Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft
File:                     o1D687bxS8juGymW7tSOJwIOEIM.mft (raw, json)
Hash identifier:          eesvkgdyC7ab+QtTmivJU/41ulf767cZXYqeG8xmdmk=
Subject key identifier:   E5:AF:86:56:08:FB:06:44:73:74:F4:32:DF:18:9D:2F:72:60:F1:95
Authority key identifier: A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83
Certificate issuer:       /CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083
Certificate serial:       089A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft
Manifest number:          0885
Signing time:             Sat 06 Sep 2025 20:50:40 +0000
Manifest this update:     Sat 06 Sep 2025 20:50:39 +0000
Manifest next update:     Sat 13 Sep 2025 20:50:39 +0000
Files and hashes:         1: o1D687bxS8juGymW7tSOJwIOEIM.crl (hash: Ao04/VQoYzB8v8aqbb4nWkY5t8s2kl/dpUf+IQzEirs=)
                          2: C5E7AA2289A011F08D995D74C4F9AE02.roa (hash: jS53WXHjCoys1e1t5l2xcO16jh1u3l1FTq8ZOUzIH88=)
                          3: ECE8975685D811F09A4FFA45C4F9AE02.roa (hash: kbQycqq6uhbmllHh50J5L3MKomIfAJJoAz4btbBqKyw=)
                          4: D32DB3AE7FC111F0B3BEC06AC4F9AE02.roa (hash: /uldeOBBVv+zaXl5jNRHeGbB+ckh7FIYfUU0p3GU20E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl
                          rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 20:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2202 (0x89a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4834, serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083
        Validity
            Not Before: Sep  6 20:50:39 2025 GMT
            Not After : Sep 13 20:50:39 2025 GMT
        Subject: CN=68bc9e9f-b918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:54:c9:8d:16:b3:1e:2b:25:b8:cf:45:3a:c4:
                    6f:58:72:c3:6c:88:e0:9a:c8:24:94:7d:54:0b:dc:
                    a4:74:8b:2e:c1:6e:c3:20:e0:29:52:7c:f4:c2:09:
                    b2:b9:35:b7:9a:21:cb:bc:19:24:5f:64:c5:bf:a8:
                    e4:64:a4:09:8e:f0:6a:96:d9:f8:7a:d1:22:c8:5a:
                    1c:35:b9:91:1e:22:15:2d:bb:04:03:76:a5:54:e1:
                    f4:59:66:06:18:89:9e:14:96:a1:2c:19:48:94:3a:
                    21:4b:e9:87:05:48:ab:a1:19:79:e1:33:76:bf:a9:
                    5c:58:93:0e:84:ab:88:e6:cc:d1:81:40:78:ec:51:
                    bc:d0:91:fc:cb:3e:7d:1f:0f:19:fa:a7:07:0c:a7:
                    d6:94:de:de:44:79:8a:bf:93:63:b5:37:95:34:1d:
                    1b:3f:da:18:4b:1c:3f:11:07:76:96:10:28:b6:b9:
                    49:5c:cd:8b:b8:46:3c:dd:b6:5f:4f:3f:c8:0b:10:
                    74:22:be:a2:ef:08:d4:69:c2:3b:34:d9:fc:9d:01:
                    6c:3b:d2:35:b7:34:70:93:24:17:5e:73:1b:f3:69:
                    d6:de:00:e8:e1:39:1e:5d:bd:68:e2:df:04:14:e4:
                    49:8a:73:1c:0a:18:30:8e:69:f6:9a:4e:e4:9c:1d:
                    ce:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AF:86:56:08:FB:06:44:73:74:F4:32:DF:18:9D:2F:72:60:F1:95
            X509v3 Authority Key Identifier:
                keyid:A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:52:9f:25:94:f2:f9:eb:67:50:fd:c1:4c:dd:60:7f:f2:c1:
         78:12:03:73:9e:96:fc:40:24:32:4f:43:c6:1c:03:96:00:a1:
         96:43:16:54:58:86:b8:e6:d6:4f:ca:43:9a:5d:c5:46:4f:14:
         5d:5e:d3:af:48:8e:b1:2b:b8:42:e5:6a:41:e4:31:b6:6f:d1:
         9f:0f:b8:95:ba:d3:aa:25:37:74:b2:b2:87:9c:0b:cc:cb:4a:
         de:c3:18:69:5e:8c:d0:84:b1:fb:51:25:db:fc:9a:79:94:72:
         2b:c7:c2:21:92:70:54:ee:c0:f9:b7:08:9b:8a:e9:78:31:73:
         d4:48:f5:6c:2a:fb:66:4a:e7:f5:57:88:aa:b8:ae:06:35:08:
         fe:7d:bd:3b:b0:97:0f:fb:77:0f:e8:fb:05:51:84:5b:14:1e:
         97:42:c1:57:21:3c:cf:c9:06:23:52:02:5a:98:e7:c7:10:d1:
         e3:a9:34:ec:7f:70:1c:f8:5a:25:72:55:7d:7e:68:83:d4:c0:
         33:af:c1:ca:e7:c0:97:b1:0b:fd:dd:a0:ed:70:61:54:22:1d:
         08:fa:06:35:b1:17:ee:cf:24:7a:9f:6d:c6:65:5a:6a:36:78:
         dd:6a:79:54:17:ae:8b:93:d3:fa:ed:81:65:38:4b:bd:a4:d1:
         88:6e:07:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:33:46 2025 by rpki-client