Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
File:                     K1F8a3njzrA4nUGrxeziEH_sU_s.mft (raw, json)
Hash identifier:          29TiAkWwKYu6tTb7RkSnM9q8W0lhua3rgAFryrP+g4I=
Subject key identifier:   DA:97:BD:2B:3C:40:7F:BF:79:73:92:77:2F:9A:47:54:43:94:F0:24
Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB
Certificate issuer:       /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
Certificate serial:       03EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
Manifest number:          03DE
Signing time:             Tue 09 Sep 2025 00:38:44 +0000
Manifest this update:     Tue 09 Sep 2025 00:38:43 +0000
Manifest next update:     Tue 16 Sep 2025 00:38:43 +0000
Files and hashes:         1: K1F8a3njzrA4nUGrxeziEH_sU_s.crl (hash: B5qudPIJJ7FQqFw37RsUACi9ZnhEcgFDseVQjzvfJyI=)
                          2: B0F9178297B811ECA8AA4230C4F9AE02.roa (hash: 7UvGO2r60JLS/okHiWx8rHAHMyUcsuX/jNwXXCmMBho=)
                          3: 0E1EAB66961011ECA540626AC4F9AE02.roa (hash: TzVnkqN0tq39UUa2lfdZqlKLVdLg+S4NlfoqQ2G24uU=)
                          4: 457D2B5A28DC11ED839D6243C4F9AE02.roa (hash: 4G2u0IIjNz0CyenUMTN7OBV5SwfSrRJSXkJu6HMP/+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl
                          rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 00:38:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1003 (0x3eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2A61, serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
        Validity
            Not Before: Sep  9 00:38:43 2025 GMT
            Not After : Sep 16 00:38:43 2025 GMT
        Subject: CN=68bf7713-f038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6f:11:d3:b1:37:76:32:15:a3:3d:1b:b0:51:
                    47:8b:e6:d7:ae:12:73:31:47:6d:99:cd:2c:c2:78:
                    01:1f:1d:1d:84:28:29:bc:87:73:d5:f7:ba:f7:90:
                    1a:ee:39:d5:75:60:00:9e:80:02:b9:f9:54:a2:5b:
                    d4:af:49:2c:bb:61:5f:17:81:eb:f8:66:29:f4:27:
                    00:aa:64:c0:02:3b:77:53:07:a6:e8:ba:9f:4f:a9:
                    40:fb:c7:36:11:7d:dd:50:b0:dd:2a:d8:3b:c5:a2:
                    74:7d:2f:02:de:ea:85:d1:af:29:b0:8c:d1:c5:34:
                    00:c3:d9:e6:08:94:56:79:59:03:73:c2:40:78:10:
                    9b:b2:ff:c2:5b:5e:fa:cb:ac:f9:21:c9:ba:ca:24:
                    ce:60:4a:45:d9:0b:af:ca:d6:27:f6:b3:dd:ce:d0:
                    ab:f0:fe:66:ee:d4:fe:d0:7e:93:cc:ff:13:4d:49:
                    a6:58:de:a3:58:4f:2b:98:dd:f0:09:b6:ba:50:64:
                    15:a4:1b:9a:2b:d4:15:f5:bd:1a:de:4a:40:30:3e:
                    4a:93:f7:15:b7:d9:8e:15:84:2b:0b:a3:f8:8d:cd:
                    3a:6d:2f:5a:f0:df:0b:cc:8b:28:29:2a:34:8c:f2:
                    f4:8c:26:4a:24:2d:48:82:d0:15:b0:98:42:5c:e4:
                    d2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:97:BD:2B:3C:40:7F:BF:79:73:92:77:2F:9A:47:54:43:94:F0:24
            X509v3 Authority Key Identifier:
                keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:e4:15:af:c8:12:a2:12:4c:33:c1:ae:75:dc:eb:b9:73:a1:
         82:b7:e1:b3:6d:4a:32:3e:3c:ea:f8:7e:c1:33:fa:61:a4:a7:
         bc:5d:cd:3d:be:3b:ea:59:0f:28:c7:72:db:28:80:d0:f6:5e:
         a5:c1:fd:d7:01:90:64:2a:ae:47:00:bc:af:00:e9:fc:63:65:
         74:7d:9e:e5:b0:52:28:f4:26:0c:8e:b4:a4:04:d8:3f:7c:ab:
         52:22:7a:ef:ac:1e:97:ae:d8:7f:6b:85:d3:43:3c:22:fe:4d:
         b0:6e:8e:18:79:ca:8b:7a:17:36:cd:92:67:e9:4d:42:5a:b3:
         81:d1:ec:b7:dd:0c:9a:89:85:fe:e0:26:f6:f8:7e:5d:ea:a4:
         f1:d0:ab:b5:59:bd:90:e4:4e:35:22:ee:68:bd:91:e8:3b:ba:
         6f:8d:09:7b:1c:20:41:9d:ad:61:1a:53:1c:a4:e1:56:e5:b4:
         fe:46:81:73:4b:9c:70:1b:cf:a9:13:4c:4f:27:e1:41:19:2a:
         ba:f2:9f:92:ab:4a:d2:1e:aa:21:f5:77:75:5c:07:5e:75:45:
         54:90:f2:5d:a7:5b:51:8d:b0:52:ee:2c:fc:21:51:8b:ae:b7:
         69:23:2d:45:d7:77:0a:3a:3d:31:69:0e:c7:ef:20:ee:f1:87:
         b7:8e:80:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 12:29:32 2025 by rpki-client