Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
File:                     0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft (raw, json)
Hash identifier:          l+/suFZuR6nJqaB7UJaDTda4ej2uRuce/N7ytwB6XVw=
Subject key identifier:   3A:0A:D2:AE:18:B1:47:8B:2F:36:4F:58:94:91:45:65:6C:33:D9:88
Authority key identifier: D2:6E:22:30:62:18:DA:96:C3:02:FB:EA:AC:94:37:27:5B:1E:C6:ED
Certificate issuer:       /CN=A91DC24F/serialNumber=D26E22306218DA96C302FBEAAC9437275B1EC6ED
Certificate serial:       0173
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
Manifest number:          016B
Signing time:             Sun 07 Sep 2025 04:19:09 +0000
Manifest this update:     Sun 07 Sep 2025 04:19:08 +0000
Manifest next update:     Sun 14 Sep 2025 04:19:08 +0000
Files and hashes:         1: 0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl (hash: 4XbuH74diKjLAiJtYvsIUeS8XR2l2aTfcPCt1aaG80g=)
                          2: E4A5F20468D011EE8509F75CC4F9AE02.roa (hash: JQKbNYMf/zVARnkpO4HdrpLHL11BuAmo0S1Bwvh58kQ=)
                          3: E50B556868D011EE8509F75CC4F9AE02.roa (hash: 15Ef3WoCrFkSaZWsvVqBxZqSnhk/RC+N8roeKpk66Po=)
                          4: E42B360468D011EE8509F75CC4F9AE02.roa (hash: 3NF/WOhgj9HD4AOf9A4AyqHhiWaUzMkr0bQxzyCSlus=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl
                          rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 04:19:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC24F, serialNumber=D26E22306218DA96C302FBEAAC9437275B1EC6ED
        Validity
            Not Before: Sep  7 04:19:08 2025 GMT
            Not After : Sep 14 04:19:08 2025 GMT
        Subject: CN=68bd07bc-785f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d4:f9:92:65:ab:1c:ad:93:c0:28:a8:a4:cc:
                    4e:de:bc:54:0a:61:f8:b6:0b:64:2d:23:4d:3b:2b:
                    97:b8:ef:b7:83:64:9b:ab:46:95:ee:eb:a5:c9:9c:
                    86:ba:ab:83:06:8e:49:ed:fb:f8:37:5b:10:36:38:
                    bc:ff:f7:dc:fd:9b:de:23:75:e7:67:a4:5b:c7:1c:
                    b3:15:7c:93:47:a7:63:84:86:9c:66:af:f4:25:14:
                    d2:64:04:eb:f1:ca:96:ab:ea:d2:8b:52:62:9a:42:
                    02:93:c7:d5:4e:c6:69:d4:97:5d:b8:ab:55:f4:ca:
                    33:8b:3e:e5:f0:6a:e4:2b:58:eb:49:c8:ca:63:cf:
                    0f:23:1a:22:86:02:e1:6b:d1:90:98:7d:d1:7d:0d:
                    77:36:95:6d:15:0d:74:0e:c5:55:c4:5e:25:5d:f4:
                    8d:23:39:28:09:9e:6f:5c:c0:fc:ce:e7:44:ba:df:
                    0d:59:0d:f0:25:66:e5:73:29:0f:88:00:58:0b:50:
                    0d:40:66:90:4e:02:57:71:42:01:bf:38:23:46:82:
                    95:03:8d:4c:a5:db:29:33:c9:e8:63:31:5f:b6:e6:
                    e0:22:63:2e:8d:72:38:06:54:b1:fd:56:41:21:92:
                    44:94:1d:e9:d0:4f:53:4c:a7:40:57:44:a1:ab:40:
                    8c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0A:D2:AE:18:B1:47:8B:2F:36:4F:58:94:91:45:65:6C:33:D9:88
            X509v3 Authority Key Identifier:
                keyid:D2:6E:22:30:62:18:DA:96:C3:02:FB:EA:AC:94:37:27:5B:1E:C6:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:af:32:c5:fa:28:57:23:68:a6:07:0d:c9:7b:7f:d8:b7:5a:
         c6:7c:2b:e5:97:78:7d:bc:c9:93:89:de:3f:4b:64:74:5a:e3:
         c4:37:3f:e5:d6:f1:b0:eb:9c:8d:a1:44:41:cd:bd:36:fa:72:
         27:af:8c:86:a5:1b:06:ea:b7:82:c7:f2:b0:4e:6e:e0:59:50:
         7b:a5:ab:10:ba:06:bb:17:8b:d4:54:4f:91:e5:60:7b:1b:d8:
         a1:42:4d:be:31:69:f5:e8:2f:cf:a0:0a:02:a0:89:6c:8b:ce:
         b5:99:ed:58:42:c2:de:c4:90:0f:08:b0:02:96:69:62:5f:ee:
         39:96:b8:06:24:11:5e:14:39:a2:e5:91:56:54:b7:51:c2:de:
         db:b7:7a:14:dc:b6:35:4d:59:b9:93:f9:44:65:68:94:b0:c7:
         87:1d:7a:df:f9:63:c6:cc:75:0a:e0:0b:17:c5:4f:4e:b3:9f:
         f9:33:9c:32:81:93:bd:23:02:60:96:59:d6:8f:b4:cb:1b:28:
         05:27:01:f7:75:00:86:49:70:a2:d9:2c:f8:89:8a:dd:85:8e:
         e3:18:a0:2f:ed:4d:7c:31:61:76:26:7e:99:02:cf:0f:53:0e:
         13:c4:13:7d:07:99:bb:87:8d:37:f3:fa:ab:59:62:31:e3:e9:
         3d:e1:75:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 14:26:34 2025 by rpki-client