Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft
File:                     AduB721jlOZtOzIxW0eevteZyTc.mft (raw, json)
Hash identifier:          rltGPrQ1RI5ijRma4vMBfe4zXOPAPYRwXe9/0rwLDu4=
Subject key identifier:   76:59:88:25:B2:F7:74:B3:2B:3C:58:A2:51:C4:79:45:ED:1B:7A:AD
Authority key identifier: 01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37
Certificate issuer:       /CN=A91FECDA/serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937
Certificate serial:       0F77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft
Manifest number:          0F6E
Signing time:             Sun 24 Aug 2025 17:31:56 +0000
Manifest this update:     Sun 24 Aug 2025 17:31:55 +0000
Manifest next update:     Sun 31 Aug 2025 17:31:55 +0000
Files and hashes:         1: AduB721jlOZtOzIxW0eevteZyTc.crl (hash: ZGc9CPF/d8wXDxU8FqZ+1MoNdZbCc3WtrVE6CA1TwFI=)
                          2: 85B9F090F35011EFAE695322C4F9AE02.roa (hash: lww/ZRWFPgZIaev9PDmaV5kjaByxeNEFJJYVjFLwNzI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl
                          rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Aug 2025 17:31:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3959 (0xf77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FECDA, serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937
        Validity
            Not Before: Aug 24 17:31:55 2025 GMT
            Not After : Aug 31 17:31:55 2025 GMT
        Subject: CN=68ab4c8c-eae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1a:a2:92:73:56:a8:1a:38:0f:2d:23:ca:38:
                    ee:9a:92:8e:f6:fc:c5:bc:24:e8:a2:dd:10:aa:f2:
                    ad:18:3c:34:25:13:b1:6a:5c:74:be:02:83:2c:48:
                    e1:98:9c:09:bb:ca:8b:7d:fc:47:b1:6a:8d:fd:80:
                    45:16:c3:d0:72:ce:95:64:10:f6:1d:1a:9b:77:5f:
                    f4:a6:24:74:c6:3b:91:a1:55:f9:45:26:58:89:03:
                    5e:e6:28:a5:ad:41:bd:aa:d3:21:02:3e:3c:23:a2:
                    00:43:4d:5b:79:90:f0:94:ed:a0:46:63:12:da:6f:
                    ef:b4:23:34:be:0b:24:a1:c4:72:a5:ed:60:45:99:
                    07:f2:07:af:ea:74:b6:5d:ec:3a:6c:0f:bb:4d:f2:
                    12:8a:7b:e7:e2:ed:1a:50:43:35:93:11:f9:e3:f7:
                    a0:67:b1:ba:05:7b:7d:c3:57:f2:07:c3:7b:12:e9:
                    74:66:68:60:15:57:52:c6:20:a9:d4:c4:f2:71:76:
                    14:a7:3a:b9:e8:48:d3:c6:06:48:41:91:3f:c7:a4:
                    ac:fd:65:01:92:84:83:57:f2:5e:37:42:b0:d2:cf:
                    bf:75:4b:3e:cc:c4:b3:c8:cf:73:9e:6d:07:98:30:
                    fd:77:20:f2:62:49:38:78:a2:6f:90:a0:2d:8c:09:
                    e5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:59:88:25:B2:F7:74:B3:2B:3C:58:A2:51:C4:79:45:ED:1B:7A:AD
            X509v3 Authority Key Identifier:
                keyid:01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:c9:af:43:d2:38:01:73:fe:39:a9:42:8f:78:77:cc:c9:5b:
         d6:31:3e:f6:17:e2:a6:d2:bb:2e:06:9f:04:4f:f0:03:94:80:
         e9:c1:8d:19:d8:dd:55:9b:6b:fb:82:6e:c7:f2:9e:c8:e6:01:
         81:cb:cb:20:7c:a8:b3:0e:a1:7e:0d:d9:04:8a:2a:58:f2:67:
         c2:95:97:ab:f1:a5:c4:c4:88:82:ea:d8:ec:1f:6e:13:88:5b:
         fe:4f:d8:9f:9d:a8:16:db:c2:e8:82:23:82:21:c2:b8:1d:54:
         99:eb:3a:f9:7b:44:78:37:75:06:b4:06:24:af:46:43:2b:e7:
         65:ac:7a:56:d9:9a:91:a1:d0:22:f9:4a:7b:b7:5e:11:3b:6c:
         af:12:8b:71:9d:5a:f5:b5:b1:23:bb:07:19:58:1b:9b:18:6b:
         2b:32:56:4a:cf:d3:40:50:07:a0:8b:ad:84:2e:94:9f:9f:8f:
         30:29:f1:04:cd:41:11:4c:3e:4b:37:fa:bb:5d:07:b0:be:b5:
         12:e7:10:fe:88:5c:71:0d:a1:2b:3d:85:f2:9a:19:b3:fa:aa:
         a3:14:e2:af:58:3e:b2:51:2d:f6:d8:f3:4a:1f:a2:36:1e:cc:
         ca:70:69:68:7c:9b:4a:c5:b0:fc:b8:6a:94:fe:18:95:9e:7e:
         f9:4f:83:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 21:29:12 2025 by rpki-client