Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
File:                     jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft (raw, json)
Hash identifier:          wfv0LmFWNocvhQV521gDXGe9LJNCo4GectT/9E3egno=
Subject key identifier:   FB:13:FD:F4:85:35:B6:5E:58:61:FD:C0:5F:E5:C8:C3:2E:8B:A9:BA
Authority key identifier: 8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41
Certificate issuer:       /CN=A91733A8/serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441
Certificate serial:       0991
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
Manifest number:          096F
Signing time:             Fri 22 Aug 2025 20:19:44 +0000
Manifest this update:     Fri 22 Aug 2025 20:19:43 +0000
Manifest next update:     Fri 29 Aug 2025 20:19:43 +0000
Files and hashes:         1: jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl (hash: Wu+pjA+7AfTFxN1HPi1wXEkSWc6fERjo+s+P06jr03s=)
                          2: F6810AC0D0DC11EA9B1DF432C4F9AE02.roa (hash: X16lFY6K2nhljbiLaCzlwi3FHh2sWAR/KpBd/NkhGQQ=)
                          3: E3A38380A1C811EA8C425C58C4F9AE02.roa (hash: 5iCZA8jYlZk3gHKxMQWGtU7Eku76azBHbjf03/KNSIU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl
                          rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 20:19:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2449 (0x991)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91733A8, serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441
        Validity
            Not Before: Aug 22 20:19:43 2025 GMT
            Not After : Aug 29 20:19:43 2025 GMT
        Subject: CN=68a8d0e0-1bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:85:ed:a9:bc:e9:68:7b:8d:7d:9c:a8:6d:dc:
                    30:94:a8:c5:af:c9:6f:7e:97:6e:26:16:c5:a4:b3:
                    ec:c8:8d:2a:b4:2a:3e:e4:70:35:67:dc:2e:1c:6b:
                    9a:81:93:e3:e1:59:28:1f:0f:fc:12:4a:34:69:62:
                    3a:70:07:a3:f5:1c:ab:a6:45:54:e9:02:41:e5:3f:
                    f7:5e:c4:12:6e:43:62:15:5c:da:a8:95:5a:bd:1c:
                    18:4b:c0:52:d8:cf:50:5b:6a:74:fd:6b:4d:b5:a2:
                    90:8c:66:18:e2:cb:68:2b:cd:b8:18:1b:60:df:45:
                    c4:8b:3e:f3:32:1d:0c:5e:3f:a7:6f:0f:18:db:16:
                    a2:d3:48:4e:d4:95:a6:6f:86:c4:09:02:17:6b:1f:
                    45:01:b8:2f:e2:19:45:46:09:bf:bd:21:fd:c0:1d:
                    dc:6d:11:43:23:3a:18:6e:56:62:fb:f0:81:e3:d9:
                    43:8d:35:62:63:72:cc:ce:5b:ff:fb:bf:47:ab:18:
                    c7:5b:b8:bd:07:a5:33:9d:0b:01:46:ff:f2:2f:65:
                    0c:f7:de:e4:31:3e:f4:57:13:c8:39:3e:84:fb:30:
                    e7:b2:b7:a3:67:88:75:56:a8:21:b4:eb:41:29:54:
                    fc:63:76:0d:c8:88:1a:b2:0f:03:25:04:4c:f6:59:
                    a7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:13:FD:F4:85:35:B6:5E:58:61:FD:C0:5F:E5:C8:C3:2E:8B:A9:BA
            X509v3 Authority Key Identifier:
                keyid:8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:b6:0a:99:92:63:db:63:e7:ec:3a:7d:d8:7b:1c:c5:ad:02:
         a1:54:56:45:07:86:df:5c:c0:1f:0b:17:f3:22:f6:b2:de:68:
         43:5b:1a:06:0f:b3:db:06:28:73:ca:1a:87:c4:71:67:7d:11:
         c3:07:2e:b7:5a:ca:9c:df:23:0b:ad:7b:6d:8a:bc:75:3b:87:
         4c:ba:9a:dc:b7:f7:5c:d9:4f:bb:6c:0a:09:dd:64:f5:27:fd:
         2e:94:97:0c:e0:04:d1:01:0c:a1:72:e2:7c:54:b0:47:2c:ce:
         fd:f8:cd:33:c2:90:19:7f:e7:0d:c5:9a:57:d9:51:6a:a6:cb:
         32:ac:b1:db:fd:36:0a:e4:ef:e3:c7:f3:79:c9:eb:19:1a:18:
         f7:d5:ae:77:ee:9d:71:29:28:77:8a:53:f1:bf:eb:2f:bf:f4:
         d8:90:d3:d4:52:7d:ac:e0:7d:06:12:b7:80:74:8d:e2:e6:60:
         0e:6b:22:b7:17:40:18:be:a8:b2:83:92:9d:02:f1:5b:07:46:
         7a:df:2d:4f:0d:a1:b0:e8:37:b0:8c:a7:b2:0f:b8:cb:72:e4:
         04:2f:84:b3:6d:71:7d:8b:f0:d4:0f:b7:30:88:f5:13:f0:f4:
         03:23:a3:57:d1:68:9d:4a:f1:a6:49:1d:8a:da:b1:37:eb:fe:
         21:92:f8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:34 2025 by rpki-client