Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft
File:                     906Wyp7pNgdFZCkpYPvB-c80hU0.mft (raw, json)
Hash identifier:          Yos9biR+sacgKiqxTnScWQi1KMa8BY/VNY1g4WkYxXU=
Subject key identifier:   68:69:39:D5:FD:5D:4D:B9:45:14:8D:E7:5C:07:57:16:16:1A:A8:7A
Authority key identifier: F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D
Certificate issuer:       /CN=A91E0329/serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D
Certificate serial:       01D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft
Manifest number:          01CA
Signing time:             Tue 09 Sep 2025 02:58:55 +0000
Manifest this update:     Tue 09 Sep 2025 02:58:55 +0000
Manifest next update:     Tue 16 Sep 2025 02:58:55 +0000
Files and hashes:         1: 906Wyp7pNgdFZCkpYPvB-c80hU0.crl (hash: 8yuNR+MD1+tj0eb9eQe1ifnE++r82l1XJMr/hfgFIBE=)
                          2: F26B14C4EE8B11ED95BCBB13C4F9AE02.roa (hash: gLkgMGp52FpOKp1gigsy7o/szzqT6RmtB38EXx+UWeM=)
                          3: 1DA961ACEE8911EDBFAE4177C4F9AE02.roa (hash: Osxjf+sQheLzTs1l6e5kACmrRT/9y2CBdjlI5qtBWLI=)
                          4: 1C99BCBCEE8911EDBFAE4177C4F9AE02.roa (hash: P2QsrILj+XHKTHzfzBj8a8ezg5UMFN7g36qC5yV1Z+k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl
                          rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 02:58:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 469 (0x1d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0329, serialNumber=F74E96CA9EE936074564292960FBC1F9CF34854D
        Validity
            Not Before: Sep  9 02:58:55 2025 GMT
            Not After : Sep 16 02:58:55 2025 GMT
        Subject: CN=68bf97ef-10a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:29:0c:61:2c:5f:d7:0a:1f:09:e7:51:76:38:
                    73:66:f0:b5:21:6a:e0:52:6a:79:b2:ef:97:99:16:
                    9d:fc:62:fe:b2:47:66:15:4f:0c:36:52:82:d1:c3:
                    a2:e1:37:60:85:90:03:b5:a5:16:58:79:97:5b:aa:
                    38:6c:fd:8a:30:1e:25:0a:98:8c:61:1b:1c:f9:b2:
                    30:c6:f8:57:75:9d:33:a2:73:b3:e9:36:93:40:b9:
                    11:21:6a:09:7a:fe:5e:67:af:5b:54:dc:b4:79:e3:
                    37:10:e0:18:2f:8e:11:da:0e:5d:72:d0:7d:f5:a1:
                    12:67:65:24:f3:52:f9:ec:b3:72:0d:50:a9:cf:98:
                    81:32:01:85:3d:4f:82:a7:19:9f:3b:22:83:aa:34:
                    e2:9a:47:26:e4:92:7a:50:94:b9:e1:a7:df:3c:66:
                    3c:bf:71:70:9b:73:83:0c:7c:5d:22:19:ba:f2:a6:
                    57:e2:fa:f2:0a:fb:9e:21:d6:4e:2b:6a:7e:18:9e:
                    8f:69:7d:7d:b1:77:f9:40:1c:50:07:59:98:48:0f:
                    b7:fb:da:92:81:f6:59:8d:5a:fb:cf:41:20:6a:37:
                    af:27:6f:10:59:39:1c:4d:40:8d:54:f4:12:80:f3:
                    c6:20:42:2c:f7:21:ea:85:dc:8d:16:24:0e:a3:76:
                    ae:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:69:39:D5:FD:5D:4D:B9:45:14:8D:E7:5C:07:57:16:16:1A:A8:7A
            X509v3 Authority Key Identifier:
                keyid:F7:4E:96:CA:9E:E9:36:07:45:64:29:29:60:FB:C1:F9:CF:34:85:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/906Wyp7pNgdFZCkpYPvB-c80hU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0329/45D6EFFCD39D11EDBBCB280FC4F9AE02/906Wyp7pNgdFZCkpYPvB-c80hU0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:5b:de:47:70:91:4d:81:1f:4c:9a:0b:78:3b:9c:53:52:98:
         ab:41:66:17:78:d8:0f:86:18:f8:f7:14:67:5d:87:df:59:e2:
         7a:87:06:da:6c:1b:99:57:b0:99:e7:f1:a3:9e:1e:9e:50:1e:
         9b:a0:98:75:a9:19:e9:0e:5d:c6:c3:82:ef:5a:20:bc:78:b0:
         2d:52:66:56:0d:43:96:f6:e4:c2:69:01:37:d7:30:cb:ab:ee:
         d8:cb:4f:3d:ab:eb:14:d1:35:da:ce:34:be:4d:1d:e2:43:3b:
         20:93:33:bf:91:db:aa:7b:14:c6:3f:31:f5:27:c1:e9:bf:b7:
         7d:18:82:7d:db:b8:fd:82:f0:4b:fc:5b:cb:52:18:04:52:5b:
         78:ee:6e:e7:12:80:03:af:23:0f:6b:ec:f5:3a:54:8f:d8:be:
         d9:6e:16:9c:d7:73:b2:de:a8:b5:b6:e6:ab:1b:79:41:62:b1:
         d2:d2:b0:7f:0c:be:4b:a8:19:3c:a1:cc:fb:d5:91:3c:d7:6b:
         4f:7c:1d:d8:65:37:4b:b2:f3:7d:fc:d5:83:d5:ee:fa:ef:16:
         75:6b:c4:e5:8f:6d:82:c2:95:2d:dc:f3:74:08:df:9b:3a:39:
         75:01:68:84:e0:9f:e0:a9:6f:e1:24:7b:4a:31:b8:f3:15:52:
         70:34:a4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:42:15 2025 by rpki-client