Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
File:                     emDAS4fWxsslHxUpfuJa0tpQXg4.mft (raw, json)
Hash identifier:          m28yvkbdgWlBxLO7+xISobXenlmDmEc+hXIRfxvueLY=
Subject key identifier:   4C:74:8D:D7:25:92:03:C4:89:CC:CC:09:53:4F:96:EC:33:49:DA:02
Authority key identifier: 7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E
Certificate issuer:       /CN=A91D0935/serialNumber=7A60C04B87D6C6CB251F15297EE25AD2DA505E0E
Certificate serial:       0354
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
Manifest number:          034B
Signing time:             Sun 07 Sep 2025 01:26:23 +0000
Manifest this update:     Sun 07 Sep 2025 01:26:22 +0000
Manifest next update:     Sun 14 Sep 2025 01:26:22 +0000
Files and hashes:         1: emDAS4fWxsslHxUpfuJa0tpQXg4.crl (hash: WpN61sTxk64eqHXpDLSDJYplT+wopXUek/7G2D1A3y0=)
                          2: 387AE648938B11EEA552D487C4F9AE02.roa (hash: n2JnUjdK1G3DKEtjobXUa5tJlDzoU7ugVziN4/cf1hI=)
                          3: 38043DF4938B11EEA552D487C4F9AE02.roa (hash: Z/v2dPSlVHtaS2gXVPwHt6zhX6qyLYHvPRCOMkLkMrI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.crl
                          rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 01:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852 (0x354)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0935, serialNumber=7A60C04B87D6C6CB251F15297EE25AD2DA505E0E
        Validity
            Not Before: Sep  7 01:26:22 2025 GMT
            Not After : Sep 14 01:26:22 2025 GMT
        Subject: CN=68bcdf3f-288d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ec:d7:44:21:3e:ad:52:60:11:72:28:f7:c5:
                    bf:98:ca:43:87:be:82:67:c5:94:86:47:11:77:48:
                    18:41:3b:ff:31:33:e2:2e:1f:f9:60:97:b9:61:f8:
                    b8:d2:52:8e:9c:fa:4d:f1:80:4f:61:05:d0:fa:60:
                    7b:7a:10:1d:17:55:db:90:c1:69:d3:75:43:d3:1a:
                    70:52:06:24:f0:2c:8d:5c:51:1d:4c:7a:05:fa:a7:
                    2d:64:6d:41:af:fd:da:9a:4c:0e:67:93:0f:79:8c:
                    f4:35:1d:96:d2:60:af:4a:ef:d0:a8:10:f3:d8:6a:
                    4c:9f:0c:07:e0:b7:af:29:60:9d:96:a8:2d:4e:ff:
                    83:67:10:42:37:2f:b5:6d:5d:9b:f9:7f:9f:62:3a:
                    d2:eb:9d:e2:67:c5:b4:07:e8:e5:0f:8f:03:22:a8:
                    c4:10:30:b4:18:0a:a5:33:20:35:dd:a5:01:eb:76:
                    eb:6c:5a:2d:3c:80:14:35:67:9e:7f:2b:1d:3f:8c:
                    80:71:9d:aa:bb:b3:59:d0:ed:cf:2b:6b:ec:86:46:
                    be:b5:6c:4a:82:ab:ab:f1:56:2d:8e:40:38:f0:3a:
                    97:fa:8e:c9:40:7c:e7:44:e5:3c:f3:8a:ab:23:ad:
                    05:56:29:71:00:e2:4e:17:e3:c4:0e:07:a8:7d:13:
                    e9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:74:8D:D7:25:92:03:C4:89:CC:CC:09:53:4F:96:EC:33:49:DA:02
            X509v3 Authority Key Identifier:
                keyid:7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:68:fd:71:84:a4:fc:54:43:26:47:b8:30:e3:4b:da:a5:b5:
         8b:86:1e:d9:7d:03:d8:12:ba:14:e7:5f:c1:5f:13:2f:12:e1:
         6a:52:d7:35:61:3e:31:e9:ee:41:8a:a2:34:c9:21:e1:7f:31:
         3e:02:eb:36:b0:78:12:08:44:fa:2c:dd:ac:80:99:3d:72:e0:
         b5:14:de:7f:c4:81:43:bf:4a:fa:41:17:a7:c2:c9:91:61:fe:
         c0:5d:67:9f:cc:f4:25:11:0e:a0:26:fd:c4:cc:b1:33:b9:2d:
         36:67:54:56:65:0a:4b:62:ed:a7:a9:e9:a7:b7:12:fd:b9:0e:
         e8:bc:b3:91:9a:b8:45:85:ec:ef:a7:5d:58:50:18:ed:eb:30:
         b8:3f:92:42:d5:45:50:e4:50:b8:4f:2c:ec:61:1a:77:63:1e:
         ac:d1:29:19:db:5b:06:6c:e5:8f:4f:42:f6:5d:4b:84:93:69:
         e0:9f:91:86:93:3d:55:90:f8:93:15:88:c8:bc:ea:be:a9:d8:
         ed:ff:26:b2:07:2e:de:67:e0:97:3b:51:de:bf:32:10:24:6b:
         63:0a:2f:b4:5e:5a:f7:cc:ef:70:bf:2c:44:4b:d3:dc:c7:f7:
         00:84:2f:42:9f:a7:b8:8f:25:b7:02:fc:9d:b0:e3:64:66:0c:
         c9:5a:8d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:28:15 2025 by rpki-client