Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft
File:                     3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft (raw, json)
Hash identifier:          93fOXJMR9mcbBTaQx56Bm30jpS7VObcKZ1cJtmPmBJY=
Subject key identifier:   97:BF:E6:C4:08:ED:04:EA:EB:52:16:BF:AD:1E:A2:6B:E7:9D:FB:C1
Authority key identifier: DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6
Certificate issuer:       /CN=A91F716F/serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6
Certificate serial:       0195
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft
Manifest number:          0191
Signing time:             Sat 23 Aug 2025 03:35:50 +0000
Manifest this update:     Sat 23 Aug 2025 03:35:49 +0000
Manifest next update:     Sat 30 Aug 2025 03:35:49 +0000
Files and hashes:         1: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl (hash: 9KfF5SNmtMhAaFvvwBpnVmaQRKxUvHojz91USEXqebU=)
                          2: 6F882FB01D5211EE94C36C2FC4F9AE02.roa (hash: rH0gRhN/HJ8HJHVTL+JV1bpQN/J5hF8E0YYPa3z7lJ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl
                          rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:35:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405 (0x195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F716F, serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6
        Validity
            Not Before: Aug 23 03:35:49 2025 GMT
            Not After : Aug 30 03:35:49 2025 GMT
        Subject: CN=68a93716-ac45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:04:b4:48:e0:6b:39:68:f6:07:63:ed:2f:ea:
                    06:28:83:c5:e3:ee:06:f0:91:f2:14:39:db:aa:24:
                    a5:c2:02:c5:9f:a6:e4:48:fd:a8:bf:e0:2f:2e:be:
                    30:f6:e1:00:ab:aa:10:b0:18:2d:b2:87:2d:7a:8b:
                    60:30:58:2b:93:dd:c2:0c:1f:c1:4a:63:d8:5c:e3:
                    70:55:65:d0:c2:55:57:2b:60:8a:96:ca:28:24:45:
                    50:5e:e8:37:a3:b4:65:0f:b1:da:a1:26:f9:77:08:
                    c6:d4:e1:19:0a:c7:a4:18:f1:76:70:e3:2b:22:d2:
                    88:c3:cc:fe:71:2e:1b:6a:4a:7b:c5:64:59:91:db:
                    47:71:cf:de:46:1f:fd:72:87:4b:f4:69:2b:b8:ca:
                    99:0e:c0:f0:3e:76:20:ce:93:d9:5e:f5:7c:49:3f:
                    6a:9e:32:f8:43:37:aa:c1:5c:bb:19:d8:46:14:58:
                    f0:2e:db:96:c6:5c:50:62:a0:48:06:9b:80:a1:b0:
                    f8:1d:be:9a:33:9b:06:f5:ab:5d:ce:6c:7a:1d:ec:
                    7d:66:d6:f6:77:51:48:06:fe:30:a1:83:3b:22:46:
                    3b:a1:d6:16:f3:c3:02:7a:a3:d2:9e:65:91:6c:f7:
                    57:b5:41:d1:d0:19:f1:0a:d2:e4:16:40:d2:05:a8:
                    6d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BF:E6:C4:08:ED:04:EA:EB:52:16:BF:AD:1E:A2:6B:E7:9D:FB:C1
            X509v3 Authority Key Identifier:
                keyid:DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:41:3a:73:4f:1d:87:66:06:9f:1b:63:ce:ff:17:c4:a9:45:
         56:e5:20:33:66:d1:34:28:ed:72:d5:ee:1d:6e:1a:50:38:be:
         0c:fa:e5:42:c6:5a:3c:92:c9:e3:33:64:00:10:b3:3a:bc:45:
         97:c5:90:8d:25:db:2c:a6:c1:df:13:e4:81:24:5d:6f:b9:f3:
         56:57:ca:f6:cd:9c:4f:d7:07:94:f2:8f:dc:53:4b:0e:b2:2c:
         52:8b:60:bb:8f:1a:ab:73:49:14:d3:51:78:f5:b1:6b:ae:de:
         aa:29:8c:31:89:19:4f:19:11:ad:e6:aa:03:5a:0e:f7:6e:ce:
         fa:e3:1b:83:c2:9e:77:5a:04:c9:e2:a0:4a:90:f7:99:1b:d8:
         ca:ae:38:35:3c:fc:11:69:eb:77:4a:21:a3:c0:23:ce:fb:8a:
         eb:00:b1:fa:34:41:47:e7:29:2c:c9:1d:05:49:bb:84:3a:ba:
         cb:cc:62:e1:c6:cb:a9:df:ef:5f:f9:a8:45:07:4f:ce:82:7f:
         52:d8:cc:52:8b:b4:98:f5:bf:9e:f9:a8:52:a7:00:80:86:68:
         6b:5f:84:68:5d:ea:b2:f6:31:25:43:2e:75:ab:c7:6b:fc:bf:
         87:e0:57:10:86:70:dc:5a:6a:55:fd:51:43:ba:c3:db:18:b1:
         3a:38:b2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 22:00:34 2025 by rpki-client