Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft
File:                     GH7u6irWB7ylQi0JLdrMGZCPL9c.mft (raw, json)
Hash identifier:          U7ZyaXBM7dkUIJnhZatYkf9qnZlUSD7ICyPXxpElZtQ=
Subject key identifier:   03:89:B5:9F:50:70:C2:84:65:79:38:89:12:20:C5:01:D9:64:DB:6E
Authority key identifier: 18:7E:EE:EA:2A:D6:07:BC:A5:42:2D:09:2D:DA:CC:19:90:8F:2F:D7
Certificate issuer:       /CN=A91767B4/serialNumber=187EEEEA2AD607BCA5422D092DDACC19908F2FD7
Certificate serial:       0201
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft
Manifest number:          01FE
Signing time:             Sat 23 Aug 2025 02:29:08 +0000
Manifest this update:     Sat 23 Aug 2025 02:29:07 +0000
Manifest next update:     Sat 30 Aug 2025 02:29:07 +0000
Files and hashes:         1: GH7u6irWB7ylQi0JLdrMGZCPL9c.crl (hash: KXJKWmc+n25CNZN5LtRuUyPJMeFZY2s6zppr/8AMPhk=)
                          2: 57C505EA708411EDA8B14246C4F9AE02.roa (hash: YPKVhjI0QOxJDGKIkbhIcG0QRVYBhpe0iKALRG6i8e4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.crl
                          rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 02:29:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513 (0x201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91767B4, serialNumber=187EEEEA2AD607BCA5422D092DDACC19908F2FD7
        Validity
            Not Before: Aug 23 02:29:07 2025 GMT
            Not After : Aug 30 02:29:07 2025 GMT
        Subject: CN=68a92773-672d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:46:00:6d:40:95:ff:e4:4f:a1:46:57:ae:a3:
                    35:1f:b1:1d:de:c3:a9:7a:14:d4:fd:26:90:48:04:
                    c4:af:29:09:05:e3:e6:79:1e:16:90:b7:e6:3f:0f:
                    bf:8b:fe:af:2e:e6:85:8b:5d:3a:bd:15:78:1c:82:
                    62:97:6b:52:43:97:23:24:0e:ee:4c:9e:61:37:d2:
                    3f:e6:12:0a:f8:3a:be:36:8f:bd:2f:86:42:f8:4b:
                    fe:51:03:20:24:e7:6c:66:06:e4:4a:ba:bf:ea:9c:
                    32:b7:d0:81:b4:10:5e:92:46:1c:b5:51:6b:31:11:
                    98:ce:67:ad:a7:03:59:e4:19:4b:12:e7:75:e1:f5:
                    1a:21:1e:81:07:8e:50:eb:1e:19:23:36:1c:76:35:
                    c0:0b:c7:db:f8:c5:25:8b:14:23:23:57:82:02:e7:
                    c4:b2:47:3b:56:59:f2:46:9d:80:d2:56:1c:05:1c:
                    ba:4e:2e:f4:38:9e:54:92:21:db:ea:77:39:d0:9f:
                    0d:a2:ed:09:9e:9d:70:23:c4:69:03:dd:9f:d1:a8:
                    3b:db:f6:db:ca:02:d7:c0:0a:c9:1a:df:b5:25:36:
                    3c:10:7e:42:8d:c8:2c:92:b7:ee:72:7f:1d:a6:31:
                    32:09:de:cd:9c:65:f7:22:b2:94:2c:1f:53:58:14:
                    63:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:89:B5:9F:50:70:C2:84:65:79:38:89:12:20:C5:01:D9:64:DB:6E
            X509v3 Authority Key Identifier:
                keyid:18:7E:EE:EA:2A:D6:07:BC:A5:42:2D:09:2D:DA:CC:19:90:8F:2F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:83:52:29:2b:f7:ff:29:1d:eb:af:76:00:0a:55:c0:c5:62:
         5c:8a:e2:7f:52:de:43:06:09:d4:5c:c2:0e:89:96:7b:e8:0a:
         35:19:d1:21:f0:f8:20:eb:ab:20:33:54:ff:5b:56:cf:6d:06:
         56:b6:29:d4:e5:ef:b9:c9:60:4b:fc:85:09:36:90:45:c1:ef:
         79:11:46:26:4d:09:77:bc:37:ea:2c:45:ab:37:79:ba:cf:52:
         dd:0a:f7:c2:20:99:36:4c:20:73:9f:40:5c:f0:e4:ed:9c:21:
         6e:0c:bc:6b:9f:a4:42:79:de:d1:a7:c8:26:c3:09:43:81:95:
         70:d6:36:af:26:d4:76:3f:67:59:37:34:9d:94:63:8d:fa:9c:
         78:b8:5a:01:76:13:9c:a2:ab:0a:08:48:0b:e4:e8:ce:16:a5:
         90:e9:c7:e2:6d:87:d7:89:24:88:88:ba:3c:e2:ac:65:31:66:
         a0:79:36:7f:85:26:f8:f9:9d:ef:94:ba:97:96:d6:cc:6d:2c:
         8b:fd:66:68:01:69:2d:a5:b9:da:8b:47:9c:61:41:08:92:19:
         e6:57:6e:97:28:dd:94:bc:11:67:43:0a:01:71:0b:40:25:85:
         dc:7b:15:32:09:bb:49:a1:c3:da:41:6d:bf:21:c5:9a:4b:5d:
         48:11:be:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:16:23 2025 by rpki-client