Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft
File:                     PinOb2p9uUttCRM7c_7VLd7hLas.mft (raw, json)
Hash identifier:          ZfGuclnFXLfSDmagkuuufspfiP5DRJOiDcNUtZ8y1hs=
Subject key identifier:   F5:C9:C4:58:2B:87:B2:A9:1F:71:A4:94:92:E6:08:48:F0:B8:F2:10
Authority key identifier: 3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB
Certificate issuer:       /CN=A91CF285/serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB
Certificate serial:       10B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft
Manifest number:          10A1
Signing time:             Wed 20 Aug 2025 17:25:37 +0000
Manifest this update:     Wed 20 Aug 2025 17:25:36 +0000
Manifest next update:     Wed 27 Aug 2025 17:25:36 +0000
Files and hashes:         1: PinOb2p9uUttCRM7c_7VLd7hLas.crl (hash: Yr7drYUde4dl9GLGUfW4VNU5I2r/wAcX/cUVPpdqTFY=)
                          2: 073BC4F4ED3B11EDB5A01A46C4F9AE02.roa (hash: zHchOODRMXh4YPNN1A7mCb7XiL/ujTp4cFUjm4qxBCU=)
                          3: DC83478EEB0311ED875DD72EC4F9AE02.roa (hash: ZDjZETXLZ7zFreIAvqJ7UMCHnkhV8V9TxpsSD145ZBI=)
                          4: AB731B004B2A11EFAAFCC92CC4F9AE02.roa (hash: 1iubQBpsLSvGnn+Mx1GBJRtm0BcqUW85CF15NJsmWt0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl
                          rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 17:25:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4276 (0x10b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF285, serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB
        Validity
            Not Before: Aug 20 17:25:36 2025 GMT
            Not After : Aug 27 17:25:36 2025 GMT
        Subject: CN=68a60510-7ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a7:75:f5:45:97:62:83:aa:be:d7:ef:b1:3e:
                    76:e6:b6:3a:9d:3a:be:65:5e:b6:4b:e8:92:97:95:
                    4a:00:49:2f:12:e3:2d:cd:23:f2:af:be:56:93:dd:
                    62:98:34:2d:42:11:41:58:35:45:7d:11:93:5f:85:
                    ac:c9:c3:79:6e:3d:a8:0a:2a:e5:e7:c5:a2:b5:a2:
                    45:13:20:50:2e:8d:4c:9b:c8:6a:6c:7a:ec:be:01:
                    39:3b:bd:24:2d:b2:e4:d0:df:2f:ab:8d:e8:78:6a:
                    f2:dd:d1:80:f1:d9:e1:20:50:09:ea:4e:0f:06:72:
                    49:ad:c0:5f:17:8c:91:f3:a4:6c:8d:5b:99:83:a9:
                    d5:79:11:13:64:34:b2:64:f9:f1:1b:3d:47:4f:a6:
                    6a:e1:49:26:6f:61:b5:a1:8f:71:13:85:09:fe:7e:
                    2e:7b:b9:4b:39:bc:ee:0f:72:ba:36:00:bc:7b:6e:
                    1c:e3:ae:14:f8:00:e1:c6:1a:87:4f:05:c0:b7:d4:
                    f0:71:7c:ab:e6:50:3b:c6:3c:62:d5:88:ef:72:c4:
                    2f:f1:3b:94:8b:00:cd:37:e2:19:15:90:39:da:4b:
                    d4:eb:c8:29:f8:14:c5:f1:1a:38:bb:49:6e:59:22:
                    5d:6c:98:f4:b0:7b:20:0d:ad:09:f4:ad:4b:db:dc:
                    98:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C9:C4:58:2B:87:B2:A9:1F:71:A4:94:92:E6:08:48:F0:B8:F2:10
            X509v3 Authority Key Identifier:
                keyid:3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:7f:1f:10:0c:0e:b1:d9:65:50:00:23:c5:88:92:f0:e4:9f:
         43:79:ec:64:9a:7d:fa:e2:95:0a:76:e0:8c:40:0f:b6:69:0f:
         d6:9c:03:e1:3c:ca:07:61:4b:bc:cb:16:bf:35:e9:66:17:75:
         0b:ac:4c:37:4e:1c:c1:54:24:f9:c1:c2:41:27:82:51:da:e2:
         7e:b2:8d:ad:2d:5c:bc:d3:48:fb:48:d8:cb:9e:9e:28:9b:3b:
         69:28:df:8c:26:17:a0:9d:d0:28:3e:0e:af:9d:0a:80:11:1b:
         f6:7a:54:2d:52:f0:1f:68:41:e7:e3:2d:4e:32:25:7e:a7:a4:
         ed:c2:f6:4a:c3:35:b1:51:36:66:29:0d:4e:12:74:80:97:26:
         3c:40:65:eb:9f:25:6f:c7:e5:ec:2c:5a:36:3b:a7:a7:6a:bb:
         ea:b8:66:dc:8c:06:fe:68:e1:f1:9c:2c:41:a8:97:67:7b:02:
         8d:8e:a7:82:05:92:b6:fd:21:25:ca:c7:92:f9:78:d1:7d:1a:
         01:7c:ca:87:11:7e:b2:a3:da:87:36:c0:e4:f1:64:0f:97:ed:
         35:aa:dc:d8:7c:1d:34:1e:e6:26:00:33:1b:66:af:bd:93:30:
         2e:e7:12:a5:0f:fe:74:4a:bf:b9:97:0e:27:90:d9:93:74:74:
         c6:df:90:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:27:18 2025 by rpki-client