Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
File:                     eEGgmdwU4pNx5MwYVIn_riEyI0k.mft (raw, json)
Hash identifier:          8syjhqtDpo78QQI40cycO5c8WGqF6F2Gpmw8VnoN8uU=
Subject key identifier:   52:B4:CD:FD:AB:E5:7E:E6:FA:82:A7:4A:6F:CA:0E:A5:2D:9B:3B:D2
Authority key identifier: 78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49
Certificate issuer:       /CN=A91F8966/serialNumber=7841A099DC14E29371E4CC185489FFAE21322349
Certificate serial:       098B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
Manifest number:          0984
Signing time:             Sun 24 Aug 2025 20:07:39 +0000
Manifest this update:     Sun 24 Aug 2025 20:07:39 +0000
Manifest next update:     Sun 31 Aug 2025 20:07:39 +0000
Files and hashes:         1: eEGgmdwU4pNx5MwYVIn_riEyI0k.crl (hash: YyafrnsftgNZPbKzM24s25F9StXG3HltcOEQBwFO3nA=)
                          2: CA4C06CA976711EAA651F944C4F9AE02.roa (hash: IM9yFzmqS+Is/NhhSreqHJdhDGFnp0WA0QJtpqV2ULo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl
                          rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Aug 2025 19:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2443 (0x98b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8966, serialNumber=7841A099DC14E29371E4CC185489FFAE21322349
        Validity
            Not Before: Aug 24 20:07:39 2025 GMT
            Not After : Aug 31 20:07:39 2025 GMT
        Subject: CN=68ab710b-b065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f8:e4:cb:69:90:70:e5:fb:11:41:72:29:5d:
                    45:7c:9c:cf:51:3b:19:55:74:40:13:62:8e:be:ef:
                    56:1c:30:af:0c:8d:97:86:c6:31:eb:b2:a0:68:bc:
                    9b:b8:18:f6:9d:8a:83:2f:28:8f:a8:3e:70:8d:c9:
                    ff:0a:50:fc:3d:3c:76:62:c7:13:c2:64:f1:71:33:
                    a9:3f:4a:86:49:55:4a:19:e0:4d:a4:a1:01:fa:6d:
                    06:1e:f1:d5:b4:5c:33:46:09:f8:49:6c:54:df:f5:
                    48:99:f3:50:40:e1:98:f4:23:e5:5e:77:f7:4f:22:
                    67:ab:c3:72:e8:07:fb:47:47:3b:42:08:56:82:e5:
                    be:bd:bb:f5:53:35:8c:df:53:51:64:75:0c:c6:c3:
                    d9:f4:7b:4b:2a:85:7f:6f:cb:d8:dd:e7:54:81:da:
                    0a:2e:bc:9f:19:03:c7:ad:89:66:bd:05:3d:95:29:
                    6d:98:01:63:2b:13:25:02:37:82:8f:c2:f8:da:46:
                    e5:6b:3d:60:df:5e:fc:14:f8:44:51:4f:66:bf:99:
                    7b:b4:11:f5:f4:a7:73:45:69:23:ec:b8:6f:a6:bf:
                    28:6d:4a:62:7b:df:40:dd:cf:b8:d4:92:9a:52:31:
                    7d:f5:3a:3f:b7:e0:5b:13:a1:80:41:72:10:b7:4b:
                    13:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B4:CD:FD:AB:E5:7E:E6:FA:82:A7:4A:6F:CA:0E:A5:2D:9B:3B:D2
            X509v3 Authority Key Identifier:
                keyid:78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c5:94:e4:ab:90:26:29:eb:5e:bc:bd:a6:cb:3b:ca:ee:d6:
         fb:79:8e:c6:92:ac:7f:57:c9:ec:32:85:03:e6:38:d2:df:fd:
         e6:fd:57:10:37:73:64:cc:41:64:40:f2:aa:db:88:76:c2:40:
         73:ec:82:19:9b:4f:2a:24:0f:79:d3:8a:5a:a7:1a:b4:0b:1f:
         0d:3b:c8:72:1e:e7:6e:a9:c9:ff:95:33:a7:dd:47:8a:20:70:
         11:d3:7c:7c:9c:74:eb:23:af:3f:4b:21:17:b8:66:b5:d8:dc:
         2f:cb:9a:8f:b1:0f:7d:39:ed:21:18:57:3c:a7:97:b0:7a:95:
         e6:f4:fe:8f:1e:48:ef:8f:1c:06:1d:b7:82:1a:28:5e:cb:b4:
         bd:b4:87:03:d6:c4:35:29:7b:63:45:ff:b0:0f:02:90:37:76:
         7e:ed:d4:e4:e9:90:6b:89:0c:20:d7:df:07:73:4e:56:61:45:
         80:fd:88:e9:eb:be:43:81:6f:0a:5f:63:e7:16:43:f9:98:55:
         9e:0b:8a:dd:8f:eb:19:e8:80:f2:bd:6d:bf:f6:e1:4c:98:ef:
         c6:9e:72:4c:48:05:4d:5c:5e:56:91:ed:64:61:34:b9:17:99:
         8b:fe:d1:ec:ea:aa:47:60:bb:6f:73:09:81:57:80:76:97:9c:
         54:39:b7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 22:23:19 2025 by rpki-client