Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
File:                     cClGBbAXy3lsrYhC9e-6P0SHB_U.mft (raw, json)
Hash identifier:          wTf2ex5rOb88A3sAU4h6x1X6Mu00Jr02yDJN8fuONyQ=
Subject key identifier:   D5:23:D6:C7:93:1D:0D:0F:55:F3:1E:14:A1:34:BF:3B:A4:F6:15:C2
Authority key identifier: 70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
Certificate issuer:       /CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Certificate serial:       062C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
Manifest number:          0610
Signing time:             Thu 04 Sep 2025 23:10:43 +0000
Manifest this update:     Thu 04 Sep 2025 23:10:43 +0000
Manifest next update:     Thu 11 Sep 2025 23:10:43 +0000
Files and hashes:         1: cClGBbAXy3lsrYhC9e-6P0SHB_U.crl (hash: mf/A8BhBCTLgKmHzzuNF/XYHcJu1jVe6Y+5DnqVXBLI=)
                          2: 2B6E7D32FC5311ECBCE27247C4F9AE02.roa (hash: YWG8ZTu1MykDiOqV56oC4ORjTxnyQ1AQFIwIn6af5iU=)
                          3: FA18CEA2F07A11EBBEBB415AC4F9AE02.roa (hash: 0MKRGhD7VGcMSXw/ROEFU8wnZ9ENIjqkmhL8/Vmz8tg=)
                          4: 4FF82F28045E11EDB581B43EC4F9AE02.roa (hash: pzVGtJuglLRxF/Eq8FNCa3K2+vkm9IUKeDm8AbcXfX8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl
                          rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 23:10:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1580 (0x62c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1C16, serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
        Validity
            Not Before: Sep  4 23:10:43 2025 GMT
            Not After : Sep 11 23:10:43 2025 GMT
        Subject: CN=68ba1c73-dd44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:72:fc:79:5d:c0:67:53:ef:fe:93:a4:e9:38:
                    81:ca:a3:2f:61:98:b5:7e:79:03:db:c6:94:7b:c7:
                    d7:2e:08:ef:0f:2b:a4:6d:53:f2:14:f5:6d:f2:a9:
                    13:3b:9e:50:e1:bf:c3:20:19:99:7a:61:13:4c:ae:
                    a8:93:a9:f1:00:5b:f4:92:10:fd:f6:63:93:cb:c4:
                    b5:ed:d6:a5:e9:7d:9c:ee:92:78:cd:cd:ea:05:63:
                    bf:18:1e:d1:a5:6a:8c:9e:10:04:61:bc:69:d5:88:
                    a5:48:08:94:4d:b3:b2:3a:6c:bf:c8:be:ca:2c:17:
                    81:28:7b:83:70:2a:1b:37:5f:6c:db:40:bb:00:39:
                    1a:1d:eb:32:9e:3e:0c:48:90:98:33:de:6f:63:ca:
                    24:57:7a:b0:83:ef:95:12:6d:03:d4:7c:1f:71:22:
                    4a:21:1c:2b:0a:db:3a:36:44:25:59:4c:89:af:62:
                    e4:41:be:0f:f6:df:13:b5:ec:45:d6:17:38:b3:f9:
                    0f:f2:e3:c8:1e:56:60:48:d9:75:85:c0:65:19:0f:
                    13:46:64:a3:c3:be:cf:74:49:ac:d0:c4:d8:69:ad:
                    5c:47:f2:f6:6a:3a:98:2f:85:d4:db:1b:b4:f3:a5:
                    23:87:83:bd:4f:a5:0c:b0:10:9a:51:69:14:3c:be:
                    73:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:23:D6:C7:93:1D:0D:0F:55:F3:1E:14:A1:34:BF:3B:A4:F6:15:C2
            X509v3 Authority Key Identifier:
                keyid:70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:31:d8:df:81:db:dd:18:39:6d:fd:92:e0:19:3f:05:1c:d8:
         17:27:d3:61:ea:50:59:99:dd:4a:d7:8f:13:63:69:47:3b:c7:
         06:cf:ef:b2:ba:d6:f2:5e:ff:fa:4a:03:08:dc:60:d6:e9:d9:
         cd:c7:12:8b:72:80:ed:ed:df:5f:d0:bb:dd:88:45:c9:e0:84:
         f7:3f:22:bb:5e:1e:44:97:45:86:3a:3d:b3:17:96:80:50:f6:
         5b:e5:8e:b9:03:3a:76:e9:2b:e3:1f:d4:2e:92:62:f8:51:c6:
         7c:ac:b8:09:16:6f:79:59:0f:c2:05:60:9f:08:da:66:86:b7:
         7a:f7:8d:89:71:6e:88:cb:11:99:e6:8c:86:35:28:18:f6:4c:
         0d:c6:c7:57:c7:cf:b5:57:be:41:bc:08:57:c5:48:9f:bb:dc:
         ad:1b:15:09:1f:c5:35:60:b1:e7:f2:3a:7e:a6:fd:04:94:2e:
         5e:82:2f:5e:4a:4d:03:d8:7f:0c:4f:cb:06:c3:9a:f9:d0:83:
         8a:30:21:e2:f6:d5:43:e5:82:8d:bc:21:ad:8e:9d:c7:28:51:
         ec:8f:94:8f:d3:2c:93:91:2c:51:4e:47:b8:7d:a1:4f:b5:01:
         11:e5:12:f8:a0:90:9d:68:08:dd:f3:b0:d5:d7:e1:e0:12:24:
         44:f9:d7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 11:50:03 2025 by rpki-client