    cc:db:2a:4c:ae:ea:c8:1e:0b:9f:ee:d5:2a:7c:fb:
                    5f:50:9a:2f:d5:e2:ac:b6:a6:1b:26:22:eb:e5:14:
                    64:fd:cb:2f:59:b4:12:ce:59:75:fb:f2:bc:f4:b1:
                    62:08:47:9c:6f:f3:9f:b8:cd:c6:76:9b:c8:e8:e8:
                    87:cf:9e:4a:4a:03:78:dd:4b:b3:94:8b:2d:c1:d3:
                    87:92:c8:57:71:26:13:89:65:a0:eb:f6:b4:c4:11:
                    1a:84:3e:8e:a0:1f:ff:61:6f:84:d0:24:cb:45:9d:
                    37:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:20:6F:E1:D6:3B:4D:27:B7:3E:30:BD:5A:0A:6F:F9:C5:EB:EC:63
            X509v3 Authority Key Identifier:
                keyid:FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:1a:7e:e6:a6:8c:e8:05:ab:6b:df:a4:52:4c:bf:51:f6:28:
         83:37:15:bb:a9:48:3f:0b:fe:c9:29:62:d5:4d:40:10:43:a2:
         7f:fb:3b:c2:c9:ea:ec:71:d9:cb:ff:27:89:fe:28:b2:94:5d:
         ad:87:2b:16:5d:06:00:66:83:6d:ec:52:91:40:cb:51:73:f7:
         48:ab:1c:46:31:21:50:18:8c:cf:52:d3:ff:1b:8b:e2:0c:96:
         7f:b5:9e:2a:c9:25:42:29:79:48:5f:cb:2a:76:33:8e:4e:74:
         c5:5c:ac:bb:0b:27:1d:f4:0d:2a:04:01:e4:cc:74:72:73:37:
         b6:78:42:65:dd:bc:92:04:f6:7e:cb:d7:fe:70:95:c1:68:98:
         ee:31:55:6e:aa:56:4a:81:e7:46:4b:0e:12:11:90:47:a4:cd:
         99:12:77:c2:13:3d:16:40:a4:65:73:44:74:b9:bc:d1:17:18:
         ea:9e:38:6a:40:07:d6:4f:74:0e:5e:c2:fc:ab:e0:2b:e1:d1:
         b6:3d:68:38:00:02:9d:fb:be:13:e1:96:39:5b:7c:1b:b3:55:
         52:97:ed:2f:01:07:37:8a:c2:02:bd:93:c4:f7:4e:61:d0:da:
         fc:61:76:c5:a6:e2:b9:1b:1f:f0:85:44:7f:03:43:2c:5a:76:
         32:e8:4a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 19:40:45 2025 by rpki-client