Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft
File:                     EobObnRy-d6N8qVtj9oUScpz7dw.mft (raw, json)
Hash identifier:          vcGVv0nNjf9ZDubtimoakWfsz04EVL4318kxSRwG4Gc=
Subject key identifier:   C2:43:99:71:D8:29:F6:1B:8E:13:46:E6:80:2C:4F:FF:D5:F2:18:44
Authority key identifier: 12:86:CE:6E:74:72:F9:DE:8D:F2:A5:6D:8F:DA:14:49:CA:73:ED:DC
Certificate issuer:       /CN=A91D9196/serialNumber=1286CE6E7472F9DE8DF2A56D8FDA1449CA73EDDC
Certificate serial:       1F48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EobObnRy-d6N8qVtj9oUScpz7dw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft
Manifest number:          1F31
Signing time:             Sun 24 Aug 2025 15:59:55 +0000
Manifest this update:     Sun 24 Aug 2025 15:59:55 +0000
Manifest next update:     Sun 31 Aug 2025 15:59:55 +0000
Files and hashes:         1: EobObnRy-d6N8qVtj9oUScpz7dw.crl (hash: 1NtiZ3kLV3rgMJ8LJUBqpqLnNzb3I8TxG663ueXqWtQ=)
                          2: 166B6FD854EE11E78DFD1629C4F9AE02.roa (hash: E8RmsA+JH2cUNLppSYNbFbWPQZuN69o4pPTqGa2t6xk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.crl
                          rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EobObnRy-d6N8qVtj9oUScpz7dw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Aug 2025 15:59:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8008 (0x1f48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9196, serialNumber=1286CE6E7472F9DE8DF2A56D8FDA1449CA73EDDC
        Validity
            Not Before: Aug 24 15:59:55 2025 GMT
            Not After : Aug 31 15:59:55 2025 GMT
        Subject: CN=68ab36fb-5fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ec:88:ab:c2:40:6f:b6:ba:95:36:55:76:c5:
                    3f:fa:05:91:26:e3:4c:a8:87:1b:17:30:f7:0f:da:
                    5f:a8:43:bc:84:f1:a8:fb:d1:46:20:c7:ca:69:4a:
                    19:23:94:b6:af:d1:cc:a8:99:48:cd:9b:09:8c:44:
                    dd:ee:db:67:7a:f4:14:19:fa:63:1e:ee:a1:b9:7d:
                    b1:6d:0b:fe:5d:ee:aa:2f:e7:ca:81:78:f4:cf:6c:
                    21:c0:80:cc:1e:2b:a8:0b:5e:a0:b3:e2:99:90:fd:
                    2a:69:82:49:aa:cc:26:74:79:db:88:57:92:47:dd:
                    8b:6b:14:6a:a6:2f:2e:32:41:48:9e:da:85:cb:94:
                    b1:1c:05:36:f1:b3:63:2f:f4:9d:26:fc:49:79:fd:
                    0a:0c:22:dc:de:56:8a:2a:22:39:bf:73:05:b3:2e:
                    9d:fc:ef:93:74:db:30:c9:82:62:30:6a:1d:a7:7b:
                    df:12:4c:0e:44:3e:22:41:15:64:d6:9c:e4:b5:19:
                    2c:53:6b:32:29:b3:5f:26:60:3e:bb:78:f0:6f:9a:
                    f0:65:1c:39:6c:5e:04:17:4f:95:96:07:15:1d:32:
                    8e:0b:c0:f7:4d:e8:4d:5a:1f:d3:5c:78:82:d4:72:
                    a9:45:df:4b:b7:39:07:4e:db:b7:79:07:7a:3b:80:
                    6a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:43:99:71:D8:29:F6:1B:8E:13:46:E6:80:2C:4F:FF:D5:F2:18:44
            X509v3 Authority Key Identifier:
                keyid:12:86:CE:6E:74:72:F9:DE:8D:F2:A5:6D:8F:DA:14:49:CA:73:ED:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EobObnRy-d6N8qVtj9oUScpz7dw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:c5:69:95:52:c6:3f:fd:3e:f5:8d:f1:25:73:74:5a:07:df:
         b3:45:90:ae:55:74:6a:53:31:fb:28:ae:ca:f0:f5:3b:13:58:
         55:cb:dc:a6:00:be:9b:51:a4:cf:ca:66:3e:61:37:3e:b2:84:
         ea:b6:7a:fe:9e:3a:1e:d9:9f:ec:cf:e1:7a:5a:3f:df:51:5b:
         4b:6d:e2:7e:b4:fc:08:48:86:96:00:05:8d:cb:03:fa:92:c8:
         4f:00:de:49:20:e1:be:62:65:7b:ce:67:88:42:b6:55:37:49:
         fb:88:d7:ae:2c:a7:01:7f:3d:68:8b:f4:ce:65:b8:a7:07:7a:
         b3:2e:64:63:5e:8d:1b:c6:1f:3e:f9:e3:18:47:c3:02:f5:f2:
         21:c1:82:80:62:c5:25:fd:8a:db:95:1a:11:9c:c5:d1:39:d8:
         aa:6d:fd:72:13:0c:72:e3:81:53:56:c7:56:86:90:45:1c:25:
         3f:b7:79:72:dd:47:ce:6e:0c:64:0a:b3:73:2e:46:c2:5f:80:
         03:25:b8:ce:f7:c3:e4:c5:5f:57:e8:45:f9:e7:6d:fb:66:9e:
         c0:d4:a8:4d:e5:3c:e1:71:dc:a7:99:35:16:f3:ba:81:28:59:
         84:ab:97:0d:3f:ae:4c:b0:44:48:58:1d:b8:72:fb:0c:73:16:
         69:fa:17:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 22:09:17 2025 by rpki-client