Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
File:                     ETYYsNQQaCrAapAdZbuayVXtieA.mft (raw, json)
Hash identifier:          NHLbHPDX7jdhVmPrbY1WE9Gz3luzFMDF/CCmc/Bc18I=
Subject key identifier:   86:01:1A:56:91:B4:F9:81:FE:40:38:2A:10:44:BF:20:7E:D7:61:85
Authority key identifier: 11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0
Certificate issuer:       /CN=A91551D7/serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0
Certificate serial:       0EAD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
Manifest number:          0E8A
Signing time:             Fri 22 Aug 2025 17:50:08 +0000
Manifest this update:     Fri 22 Aug 2025 17:50:08 +0000
Manifest next update:     Fri 29 Aug 2025 17:50:08 +0000
Files and hashes:         1: ETYYsNQQaCrAapAdZbuayVXtieA.crl (hash: zZcCPFgxaUkIPFKhQSnkLQy0NBl7gx/dYFm0kTSnG4g=)
                          2: BA3A46C28D3211EB9BFE873BC4F9AE02.roa (hash: ETZXfLUU8V3KJwKDLSCPK2awgHX/8QZCXq5mNJZzacU=)
                          3: 93713A1442F311EDA8889068C4F9AE02.roa (hash: EzMv5lO9o81NCglSMIqMm+Knptd/vLNcXJNN5+fG3pg=)
                          4: 04421FB4C2A911EBB201FE39C4F9AE02.roa (hash: 60vuOkQynjGzHB5ZlHpi78kSHRwd9T4kwsOABZu9eBw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl
                          rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:50:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3757 (0xead)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91551D7, serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0
        Validity
            Not Before: Aug 22 17:50:08 2025 GMT
            Not After : Aug 29 17:50:08 2025 GMT
        Subject: CN=68a8add0-94fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cb:5a:d9:99:e8:58:c4:ec:e2:fd:48:57:2a:
                    5f:00:80:ca:a0:a7:98:79:ac:44:fc:2f:e7:ec:a8:
                    a8:e2:49:3d:12:76:2b:a1:83:52:4a:de:cc:5c:1c:
                    cc:a8:d4:f5:26:fd:19:14:fd:46:ba:09:04:29:e2:
                    92:bc:ee:59:d8:93:f2:0b:af:73:ec:34:01:db:ad:
                    f0:f5:ba:8f:90:d4:26:2b:3f:7f:69:92:f3:aa:04:
                    ae:cf:f7:74:db:ec:6b:63:75:f6:32:b9:e3:32:68:
                    b2:49:2c:38:39:36:e6:40:61:de:4d:42:54:d0:97:
                    38:35:d2:98:78:71:5e:69:0b:d4:0b:01:b3:a9:4d:
                    0a:a2:d3:90:d2:19:f9:3e:ef:4b:f7:b4:e5:d4:ff:
                    83:90:12:4a:7e:25:3c:3d:f1:58:d1:f7:1a:7d:3b:
                    cf:ef:42:b8:b9:77:ae:92:90:0c:70:d4:89:c9:77:
                    82:8d:b8:39:57:03:d3:8d:25:6b:7b:6e:b2:fe:09:
                    46:3f:f7:fc:65:94:a4:c7:17:cf:d2:81:ee:7d:7e:
                    6d:5e:01:32:c1:73:8c:02:1b:64:66:b4:cc:af:9d:
                    28:a4:0a:d2:50:44:07:9d:c9:e6:ed:e5:91:38:a9:
                    e0:72:08:cb:b4:2b:20:ce:54:71:80:43:9e:ff:99:
                    f4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:01:1A:56:91:B4:F9:81:FE:40:38:2A:10:44:BF:20:7E:D7:61:85
            X509v3 Authority Key Identifier:
                keyid:11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:da:88:78:1c:9f:92:da:00:be:46:c5:a8:18:68:93:c8:48:
         39:cb:60:76:b9:60:b1:70:da:03:5f:55:99:f3:3f:3e:1c:7d:
         c2:27:93:e0:1e:0b:5a:bd:f6:05:34:df:52:52:0a:e8:a7:9e:
         2c:c4:43:f1:9a:3d:d0:9c:fe:81:a7:ef:ea:5b:94:d0:55:8e:
         e6:b2:c5:a7:a6:2c:c8:57:10:7b:f3:09:f1:4a:b2:9c:75:1c:
         c2:37:2b:9b:d6:d5:42:54:2d:8c:67:51:34:da:0f:f3:5f:13:
         b5:82:a6:8d:db:db:b4:58:61:21:dd:ad:3c:d9:76:5c:d6:75:
         4e:6d:b5:d1:d8:c3:f5:cf:60:f7:5e:27:77:a2:a4:49:5f:7f:
         9b:87:ae:69:56:41:5f:8d:93:ac:9a:e6:22:0e:66:35:b2:39:
         46:26:38:b4:22:75:8b:14:6d:21:8e:ae:23:5b:b0:a2:c5:bb:
         39:4f:46:18:d4:19:0f:2c:c1:7b:16:4d:0a:15:59:47:12:a0:
         b1:5f:0a:c6:53:4b:bb:bb:7d:82:11:a3:2b:c7:12:a8:d7:43:
         00:bb:fa:4a:e5:d4:f4:d0:4b:1c:49:74:16:34:8f:45:d6:2b:
         2b:ae:83:b5:93:7c:46:90:86:9c:55:d7:21:89:82:28:8f:72:
         fa:69:83:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:59:09 2025 by rpki-client