Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
File:                     J1jGz4tSiWbUNxO7G86OA9ymGxw.mft (raw, json)
Hash identifier:          RB3UjBm6lzzCsGQnIgKjmzj10tOxHdIy3zrkq9i1kDk=
Subject key identifier:   56:91:43:02:0A:B1:5F:3C:DB:F1:F6:C5:B8:7E:AF:80:42:C9:FC:D3
Authority key identifier: 27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C
Certificate issuer:       /CN=A91400CC/serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
Certificate serial:       0360
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
Manifest number:          0359
Signing time:             Sat 23 Aug 2025 01:12:51 +0000
Manifest this update:     Sat 23 Aug 2025 01:12:50 +0000
Manifest next update:     Sat 30 Aug 2025 01:12:50 +0000
Files and hashes:         1: J1jGz4tSiWbUNxO7G86OA9ymGxw.crl (hash: ol2OQ0v3FVSKkonMhMqfLuJ3iw0ttHMtIsoyb8B4F5s=)
                          2: 5A0EFF08D55011EF9880B254C4F9AE02.roa (hash: 7tRXe0RCYJtYetkPzXHwKI+UWg4HugV8cA+U6bVnlYk=)
                          3: 4AC14C4AC6CB11ECB185E43EC4F9AE02.roa (hash: Yllv7GduXNWOYIX1rMtXNPRv/0417UqdoQWVHJFRoH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl
                          rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 864 (0x360)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91400CC, serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C
        Validity
            Not Before: Aug 23 01:12:50 2025 GMT
            Not After : Aug 30 01:12:50 2025 GMT
        Subject: CN=68a91592-2820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:65:49:7b:2a:7a:10:7b:75:8f:d1:90:af:48:
                    0e:19:eb:84:fc:fc:f2:ab:d5:3c:79:7b:7b:c6:4f:
                    04:a9:05:40:dd:ac:cb:49:04:bb:90:0c:ff:48:b5:
                    51:40:74:1d:43:cc:a3:80:eb:80:e2:33:c4:43:24:
                    77:0b:6e:99:59:eb:f3:99:f1:17:e4:e6:73:be:99:
                    31:26:31:89:9b:81:0c:2e:be:19:d5:7c:0c:0f:89:
                    b4:3d:a0:5a:ad:92:2f:4e:94:44:39:01:e2:10:10:
                    ca:0d:21:33:b9:db:d5:c0:04:be:c5:fd:09:89:2f:
                    60:05:3a:49:08:14:69:c8:ac:d7:fa:d0:b9:af:92:
                    56:9c:90:fb:f3:79:49:c9:89:86:80:59:bd:a3:6d:
                    24:42:e8:6c:d2:34:58:2e:30:9c:6e:8b:7a:d2:6b:
                    16:62:80:00:0e:dc:a6:47:43:c1:47:9b:9b:95:f3:
                    4a:76:2b:5c:f0:3c:cd:cf:06:cd:92:b3:27:08:27:
                    c8:0f:42:d3:99:ac:9d:7f:0d:c6:0e:96:99:7a:e7:
                    56:56:46:ba:54:d0:c4:b1:e2:f7:9b:14:f8:7c:1e:
                    58:44:44:18:b7:ff:29:3f:94:5b:49:51:8d:9c:08:
                    4d:d5:87:21:7e:f1:42:3c:96:d0:b8:9d:00:3c:06:
                    d4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:91:43:02:0A:B1:5F:3C:DB:F1:F6:C5:B8:7E:AF:80:42:C9:FC:D3
            X509v3 Authority Key Identifier:
                keyid:27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:bf:cf:2e:fc:47:9b:5a:a8:15:9f:4d:3f:0e:a8:27:0c:cb:
         31:1c:83:8e:04:1e:7e:0f:44:63:c6:1f:cc:12:2c:70:95:c0:
         0e:99:d8:5d:b6:c0:90:d8:2b:e2:5f:dd:d6:2f:e6:20:5d:16:
         f9:c1:fa:51:6b:48:b6:16:41:4a:35:c6:bf:f5:48:69:d4:a0:
         16:be:51:27:d0:2c:48:77:8d:36:9a:df:43:73:64:d4:49:51:
         0b:09:5a:d8:e2:30:d0:d4:b2:f5:9f:80:0c:4f:49:a2:8b:7c:
         5c:45:2d:ad:94:8f:a9:be:76:6f:87:8a:75:f5:cb:ed:2b:ad:
         c7:c1:a1:97:a7:0e:a2:16:ab:85:90:58:5c:97:58:0e:cf:07:
         82:77:dc:06:2a:68:15:2b:1d:f1:b7:01:e2:6e:8e:be:d3:f7:
         5a:86:10:98:f0:54:72:4c:50:28:97:82:7d:2b:09:b0:5f:f6:
         95:d3:02:11:04:c3:b4:b1:57:ea:f8:bd:9f:cf:8c:e5:a1:db:
         fb:2f:9b:7a:0a:c4:ef:a9:6b:7d:77:56:5e:70:fb:62:2b:85:
         ab:48:4f:03:32:55:ef:ae:12:bb:ca:22:9f:40:3c:34:16:81:
         60:6b:4f:8e:1a:41:e2:82:cf:98:9a:48:4c:97:35:bb:cc:3c:
         b0:6a:76:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:10 2025 by rpki-client