Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
File:                     Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft (raw, json)
Hash identifier:          nEi8qpeDueTBpebhxsyvqgRcIydjkfF4ECQ6P3FeYrg=
Subject key identifier:   E5:8F:90:5D:11:3D:D1:3B:99:84:66:84:9C:93:84:44:E0:7D:1D:DC
Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
Certificate issuer:       /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Certificate serial:       05E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
Manifest number:          05D3
Signing time:             Wed 02 Jul 2025 23:23:08 +0000
Manifest this update:     Wed 02 Jul 2025 23:23:07 +0000
Manifest next update:     Wed 09 Jul 2025 23:23:07 +0000
Files and hashes:         1: Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl (hash: cC+QmAuI6im2l8fG0kX4D9EAStyp1wcHX9tlahNVV3o=)
                          2: 4D38774A86E611EF9D6F5581C4F9AE02.roa (hash: 7ioLjk8VeJvEHBuoWRfrT57B74IDRpNgRa9+NJtrnGo=)
                          3: 0DD6AB9CA4F011EC96AF7B65C4F9AE02.roa (hash: /5KvjYunF83kIcMiJK5ao0UnFWTIm9b33GuRAVT7yXE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl
                          rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 23:23:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1507 (0x5e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF5F7, serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
        Validity
            Not Before: Jul  2 23:23:07 2025 GMT
            Not After : Jul  9 23:23:07 2025 GMT
        Subject: CN=6865bf5c-4334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a7:16:3b:00:32:43:bc:14:76:86:f5:c4:de:
                    64:ca:13:dc:02:c0:10:c0:e3:18:b8:e5:e4:93:97:
                    f6:be:86:ed:e8:fd:47:56:a9:16:49:97:ff:22:26:
                    c9:c6:5f:76:27:9b:21:cb:45:6b:15:01:2a:fe:0d:
                    6f:80:cd:52:8f:e4:3e:b0:b9:4b:71:27:c4:ba:99:
                    88:d2:56:b6:c4:9a:a3:55:25:0f:f2:9b:2f:83:b5:
                    41:e0:e2:57:35:7e:24:2d:12:cf:e0:36:4f:37:1a:
                    ed:23:92:87:e1:4c:96:e1:11:f1:2d:b0:41:27:78:
                    d3:e9:77:c3:c0:51:67:5b:7e:1b:f2:0f:cb:43:99:
                    f6:48:3d:3a:bf:7b:4e:b8:c4:91:62:5a:99:21:57:
                    3b:3f:20:e3:40:f4:c1:d0:53:3c:b0:a0:a7:17:9f:
                    e2:09:95:1b:1c:8a:c0:39:be:b1:25:8a:04:55:7d:
                    4f:1b:16:88:b5:e8:26:5d:35:d6:25:04:4f:b1:1c:
                    16:ba:13:e9:c9:64:91:b9:fd:06:26:33:f3:4b:06:
                    00:64:61:37:63:66:ba:9b:94:f1:e2:b3:64:de:12:
                    20:1a:ea:f6:ee:55:27:9c:5b:b2:0b:91:c0:b7:0c:
                    42:81:c7:c9:22:92:6a:a0:20:30:e8:60:1d:f1:16:
                    33:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8F:90:5D:11:3D:D1:3B:99:84:66:84:9C:93:84:44:E0:7D:1D:DC
            X509v3 Authority Key Identifier:
                keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:58:11:ac:84:9a:90:6b:5e:d2:55:b8:9f:f2:a3:93:ea:38:
         fe:b6:67:c9:55:62:2c:78:04:42:ec:f6:36:a3:80:2e:a3:d9:
         e8:f6:c5:20:a4:99:ef:c5:9e:04:bf:fc:1f:34:46:0b:a6:04:
         1d:7f:2a:e8:db:73:f1:ef:7a:f7:5c:4a:ff:d4:02:57:ec:9e:
         50:47:19:c0:ae:67:af:6b:4d:ee:13:76:7a:de:25:7a:4d:f6:
         aa:ca:aa:7d:d7:d1:18:f6:7f:98:bc:bf:38:aa:21:b7:ee:cf:
         79:42:fa:90:fd:77:c8:48:a9:a6:39:e1:95:28:27:35:cc:49:
         98:7e:05:cc:d0:c8:9e:d1:e7:68:f6:ac:54:bb:7f:03:ba:5a:
         15:ab:e8:11:c0:31:3b:4e:d5:41:0b:20:09:59:4d:5b:3b:aa:
         c4:e8:96:b7:ac:89:90:a0:af:80:39:09:6f:82:d6:94:d3:14:
         1e:3f:37:13:a7:dc:21:83:5c:92:e0:cd:09:09:bb:92:c5:4c:
         99:ec:51:7b:c4:60:24:75:04:2e:4e:02:1e:70:ed:8d:9a:dd:
         c1:46:5f:01:1b:d0:91:d6:a3:3c:60:67:59:4b:a3:24:5e:0d:
         13:50:f4:5d:53:4c:e4:7a:23:14:34:68:02:9d:37:26:38:da:
         57:39:ac:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 02:54:00 2025 by rpki-client