Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
File:                     p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft (raw, json)
Hash identifier:          r/YNxcOOAOptfd6AdVMrT7XqdHjzJj1JWT1CFhaBOVU=
Subject key identifier:   20:E9:6C:A9:8F:34:3C:23:9E:E2:8F:5C:78:E4:E8:3E:52:2A:26:9C
Authority key identifier: A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04
Certificate issuer:       /CN=A91EFD20/serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604
Certificate serial:       D9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
Manifest number:          D7
Signing time:             Fri 05 Sep 2025 05:59:16 +0000
Manifest this update:     Fri 05 Sep 2025 05:59:15 +0000
Manifest next update:     Fri 12 Sep 2025 05:59:15 +0000
Files and hashes:         1: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl (hash: vqp8B9YkMX7xUvk0nbqDBDOlwtLYyopwkJdYvRcT3EY=)
                          2: 80A57534433311EF94E79D23C4F9AE02.roa (hash: Ph9PQO0HR4nUNS7ci1voMb24Pze4tYQXnav/XFcYles=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 05:59:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFD20, serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604
        Validity
            Not Before: Sep  5 05:59:15 2025 GMT
            Not After : Sep 12 05:59:15 2025 GMT
        Subject: CN=68ba7c34-9294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0f:64:de:56:4f:b1:3c:a2:3c:78:97:cd:61:
                    0b:7f:83:e4:59:03:dd:13:9c:6f:aa:fb:a7:ff:97:
                    af:89:81:78:83:75:c0:12:4e:b3:ee:6b:35:55:f8:
                    c7:2e:1b:86:67:35:45:a8:d9:66:b4:cc:1c:c5:58:
                    92:20:a9:07:82:26:ec:1f:6c:89:0b:94:e6:fa:d6:
                    22:54:29:85:80:f7:2c:68:b2:84:c3:f5:40:a4:29:
                    de:a7:9e:af:8f:bc:89:f7:94:b9:8d:b4:d8:f8:32:
                    66:8a:85:ca:dd:d3:fd:c6:d1:15:73:17:d0:84:94:
                    96:96:db:4b:51:2b:00:01:e2:4f:0c:c9:3c:96:19:
                    3a:4b:e7:26:96:4e:8a:30:cf:b1:ef:45:f8:4c:68:
                    a5:e4:05:51:d0:f4:59:9e:68:4d:bf:0b:08:af:54:
                    05:1f:c9:32:76:7a:e0:ab:26:4e:db:68:02:57:a2:
                    4a:6d:4d:71:64:18:d8:6b:04:ea:74:ab:12:cf:ea:
                    f8:35:69:c9:f0:c3:50:bf:78:ab:bf:fc:42:a0:8c:
                    d3:92:de:40:02:d1:f5:7f:2c:d2:11:17:47:cb:bb:
                    a6:15:5f:92:97:50:06:1d:a7:f4:5b:59:50:af:3c:
                    3b:fc:ea:cb:df:48:1e:ea:8e:d6:c9:81:31:64:30:
                    49:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E9:6C:A9:8F:34:3C:23:9E:E2:8F:5C:78:E4:E8:3E:52:2A:26:9C
            X509v3 Authority Key Identifier:
                keyid:A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:90:a5:39:77:aa:40:84:0e:30:bf:da:2d:f7:a7:21:da:a9:
         2b:f6:a9:74:e2:7d:a6:7b:89:69:fa:8a:61:1c:ce:84:7e:7c:
         04:c2:1f:3d:f3:1f:b5:7f:b4:6c:b9:5f:aa:cf:41:5a:b5:af:
         67:4a:3b:ce:d2:c3:9a:1b:56:18:ee:19:a2:69:10:54:a2:46:
         aa:aa:7a:61:bb:80:16:10:73:67:d9:9e:ab:b3:3e:59:fa:56:
         dd:5a:50:c1:5c:26:b2:fd:e3:bc:6b:da:f8:09:d9:bb:aa:29:
         ed:b0:39:df:22:28:5b:5e:d2:fe:3b:03:a4:55:5b:fd:94:bd:
         ae:d3:39:08:cf:fa:62:25:ca:d2:32:2c:99:67:8b:32:2e:e6:
         65:2b:c5:3f:d9:78:b6:e6:24:dd:c2:62:92:4e:f2:a3:4c:2b:
         57:02:77:0d:6e:07:f5:2a:dd:c3:7f:c1:f5:90:0e:7b:31:94:
         cd:e8:07:aa:4c:0f:15:22:89:40:93:4c:c0:ad:7d:74:3c:7a:
         f2:c2:a5:4f:76:14:68:6e:5d:a3:fd:d8:1a:4c:da:fd:2b:95:
         72:43:10:7d:32:b6:17:95:10:06:5a:cb:ad:99:70:dd:34:c1:
         bf:79:c1:33:66:23:fa:d6:d6:9f:7d:c4:7e:e3:c7:75:a8:6c:
         ba:a8:2f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 21:04:27 2025 by rpki-client