Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft
File:                     3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft (raw, json)
Hash identifier:          eq45m8TnOwA41utwHLjxRyZbwsN+LrzSTHQgZTVb1/A=
Subject key identifier:   0E:B9:63:20:E8:57:1E:4A:30:C2:AF:B2:51:F0:54:1A:83:E2:26:2E
Authority key identifier: DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11
Certificate issuer:       /CN=A91D76BE/serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11
Certificate serial:       0A66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft
Manifest number:          0A5F
Signing time:             Wed 20 Aug 2025 19:44:51 +0000
Manifest this update:     Wed 20 Aug 2025 19:44:50 +0000
Manifest next update:     Wed 27 Aug 2025 19:44:50 +0000
Files and hashes:         1: 3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl (hash: Fu77mqxBRdGSmNlSkdIl4in3vBtoObOqDpDJB93EcC8=)
                          2: 47772F946C2011EAA5965B3CC4F9AE02.roa (hash: VtwEbio1gRB7Ch5LlsoNkh9yhOMrAAqsTjIWAhPZFj0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl
                          rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 19:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2662 (0xa66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D76BE, serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11
        Validity
            Not Before: Aug 20 19:44:50 2025 GMT
            Not After : Aug 27 19:44:50 2025 GMT
        Subject: CN=68a625b3-d8ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:88:fd:e3:ef:f1:e1:5c:89:e7:36:09:26:7b:
                    58:43:9c:86:05:ce:22:1c:54:91:c1:4c:71:11:8d:
                    60:3d:eb:14:ef:99:78:53:7a:d0:41:68:5c:38:22:
                    da:d7:44:5f:01:5c:c3:d7:4f:69:cf:03:f1:24:db:
                    45:a1:c2:12:e6:31:b1:c1:16:ad:d1:7d:95:29:0e:
                    10:a1:0a:44:d6:c5:70:eb:03:78:5a:16:f6:27:52:
                    0a:44:c8:db:b6:2f:56:23:66:2c:a1:b0:06:ec:a7:
                    b4:cb:5c:25:55:38:20:e5:e8:15:e4:de:74:3f:69:
                    ba:e1:81:9e:5b:f1:16:a6:1e:f8:70:a6:17:f3:72:
                    7f:30:bd:0b:bf:7a:fb:3f:a6:5c:30:e8:e7:eb:9a:
                    a4:31:a9:a3:31:63:db:13:e5:19:26:84:42:0b:3c:
                    be:f5:52:28:75:78:a1:dd:df:f5:a1:83:92:db:6b:
                    61:a2:54:f0:bb:44:ec:f8:20:ef:b4:ba:95:9f:62:
                    45:16:6b:6b:05:fc:ca:76:a6:29:14:3e:5a:22:16:
                    8b:d9:e3:dd:75:93:34:ed:60:34:0f:d7:05:26:0c:
                    0a:8b:89:63:7e:4d:16:0f:be:5a:14:58:81:6e:35:
                    8b:1d:6f:ba:f6:03:70:45:ac:67:75:1b:01:0a:7e:
                    49:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B9:63:20:E8:57:1E:4A:30:C2:AF:B2:51:F0:54:1A:83:E2:26:2E
            X509v3 Authority Key Identifier:
                keyid:DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:8a:9c:28:35:de:1d:55:22:20:9b:4d:ef:d4:17:47:f1:11:
         cb:b7:6b:b9:b3:44:21:a6:bd:7c:12:47:73:0d:c8:e0:64:58:
         46:38:81:25:35:a9:ac:ae:20:84:b9:47:de:06:8f:04:d3:b7:
         60:47:a7:b6:5f:b8:6b:6b:b1:47:95:54:0b:e9:47:f5:12:31:
         57:25:52:46:4e:4b:19:34:7a:67:37:70:06:fc:f9:f4:1d:66:
         b8:57:69:f1:b2:0e:89:92:2a:d8:cf:c6:34:93:73:a0:1c:87:
         34:2b:f3:ae:a3:bf:ae:69:2b:cb:7a:35:58:97:92:cb:79:91:
         95:f1:9e:32:0e:72:09:84:70:d9:ca:7b:e9:8e:8a:90:e8:4f:
         ed:6a:66:7a:ff:a0:b5:3c:c5:c2:da:d4:67:79:c0:82:a7:98:
         e3:f5:58:1a:d6:bc:d8:f7:76:1b:9c:4f:19:23:e8:4d:b5:2c:
         f7:4f:a4:bb:64:64:e9:c7:c9:bc:98:0c:60:0d:e3:c9:5b:46:
         af:7c:cc:ad:9a:04:67:d8:6c:43:fd:ee:ae:ff:b9:e4:8a:2d:
         45:89:4e:d2:36:5b:37:94:f6:12:47:ec:5a:fd:f2:a4:0a:36:
         1a:90:11:cf:fc:53:b0:9b:e7:28:50:8b:d6:27:d3:f0:1c:97:
         76:ce:a8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:22:29 2025 by rpki-client