Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
File:                     5CnUKeZreXs9ihy-JJFXetw4pI4.mft (raw, json)
Hash identifier:          suB/FHPM9Eakb47G/gY8PregJsPAerxU/eT3ifDchYA=
Subject key identifier:   19:C0:DD:84:BE:33:30:0B:F3:D2:D6:96:96:87:0E:5C:89:A5:6F:09
Authority key identifier: E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E
Certificate issuer:       /CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E
Certificate serial:       0133
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
Manifest number:          0113
Signing time:             Fri 05 Sep 2025 05:41:51 +0000
Manifest this update:     Fri 05 Sep 2025 05:41:51 +0000
Manifest next update:     Fri 12 Sep 2025 05:41:51 +0000
Files and hashes:         1: 5CnUKeZreXs9ihy-JJFXetw4pI4.crl (hash: CQI6bi7tcnJnnt8TQQzWPsbAZHSrBNkZXKphG//De3c=)
                          2: 06FA65A81F2711EF98DA2926C4F9AE02.roa (hash: oS4PRK+VFwkVhFqqmzFtlUlVZ/0tESve4AVvdpaS7tg=)
                          3: 25ED44B41EE411EFA62B1335C4F9AE02.roa (hash: zb91MkoqcDkuzuZwD7VYBRLCNDf9oSeL0ikN94ozVn8=)
                          4: A7FC5DEE8D0411EFBD7A0057C4F9AE02.roa (hash: TGsIq74Qma+U6c7Ey8qeEz04VjG5STVU5SpvAS46Q6U=)
                          5: 359CBDB28D0D11EF90882959C4F9AE02.roa (hash: qdwbcsIyL1f3wI2tO7dwB6BR0n7SfSV/G7xRpNDHqtU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl
                          rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 05:41:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307 (0x133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC711, serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E
        Validity
            Not Before: Sep  5 05:41:51 2025 GMT
            Not After : Sep 12 05:41:51 2025 GMT
        Subject: CN=68ba781f-ecbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fa:4b:0f:78:00:94:ed:7f:d6:7d:97:bb:f3:
                    f4:38:05:84:4e:d1:26:93:ba:f6:55:55:12:20:96:
                    a5:f5:75:e6:1a:6c:a4:9f:af:e5:83:ad:41:77:7c:
                    73:22:61:83:aa:43:fd:ee:b0:8a:50:7b:26:46:1b:
                    2f:29:36:8b:d7:a9:c4:59:56:1b:2c:b8:33:87:7b:
                    be:f6:bc:31:9f:14:e1:5e:c1:3a:a6:c6:8b:a6:c3:
                    29:94:b4:d2:f8:9b:22:83:d5:d7:e2:af:9f:59:d8:
                    54:71:46:c5:87:85:71:1a:45:20:5d:10:aa:ec:e7:
                    06:d2:bd:bb:09:f6:f6:15:b8:52:e3:f7:1c:e0:51:
                    9e:35:c4:9d:14:2b:ae:c4:c3:14:4e:b3:53:98:fe:
                    e4:27:b5:34:f9:0e:f0:a7:34:e9:22:4e:80:b9:9e:
                    29:e2:c9:a6:65:cf:81:a9:4a:9a:ad:81:52:02:a8:
                    88:a4:88:b9:f7:40:5a:7b:3a:1c:4d:aa:b8:a3:88:
                    eb:81:3a:a0:37:b7:fb:f9:bd:2d:c5:4a:8b:df:42:
                    a3:f8:8e:66:8d:72:ad:b8:31:c5:48:cd:20:5a:6e:
                    60:65:c3:e3:fc:25:41:be:be:a4:21:77:51:da:82:
                    f1:79:97:30:52:51:82:54:ca:93:bd:f0:63:a7:b1:
                    9c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C0:DD:84:BE:33:30:0B:F3:D2:D6:96:96:87:0E:5C:89:A5:6F:09
            X509v3 Authority Key Identifier:
                keyid:E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:4f:32:80:f4:25:24:f7:f7:25:65:2f:8a:78:93:8d:0e:e3:
         ea:49:1d:52:46:61:e7:25:82:48:db:14:55:98:09:4b:e8:14:
         64:99:42:8b:8f:4e:cd:f1:2f:4c:c4:4b:a0:38:b1:ee:20:c8:
         47:b4:11:a5:4e:79:d5:0f:b3:40:7c:e7:b1:f0:7a:c8:fb:5e:
         d5:87:76:78:ed:bb:f7:4d:4b:62:f4:5c:8e:29:fa:30:d4:27:
         6e:7c:ce:c0:0a:d2:88:25:53:6a:19:9c:b3:13:44:aa:2b:47:
         00:9d:74:ce:b1:86:e1:65:08:0d:59:0c:97:f9:6d:b0:1b:a8:
         d0:37:65:60:99:80:5d:f5:50:97:96:fd:2b:cf:36:d9:59:aa:
         13:fa:78:a0:29:c2:40:db:87:5b:3a:fd:f2:6c:27:ea:87:92:
         dc:56:3b:9f:c6:40:66:e1:50:e8:59:ba:d0:1f:cc:62:92:f5:
         a1:9a:cd:e4:57:94:2a:2e:66:93:ab:32:7a:e2:ed:4c:69:69:
         b1:fd:3a:29:aa:06:88:94:cf:94:c3:17:7d:ba:1e:d3:53:9e:
         34:cb:ef:fe:8e:73:c3:c5:3f:8a:9c:0a:e8:e9:06:ce:a7:08:
         0d:fc:24:2a:11:9b:7c:bf:0b:e7:54:51:70:85:44:61:8e:8f:
         44:e7:43:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:33:52 2025 by rpki-client