Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft
File:                     JtUcwUoj0KiCO18cogDnCGrJqWk.mft (raw, json)
Hash identifier:          ZL+ZJ5bQPEEEYKX2N94RU5FOjbbD3DX9aZRXhFWJYyY=
Subject key identifier:   A3:06:A3:33:F9:A1:C6:0E:DF:CB:27:E0:6C:DC:3E:87:81:6B:96:64
Authority key identifier: 26:D5:1C:C1:4A:23:D0:A8:82:3B:5F:1C:A2:00:E7:08:6A:C9:A9:69
Certificate issuer:       /CN=A91B0022/serialNumber=26D51CC14A23D0A8823B5F1CA200E7086AC9A969
Certificate serial:       0758
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft
Manifest number:          0753
Signing time:             Fri 22 Aug 2025 21:49:18 +0000
Manifest this update:     Fri 22 Aug 2025 21:49:17 +0000
Manifest next update:     Fri 29 Aug 2025 21:49:17 +0000
Files and hashes:         1: JtUcwUoj0KiCO18cogDnCGrJqWk.crl (hash: 6B12JuhDoZbsMwiHBvHZhKSgykuj/MHH5d0dvAU9N2w=)
                          2: 736BC8B433B011EBB38B4E68C4F9AE02.roa (hash: FBuNSRl7XnXjjg9AlzEceanFZnpfOYLenTTWUna+f+s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.crl
                          rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:49:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1880 (0x758)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0022, serialNumber=26D51CC14A23D0A8823B5F1CA200E7086AC9A969
        Validity
            Not Before: Aug 22 21:49:17 2025 GMT
            Not After : Aug 29 21:49:17 2025 GMT
        Subject: CN=68a8e5dd-6ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c2:41:94:04:d0:79:09:fd:48:6f:15:b7:4c:
                    8e:b3:4e:58:fe:d7:c0:f6:a3:7d:40:5f:52:0d:d4:
                    d5:10:0e:09:9c:e5:ac:3c:23:4c:44:bb:7b:eb:29:
                    94:bd:b6:da:9b:fa:ce:61:2f:b4:b8:01:b0:35:21:
                    b0:6e:57:10:66:b4:7a:4d:ff:a3:5c:b2:59:9d:7e:
                    23:45:9c:68:ac:10:5c:f4:b9:3e:d9:92:67:d2:c8:
                    05:2f:aa:41:2f:5a:a7:a4:3c:fa:39:f0:66:fd:3d:
                    27:61:ca:d9:b8:e3:62:8f:83:ec:c3:b3:8c:4a:84:
                    67:65:2a:54:91:8d:a7:ad:be:96:13:72:35:13:01:
                    b9:9b:52:1d:51:d5:09:79:c3:7c:9e:cf:76:59:d9:
                    49:16:6c:8e:63:dc:19:62:3f:46:18:48:00:93:9c:
                    49:05:79:e8:9c:5c:12:6e:a0:0d:ee:fc:50:d6:42:
                    18:16:8d:24:e9:a4:9a:64:95:43:55:cf:a0:89:96:
                    0e:c1:ec:c7:bd:a0:ec:2e:dd:c1:2d:e0:63:1c:ee:
                    1b:1e:0d:ae:95:18:76:30:55:8c:3e:b1:8a:f2:41:
                    eb:04:7f:7b:15:c4:ab:00:f4:1a:c2:6c:f8:44:63:
                    5c:3f:f2:b3:90:4d:d1:bd:67:fc:21:28:27:bd:a5:
                    28:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:06:A3:33:F9:A1:C6:0E:DF:CB:27:E0:6C:DC:3E:87:81:6B:96:64
            X509v3 Authority Key Identifier:
                keyid:26:D5:1C:C1:4A:23:D0:A8:82:3B:5F:1C:A2:00:E7:08:6A:C9:A9:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:47:b3:01:9a:40:60:4b:7b:9e:6f:26:ed:4c:fb:06:39:82:
         12:68:16:7a:bd:34:b5:6d:a6:3f:bf:80:a3:67:e1:57:64:a8:
         8e:f6:8b:c2:60:7b:56:be:e0:87:2c:e6:67:61:6c:dd:04:52:
         6d:01:93:b7:51:fc:69:43:59:04:2c:b3:a1:93:87:ea:1a:dc:
         5a:fb:db:fc:51:ec:92:dc:4e:71:0a:0e:a1:9d:d7:2d:67:d0:
         7c:a4:87:fc:b2:eb:15:35:22:88:42:81:41:6d:cc:27:ac:18:
         c0:ba:4d:e0:34:65:92:d6:61:b3:a7:7a:0d:59:96:73:02:c4:
         cc:f7:9b:79:dc:56:0b:74:77:65:0d:e4:da:4d:a6:18:35:c9:
         af:ef:00:bc:7a:81:16:56:f8:34:fd:ea:16:aa:3b:c6:de:87:
         5b:3c:e9:15:c2:81:71:81:76:f1:a8:0b:cd:09:21:55:97:dc:
         dc:70:76:57:0d:7f:c0:d7:4d:7d:5f:ba:82:c7:bb:de:30:42:
         f3:33:59:b1:62:75:e5:fb:6f:ce:02:3c:81:be:28:23:ae:16:
         9c:8f:5f:f7:ec:7a:7a:3a:cf:2a:dc:65:58:f1:82:07:53:05:
         ed:ab:7f:96:bf:20:4e:6c:09:4a:b7:dd:cc:28:dc:ad:a0:df:
         ca:42:ae:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:26:44 2025 by rpki-client