Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
File:                     0wlAzG8MECS4QLu309gBJjYGylk.mft (raw, json)
Hash identifier:          0TjgBe4Mo0kzqLvXCD5rTjtheaFwNIcW2ZX08aUX97s=
Subject key identifier:   95:41:C1:FB:35:54:40:96:89:1A:D4:6A:DC:BA:C3:7C:F8:70:08:99
Authority key identifier: D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59
Certificate issuer:       /CN=A91412BC/serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
Certificate serial:       3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
Manifest number:          3B
Signing time:             Sat 23 Aug 2025 07:45:19 +0000
Manifest this update:     Sat 23 Aug 2025 07:45:18 +0000
Manifest next update:     Sat 30 Aug 2025 07:45:18 +0000
Files and hashes:         1: 0wlAzG8MECS4QLu309gBJjYGylk.crl (hash: wZL0Os5pU6yOWgEsxmRVNaEoIrXsyjfHvGxarGR/joQ=)
                          2: 92F3063C248A11F0AD4B1179C4F9AE02.roa (hash: c/3j+UgCAX53wB26IYOnbYkzgiT6NkDiaAOsu5xJNDA=)
                          3: 936B147E248A11F0AD4B1179C4F9AE02.roa (hash: e85Q7MVp1iqFp29TDCzCSbcgnvU2NzugMJ2RSsP+LnM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl
                          rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 07:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91412BC, serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
        Validity
            Not Before: Aug 23 07:45:18 2025 GMT
            Not After : Aug 30 07:45:18 2025 GMT
        Subject: CN=68a9718e-be14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:33:da:1a:7f:d7:a7:9a:26:cf:0f:c2:6a:2c:
                    5f:47:95:5d:37:d6:51:b5:15:a7:3c:95:1d:c0:4f:
                    ed:96:76:16:31:b6:67:95:84:7c:e9:70:e7:b5:67:
                    d2:a9:ad:a6:02:e8:40:81:9b:4c:38:75:e1:89:be:
                    26:aa:37:62:0d:cb:ca:44:ee:ff:f2:b5:d8:ee:74:
                    c2:b6:66:39:0b:57:64:59:af:6d:2f:0f:c0:77:81:
                    00:ec:d4:f7:28:4a:65:9c:43:72:e1:75:b8:6f:0d:
                    1d:60:87:65:71:71:bf:52:77:44:f3:56:0e:e8:bf:
                    fd:79:bd:42:62:b5:19:df:ce:32:23:eb:0a:7f:c9:
                    41:53:a0:90:ef:16:52:f3:63:9e:f4:37:0a:7f:cd:
                    a9:63:e1:e3:70:6d:26:ba:55:e4:e3:b6:59:c8:20:
                    49:c2:23:66:e6:1e:41:56:45:80:2d:31:15:73:c0:
                    3a:3a:c7:1a:77:3f:2a:d3:a0:2c:3f:aa:e9:2b:b9:
                    0f:50:9f:3f:b1:8d:00:ef:21:ec:74:e4:90:c2:d2:
                    06:72:9a:c1:43:ae:0f:90:a6:03:71:41:74:57:c6:
                    3d:37:74:59:64:0c:90:9f:15:8e:90:a3:34:ec:b5:
                    fe:fe:17:2b:f3:0e:93:24:d8:bb:ca:fc:e2:1c:51:
                    94:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:41:C1:FB:35:54:40:96:89:1A:D4:6A:DC:BA:C3:7C:F8:70:08:99
            X509v3 Authority Key Identifier:
                keyid:D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:4e:31:85:73:62:c8:56:ea:f5:1b:a9:73:af:65:f2:14:59:
         8e:bf:18:6e:51:64:fa:c2:38:3c:a8:ef:40:cf:a0:80:c3:d5:
         8c:79:f8:0c:36:2f:c7:4a:cf:9d:83:f4:ef:5a:db:ff:6d:0a:
         07:99:59:48:4e:b7:ee:35:28:09:b0:f7:23:9f:99:65:f0:25:
         6e:0a:7e:53:af:70:b7:0e:1d:9f:48:88:af:68:23:f5:1f:3d:
         9c:dd:39:3b:d1:44:d7:ae:e6:d5:d6:a6:f0:04:78:67:0e:ed:
         06:a1:be:fc:cc:33:e0:96:6a:fd:00:15:7e:ee:cd:a3:7a:22:
         4e:09:2e:63:bb:da:a6:9d:94:68:b7:98:b1:48:7c:d0:8c:7d:
         19:82:8c:52:3d:bf:4c:ef:64:a2:c9:c7:ca:97:51:6f:55:7c:
         7b:9f:f7:3e:5d:43:ca:9c:bf:91:53:fa:05:1a:4a:bf:44:0c:
         8e:1d:f5:e2:1c:a1:23:53:64:a1:d9:5e:25:b3:59:c6:bd:f8:
         6d:4a:7b:d6:87:af:2b:e8:02:43:2b:9b:6b:a0:91:77:ee:d5:
         90:a8:83:27:a5:e9:ce:fd:99:73:82:ec:e4:a9:ce:aa:4f:5d:
         04:c1:2e:eb:74:6e:43:79:5e:66:a5:02:8a:13:32:d0:9e:4e:
         8c:65:52:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:56 2025 by rpki-client