Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft
File:                     e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft (raw, json)
Hash identifier:          PYH0pX/4tqx/AeJS4gtazjhUd/Y9A1RfL1iSWT1ZYfs=
Subject key identifier:   19:E9:89:F3:A6:64:58:D8:4F:15:68:8A:39:DA:07:F8:A0:86:C1:A8
Authority key identifier: 7B:E9:8C:7A:AA:D8:7C:9F:25:92:96:30:16:43:A3:61:0A:7B:51:88
Certificate issuer:       /CN=A91CDB75/serialNumber=7BE98C7AAAD87C9F259296301643A3610A7B5188
Certificate serial:       0119
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft
Manifest number:          0117
Signing time:             Wed 23 Jul 2025 05:07:11 +0000
Manifest this update:     Wed 23 Jul 2025 05:07:10 +0000
Manifest next update:     Wed 30 Jul 2025 05:07:10 +0000
Files and hashes:         1: e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl (hash: NO83dzQXqp7MhO9u2wMOQkpoeO/aQkHMX6Nq/1lPDZo=)
                          2: 4CC50DB2BB7811EE9416DD42C4F9AE02.roa (hash: zPBkBX8TSXO+DP7kaXxBDzxvo14LuZd67QJ/cyraKFg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl
                          rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 05:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281 (0x119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDB75, serialNumber=7BE98C7AAAD87C9F259296301643A3610A7B5188
        Validity
            Not Before: Jul 23 05:07:10 2025 GMT
            Not After : Jul 30 05:07:10 2025 GMT
        Subject: CN=68806dff-d12a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:15:a5:8e:09:1e:72:29:32:e5:d2:9a:6f:db:
                    dd:c4:a0:76:3f:a8:91:41:25:9f:58:18:b0:e8:f0:
                    e5:23:ac:3a:85:f5:0e:96:2a:0b:c5:ce:bf:7d:95:
                    20:b6:e6:17:32:c3:7a:6a:c3:56:8d:2d:e5:eb:72:
                    02:9b:f5:87:7b:c2:32:8e:52:66:a8:1b:64:35:84:
                    ea:08:69:82:e0:fb:80:1b:e5:ed:47:2b:66:84:0d:
                    c9:5d:c2:22:45:2e:c6:25:68:a7:6f:12:e0:93:1d:
                    83:a3:64:9d:19:ba:e1:84:b6:48:16:38:7a:c4:e7:
                    ea:7c:83:e8:64:3b:8e:7f:9a:20:da:f9:17:90:9a:
                    d4:7b:12:5d:4e:c3:c5:ac:3b:8f:1d:bb:42:58:59:
                    98:d1:a4:b1:5e:fd:e2:a4:88:cd:dd:21:53:be:60:
                    0e:93:86:2e:59:92:84:79:22:aa:ab:dc:cd:a6:cc:
                    13:b0:59:3b:3e:9c:79:8a:d7:ff:12:53:40:45:bb:
                    68:92:85:73:62:2a:f3:cc:e2:b6:d9:d5:fc:1c:93:
                    da:1e:fb:0b:08:0d:89:bb:ea:5e:c8:f1:ac:23:f9:
                    3e:71:e5:b7:87:a4:4d:1f:c3:21:8a:71:65:04:bc:
                    59:2e:98:f4:bd:56:14:b6:32:01:2a:3a:7f:b0:6e:
                    22:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E9:89:F3:A6:64:58:D8:4F:15:68:8A:39:DA:07:F8:A0:86:C1:A8
            X509v3 Authority Key Identifier:
                keyid:7B:E9:8C:7A:AA:D8:7C:9F:25:92:96:30:16:43:A3:61:0A:7B:51:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:46:0a:43:73:19:66:e3:21:c6:10:ef:9b:21:6e:12:4f:b0:
         a2:d6:8b:29:4d:f8:fb:b7:5f:5d:1e:0d:27:2c:90:0b:c5:4c:
         12:4c:7b:c0:8e:54:5e:da:f2:e4:42:70:19:11:f7:6c:a2:e7:
         f2:53:7e:88:58:77:af:c6:67:6e:30:ce:83:e9:e5:eb:44:36:
         a5:5c:1f:0e:80:31:d8:4b:2b:ca:e2:22:53:34:fc:00:c7:d6:
         cb:94:9c:67:c7:0f:8d:81:4b:7c:3c:07:68:48:71:46:f2:93:
         31:49:16:41:ca:8d:2e:e2:71:67:6d:fe:a4:db:4d:a3:24:ea:
         51:5f:78:c7:a8:03:f1:62:cf:73:56:f6:de:02:1e:86:d4:34:
         f4:57:67:8c:11:f7:1e:2f:f0:a7:2b:7b:f1:b0:89:59:9e:23:
         95:45:4e:15:29:6b:84:f7:c4:5b:39:e9:70:12:9d:22:d2:e6:
         62:0a:c2:db:22:1d:21:80:75:85:d5:c5:2d:6b:dd:8c:16:fe:
         bd:fb:15:6b:e5:17:7d:27:a0:ce:54:ec:c7:b0:72:08:eb:92:
         81:6b:e8:c9:79:ed:2d:e8:70:4f:54:42:a9:a0:42:32:99:b6:
         4d:7a:a4:31:4d:9a:9a:c7:aa:3c:17:8e:96:b1:86:ba:8a:cf:
         1b:e9:ff:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:21:38 2025 by rpki-client