Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
File:                     S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft (raw, json)
Hash identifier:          73FVxmFHz1wncuSfX9zdIVSTh5JtKx8RYSCyO6Sh8+g=
Subject key identifier:   FC:41:1D:57:59:B8:C2:DE:67:A8:9C:B8:40:35:05:43:D4:80:F8:C4
Authority key identifier: 4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E
Certificate issuer:       /CN=A91D82F4/serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E
Certificate serial:       071E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
Manifest number:          0715
Signing time:             Thu 18 Sep 2025 22:06:01 +0000
Manifest this update:     Thu 18 Sep 2025 22:06:00 +0000
Manifest next update:     Thu 25 Sep 2025 22:06:00 +0000
Files and hashes:         1: S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl (hash: zeEop/GoMb64J34A97uT0mald3GM54lgyamf0PYswQY=)
                          2: A2EF68E66EAD11EC8796A251C4F9AE02.roa (hash: hiz98+Tla2jui/7o4KW1a6oKm5a+tUfazFi0UQ7ozaI=)
                          3: 56617572537F11EB9C970658C4F9AE02.roa (hash: xS7amPwlmGL+CP12HQjnbonilF649h5RUnRZcUUg8FE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl
                          rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 22:05:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1822 (0x71e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D82F4, serialNumber=4BEAEC337C6E89F2794A9744E16D919C9C793B1E
        Validity
            Not Before: Sep 18 22:06:00 2025 GMT
            Not After : Sep 25 22:06:00 2025 GMT
        Subject: CN=68cc8248-6531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:57:fd:06:3d:a4:89:60:b0:07:59:6b:83:
                    f7:3c:0a:28:21:c7:01:1f:ad:b4:c4:97:72:1f:3e:
                    41:55:13:47:92:25:f0:63:0e:68:86:f0:fd:8c:52:
                    d4:20:68:36:b1:b3:ce:b4:b0:50:4b:f9:fc:28:a6:
                    24:db:26:e8:96:40:2a:97:22:81:a2:5b:ba:fc:37:
                    6c:35:b8:cf:60:eb:3d:c8:90:68:fc:e7:c5:cc:c3:
                    3c:8e:4b:50:6e:5c:d6:c7:26:0e:5b:19:80:a6:7f:
                    6a:59:f8:5a:15:08:65:1a:a3:34:ab:c7:45:4c:53:
                    ab:e6:fa:0d:20:75:bf:97:b2:fd:dc:52:f3:75:50:
                    27:54:ef:a6:fc:f8:76:d1:9b:5f:fd:24:e1:6d:8d:
                    1c:ca:0e:43:76:bb:0e:83:0c:88:68:63:c6:12:60:
                    7c:92:63:72:57:51:f3:dd:6a:36:1b:de:87:c2:ba:
                    2d:3e:e6:67:1a:99:b1:02:8c:f1:6e:c1:86:22:af:
                    09:1b:fb:1d:3f:c4:8c:3a:f2:bc:5b:99:65:16:b0:
                    8d:66:e4:48:53:9b:ef:da:29:84:15:76:55:f6:22:
                    cd:19:26:40:e1:72:7f:58:1d:44:87:2c:20:0b:20:
                    f5:13:2d:38:40:95:03:0c:c0:1e:7a:22:01:69:22:
                    a9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:41:1D:57:59:B8:C2:DE:67:A8:9C:B8:40:35:05:43:D4:80:F8:C4
            X509v3 Authority Key Identifier:
                keyid:4B:EA:EC:33:7C:6E:89:F2:79:4A:97:44:E1:6D:91:9C:9C:79:3B:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D82F4/936E59BE537D11EBB2BD7B53C4F9AE02/S-rsM3xuifJ5SpdE4W2RnJx5Ox4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:fc:de:cb:cb:05:98:7b:d9:65:61:44:85:0f:61:a3:f1:cd:
         e8:d7:93:a0:07:4d:8c:22:fa:3b:39:7f:6b:f9:57:37:a4:e5:
         c1:d0:4b:cd:72:63:ff:f5:29:28:a0:d8:21:1f:4d:b7:d4:4c:
         9f:3d:f6:9d:24:06:08:6d:ee:9b:ea:ba:65:54:12:f5:6b:43:
         fe:2f:6e:44:40:11:cc:1c:2c:89:31:96:97:6f:2e:91:43:e0:
         bd:96:bd:b7:b1:c1:12:66:d5:0f:98:db:2b:bc:dc:14:8f:f0:
         cb:a3:66:a9:a2:b6:0d:f1:01:69:fc:d2:0f:0e:46:df:86:ab:
         a1:75:f0:57:a3:1f:ba:27:3f:d3:ca:62:58:d3:3c:dd:cb:01:
         78:62:9b:0b:08:a8:e5:92:58:7c:64:ef:8a:de:11:38:e4:99:
         10:04:e5:09:fc:24:c6:75:a5:eb:dc:54:de:95:58:c7:11:c7:
         98:f8:fa:5e:d3:f4:ba:ae:e9:ae:db:96:fb:54:4f:b7:e3:51:
         a7:74:90:29:c0:c2:e3:95:b3:97:28:f2:37:63:bd:30:24:1c:
         d1:bf:31:a8:3b:c5:ae:59:f0:27:14:9f:d6:d9:3e:3d:c5:c8:
         ea:13:d5:42:1b:a6:14:37:a2:c0:70:3c:22:89:ac:81:1e:b0:
         8c:c3:d5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:36:30 2025 by rpki-client