Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
File:                     ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft (raw, json)
Hash identifier:          8Ha6DeTS6acf5jNOZcjeBbMZ+gEzNrb1is1b0nhf6k0=
Subject key identifier:   54:82:30:FC:4D:EC:5F:16:44:26:2A:FB:E1:49:4A:FE:F9:71:E2:3A
Authority key identifier: 72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7
Certificate issuer:       /CN=A91CC1E9/serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7
Certificate serial:       01D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
Manifest number:          01CA
Signing time:             Fri 19 Sep 2025 03:29:37 +0000
Manifest this update:     Fri 19 Sep 2025 03:29:36 +0000
Manifest next update:     Fri 26 Sep 2025 03:29:36 +0000
Files and hashes:         1: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl (hash: SfEpZ53KabOlRHNVHnjGQbSSM62ri57ISDDk9BpLLTA=)
                          2: 2AB990CAF0A911ED80D2CB35C4F9AE02.roa (hash: 1jcnYgiH1oCe12gdnItbi9E2/n5D/nkIQyDzvjflQcQ=)
                          3: 1333404E5A0D11EF8810E217C4F9AE02.roa (hash: LSSqPw0m9vdH2z02yt+UwvMOawigT/2JykBCEQ4iiVM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl
                          rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 03:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 471 (0x1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC1E9, serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7
        Validity
            Not Before: Sep 19 03:29:36 2025 GMT
            Not After : Sep 26 03:29:36 2025 GMT
        Subject: CN=68ccce20-7327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:62:f3:ae:de:18:cf:57:57:65:c0:60:4f:a4:
                    6b:33:68:b0:62:86:83:64:a8:86:57:78:28:32:d5:
                    3d:23:35:26:a0:7b:7e:dd:7a:8a:ef:35:02:ab:28:
                    2f:b5:93:0d:67:ad:35:ad:60:a6:b6:2c:6c:59:78:
                    b9:d9:a9:fc:99:9e:d3:17:70:d4:96:a5:8b:39:1a:
                    67:e0:a4:43:12:12:7b:0a:98:02:0f:8e:64:16:73:
                    5c:9b:96:d7:34:97:c9:89:80:10:68:f1:e1:3a:51:
                    2f:5f:da:fe:a9:20:f8:68:11:f7:21:7b:23:6a:25:
                    6f:42:9b:22:f1:f5:0d:89:2f:e8:26:5a:ac:79:45:
                    4c:33:8d:46:45:8a:e3:c1:36:41:b2:05:21:39:54:
                    2a:a9:48:4e:fe:1a:0e:05:67:ae:83:b7:56:66:e1:
                    3e:b8:95:19:47:a4:3b:e7:ee:63:c5:41:5f:0e:5b:
                    45:01:8d:61:fa:f2:df:01:30:2a:ab:68:85:15:a4:
                    7c:99:f0:3b:b9:5d:26:db:39:ed:e6:69:41:bc:9b:
                    b0:f2:de:69:0b:2b:17:9d:94:68:42:32:fa:31:9e:
                    b7:89:02:2b:e1:7d:69:29:7b:ed:27:13:b6:c9:1c:
                    b1:10:dc:f3:8c:2e:af:d2:e4:e0:31:5a:21:3d:d9:
                    3d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:82:30:FC:4D:EC:5F:16:44:26:2A:FB:E1:49:4A:FE:F9:71:E2:3A
            X509v3 Authority Key Identifier:
                keyid:72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:a8:4a:84:9b:d7:3d:d6:8c:fc:c7:ff:ed:ff:b3:2c:9c:9e:
         c1:e2:8d:10:ac:c5:d5:c8:32:c2:85:74:76:2e:41:e0:06:dc:
         68:8f:cc:7a:7a:12:09:46:8b:db:a0:5d:c4:16:fc:ee:5d:fe:
         a4:00:84:8e:22:ae:7d:17:5b:65:27:c7:a9:fa:47:90:91:a8:
         ad:6e:89:b3:9d:82:88:58:f2:ce:0f:3f:bd:3e:30:df:6e:d3:
         ee:da:dc:ff:2e:d6:3c:52:e8:33:a9:84:50:74:84:4f:95:52:
         c2:68:c7:5e:58:7a:55:e9:3a:59:33:25:97:3a:47:53:32:76:
         58:71:e2:87:67:bd:36:d0:82:b9:84:3a:c3:eb:00:9b:29:40:
         8e:13:ba:71:31:1f:e3:5e:38:48:45:57:f0:72:c3:cf:73:e4:
         b5:ae:8e:87:e2:4b:00:19:10:62:0b:1c:53:a8:8d:13:71:42:
         cf:b8:4a:d2:62:17:1e:b1:b1:29:d8:c1:ec:6e:3e:7f:2f:44:
         ed:3d:ea:fc:d3:ea:c5:75:56:2a:08:3b:d6:af:32:90:8e:4f:
         15:b6:9c:d8:0d:70:a4:a1:c6:b0:2d:a6:81:db:5e:3f:48:66:
         4e:ab:02:83:03:b6:ef:87:15:b2:de:97:e5:55:9f:1c:fc:84:
         50:d6:a9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 09:15:45 2025 by rpki-client