Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
File:                     u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft (raw, json)
Hash identifier:          BJjFLDiBctZsDLN2eJ9DqRomKT9JK36SU/+s60WEtwE=
Subject key identifier:   84:18:46:B2:6D:B1:EA:D6:4B:90:FD:DD:DC:19:7C:65:17:A8:66:18
Authority key identifier: BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32
Certificate issuer:       /CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
Certificate serial:       0176
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
Manifest number:          016E
Signing time:             Sat 23 Aug 2025 03:57:29 +0000
Manifest this update:     Sat 23 Aug 2025 03:57:28 +0000
Manifest next update:     Sat 30 Aug 2025 03:57:28 +0000
Files and hashes:         1: u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl (hash: 97LujewMEFrCeWXEAVM8inC4P3fZAD8QIIbeJFd9pIs=)
                          2: 9F5C80A8F3EB11EFBAF62455C4F9AE02.roa (hash: ocKjYHSoFFeanr7nSrSoG6NZ1NK1GEX/tAPr3f25J2Y=)
                          3: FCD162AE508511EEBA4C0E2BC4F9AE02.roa (hash: 1HOv65dUJu9o7mPWP7pn54wayqG8zRXC99rSkS0sL90=)
                          4: FD57EA90508511EEBA4C0E2BC4F9AE02.roa (hash: DDHsuGR9D/9rz8HARaoFh0MSMFheoZInmf9Cc8/ZZtU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl
                          rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2265, serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32
        Validity
            Not Before: Aug 23 03:57:28 2025 GMT
            Not After : Aug 30 03:57:28 2025 GMT
        Subject: CN=68a93c29-d32b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:55:cb:5d:05:f2:88:ee:92:0d:85:e2:6f:f0:
                    f0:fb:7d:97:5b:c9:34:dd:57:c0:58:81:db:e3:c9:
                    6f:46:ee:a3:50:10:fd:a2:17:4c:93:0c:52:ef:6f:
                    74:fc:c3:0f:45:49:de:28:f5:f9:a8:90:c3:17:46:
                    84:f4:30:10:e0:95:e5:11:1a:98:06:61:4c:d6:3e:
                    65:2b:ab:40:e0:e0:3d:66:d1:1c:f8:bd:c2:4e:ec:
                    f8:91:ed:d4:f6:d4:ac:01:0a:92:a8:c1:5d:ef:f2:
                    45:ff:d2:fa:1e:f2:fc:65:65:2a:13:35:dc:b1:ed:
                    c2:bc:7f:99:13:27:9d:70:4c:92:00:00:28:06:e5:
                    c9:0f:1b:78:70:00:82:f5:65:55:3b:1c:bb:e4:92:
                    31:02:79:45:69:cb:a8:a0:74:25:af:3e:00:8a:0a:
                    99:b4:7b:1b:78:96:48:5b:e9:13:17:df:fb:bf:de:
                    0e:c1:5f:81:69:bc:46:63:05:3d:30:db:e1:95:07:
                    47:1b:dc:71:e7:65:6c:f9:48:2d:b1:00:8a:57:fa:
                    92:48:cb:34:8e:7b:d1:9f:63:7d:83:ab:3a:4b:f2:
                    c4:6e:79:b3:32:34:c5:d0:ae:0e:c5:c0:07:24:01:
                    fc:de:3e:9c:5e:82:1b:0a:45:60:93:a3:1e:e4:e2:
                    96:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:18:46:B2:6D:B1:EA:D6:4B:90:FD:DD:DC:19:7C:65:17:A8:66:18
            X509v3 Authority Key Identifier:
                keyid:BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a2:c9:c7:aa:be:57:c6:bb:e4:fd:e2:f1:d8:7e:f0:7a:f3:
         54:a5:44:2e:bf:49:99:d2:8c:b3:f2:ee:ee:a1:b9:26:9d:29:
         35:40:11:da:77:8d:f2:4e:6e:65:71:5a:f8:26:0c:87:01:76:
         23:86:39:82:0c:86:9c:10:8d:4c:c0:4f:af:63:81:a5:10:ae:
         44:e1:6a:42:1f:fb:74:88:f7:d0:b5:e7:d2:24:44:7d:2b:65:
         5c:e8:84:7d:71:82:c1:e0:fc:18:d7:cc:2d:2d:86:35:ac:9d:
         2d:3c:7b:94:8c:bb:42:44:4b:0d:a8:ad:e0:a1:dc:5c:1b:29:
         91:b7:88:00:ba:df:31:d5:b9:2a:0b:37:6e:32:f1:27:df:91:
         5d:1b:a7:f1:df:fc:1d:ec:be:14:b4:e9:5b:1e:8f:4c:c2:d1:
         65:3c:45:78:14:c0:74:43:ba:ce:8b:8d:31:b9:77:aa:5b:06:
         e7:9f:99:d2:69:d4:24:7d:1c:af:a4:d1:90:16:39:82:6b:56:
         97:33:68:4c:45:5d:b4:c8:48:00:d6:49:e7:f0:89:e0:f2:23:
         da:c0:49:1f:76:60:86:48:f6:46:17:63:ea:ae:23:c5:d5:1a:
         42:4c:e9:cf:a9:f7:12:2f:c5:8c:a3:88:9a:11:39:b7:b7:d4:
         30:b1:79:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:12:06 2025 by rpki-client