Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
File:                     dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft (raw, json)
Hash identifier:          1wp1aPzhEPEJbExZVQr6MptaoiIVdfhZli3VPKRJxLI=
Subject key identifier:   F3:C0:28:07:56:B4:D4:F8:1C:14:CB:E7:A1:80:70:3A:11:4F:F5:B3
Authority key identifier: 75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94
Certificate issuer:       /CN=A91C72E6/serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94
Certificate serial:       01B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
Manifest number:          01B3
Signing time:             Tue 09 Sep 2025 03:09:48 +0000
Manifest this update:     Tue 09 Sep 2025 03:09:48 +0000
Manifest next update:     Tue 16 Sep 2025 03:09:48 +0000
Files and hashes:         1: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl (hash: ewONhsw817s7nA+rK2xfFf6qHrZ9ppIzrNopl9yEwm8=)
                          2: 2340D07AF2F111ED91F08A4FC4F9AE02.roa (hash: VgWfSFvnBqBZBBT7n2uea4PCFkDi3gg2tHZzpCuKDJA=)
                          3: 23EE2B76F2F111ED91F08A4FC4F9AE02.roa (hash: gpne2Z9eCccwlEkyZjX90RD5Y2MRSV5puraHdA9qCqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 03:09:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C72E6, serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94
        Validity
            Not Before: Sep  9 03:09:48 2025 GMT
            Not After : Sep 16 03:09:48 2025 GMT
        Subject: CN=68bf9a7c-71f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c5:a5:2a:ab:89:78:bb:c1:0a:58:f9:63:41:
                    c6:8c:bc:e5:d6:e0:35:c9:90:2a:d6:19:c0:ce:1e:
                    56:2c:f9:8a:9c:1a:62:d8:48:43:8f:4d:5a:cd:f9:
                    78:cd:bf:b4:ee:ac:e4:41:96:50:4f:dd:19:45:88:
                    c9:0d:84:2a:18:de:85:ad:7d:48:ac:f2:a8:31:31:
                    ae:ef:fe:f9:06:ee:22:22:8b:c4:e5:de:69:55:38:
                    d2:fa:2e:d1:55:3e:fc:77:86:3f:f9:39:36:22:81:
                    0d:06:57:fd:3b:53:47:86:e4:d9:be:8e:7d:d0:91:
                    fd:e5:1b:41:dd:c9:96:45:d6:ec:69:42:5a:85:c8:
                    bc:20:61:da:88:7e:79:e1:6c:16:6c:c1:a8:9a:4c:
                    da:bd:78:26:9e:df:41:27:eb:77:6d:30:71:66:3b:
                    c4:ff:3f:1a:d3:45:55:e9:4c:f5:73:60:18:24:33:
                    d7:c6:56:8e:f1:01:14:d8:e0:26:f9:46:7c:92:62:
                    1f:bb:18:92:11:f3:21:29:7d:66:82:e3:95:12:41:
                    da:36:4d:ec:1e:e2:86:5c:cf:3d:13:28:2a:94:1c:
                    6c:a1:06:3c:b1:95:5c:44:c7:09:49:67:c7:36:4f:
                    b0:22:39:92:32:42:f8:62:ee:e2:42:d7:91:44:b7:
                    f8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C0:28:07:56:B4:D4:F8:1C:14:CB:E7:A1:80:70:3A:11:4F:F5:B3
            X509v3 Authority Key Identifier:
                keyid:75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:6c:16:87:7f:fd:bc:12:3c:bd:8e:31:d3:2f:0c:b7:4e:cd:
         6d:c5:66:72:c5:1d:75:6f:9a:c8:97:c7:83:44:41:89:40:e6:
         7a:52:06:ed:9c:6f:c4:87:96:1a:d0:5f:a8:db:30:83:cd:a9:
         e2:5a:c4:14:d5:3b:b6:2a:c6:cc:7d:2a:01:54:0a:9e:6d:c7:
         ac:9a:8e:63:49:14:66:de:1f:ba:66:20:b1:0b:d7:89:05:79:
         07:a2:0b:34:94:42:0d:99:d0:bc:6b:15:e3:8a:35:4e:bf:34:
         50:5b:f2:0d:45:8c:6d:93:36:f5:35:82:c9:26:19:d6:e6:5f:
         5f:66:05:1d:ae:8d:7e:95:70:12:4d:55:db:31:ab:a2:10:fb:
         f5:d7:8e:16:e3:d9:61:2a:28:1e:4a:00:e3:dd:c9:50:9a:c0:
         f0:e1:71:65:30:c8:c6:62:b8:4c:fa:1a:67:55:d2:61:c8:d5:
         b5:c5:03:89:35:c4:b9:04:fa:27:22:5a:91:07:a1:af:e1:a2:
         67:c2:7c:7c:34:e8:a0:88:75:fa:23:26:4c:b7:f6:78:a0:3b:
         46:15:a9:32:5b:04:bb:21:08:9b:a1:5e:c9:cf:05:c1:eb:37:
         33:8d:b5:10:d7:f7:46:96:79:c4:6e:be:f3:8c:f2:50:0b:a6:
         b7:0a:21:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:17:30 2025 by rpki-client