Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft
File:                     J8OQD7137iLLcempDoFXTN5GRK0.mft (raw, json)
Hash identifier:          IzD0tF0L1HcX8DaxMTUwsN9/R6k3b4+yggk6eKtW/vs=
Subject key identifier:   CB:89:2E:74:8F:7C:44:AA:84:27:A3:60:CB:DE:09:8D:AA:59:49:68
Authority key identifier: 27:C3:90:0F:BD:77:EE:22:CB:71:E9:A9:0E:81:57:4C:DE:46:44:AD
Certificate issuer:       /CN=A91B1A23/serialNumber=27C3900FBD77EE22CB71E9A90E81574CDE4644AD
Certificate serial:       077B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft
Manifest number:          0774
Signing time:             Fri 22 Aug 2025 21:41:15 +0000
Manifest this update:     Fri 22 Aug 2025 21:41:14 +0000
Manifest next update:     Fri 29 Aug 2025 21:41:14 +0000
Files and hashes:         1: J8OQD7137iLLcempDoFXTN5GRK0.crl (hash: fdyiBhGHwaQayiG/Q852ytvDtwv9HA6GGP3kAgygPWA=)
                          2: 594EEA2CAEA711EE961B0558C4F9AE02.roa (hash: USU8pNkMAdz6WSNLBXiulBGQVhWKRWb5vA71xaDbimA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.crl
                          rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1915 (0x77b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1A23, serialNumber=27C3900FBD77EE22CB71E9A90E81574CDE4644AD
        Validity
            Not Before: Aug 22 21:41:14 2025 GMT
            Not After : Aug 29 21:41:14 2025 GMT
        Subject: CN=68a8e3fb-6b2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:29:04:e3:ee:22:e5:f4:bf:d2:d7:3a:69:4f:
                    0b:f2:19:70:76:25:e9:19:1e:90:d3:2d:1e:af:a6:
                    b7:89:dd:b9:7b:79:0e:84:29:28:74:2c:fd:97:10:
                    02:11:55:df:bc:c3:0c:55:1c:84:0b:06:1c:a1:b8:
                    d6:e5:cb:a1:e9:a8:23:6e:0f:64:72:c5:34:4a:e4:
                    b9:3e:2f:ae:dc:6a:9f:97:28:07:ac:d3:ad:58:1b:
                    96:65:6a:95:6c:a0:be:34:e2:27:60:70:2a:1e:94:
                    a0:41:16:05:7b:c6:f5:ab:de:32:4b:13:d9:77:53:
                    9a:84:54:d4:50:df:95:e3:0e:74:4e:73:f1:ef:21:
                    72:4c:0e:24:92:04:32:53:ca:a6:b9:f1:60:ac:a4:
                    1c:cf:06:34:d5:97:3d:5b:b9:23:54:b3:4c:3f:0e:
                    69:97:90:dd:4a:1c:ba:1a:12:12:57:a4:1a:3d:37:
                    21:88:36:82:93:bd:8e:ba:0c:d2:c4:ff:cb:6f:b6:
                    2e:bb:77:97:f0:6e:9b:fe:ba:19:46:00:43:20:6c:
                    50:3b:52:58:68:87:75:49:3c:ed:ba:98:8f:84:50:
                    79:8b:9c:6c:0b:af:95:19:17:2d:ee:7a:93:bf:2c:
                    78:e9:f9:b4:b8:cd:99:70:43:e4:69:a0:61:e0:36:
                    39:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:89:2E:74:8F:7C:44:AA:84:27:A3:60:CB:DE:09:8D:AA:59:49:68
            X509v3 Authority Key Identifier:
                keyid:27:C3:90:0F:BD:77:EE:22:CB:71:E9:A9:0E:81:57:4C:DE:46:44:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8OQD7137iLLcempDoFXTN5GRK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1A23/AC533DEE289611EBBAAD5721C4F9AE02/J8OQD7137iLLcempDoFXTN5GRK0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:25:a3:9e:b7:b8:6a:06:78:30:0f:b6:0a:68:a6:c6:e2:00:
         9c:b8:20:05:cd:fc:34:28:fa:63:86:d5:ac:a7:92:12:19:8c:
         ab:bc:c1:20:20:c3:d2:4c:9c:97:f2:11:3d:de:64:06:30:db:
         50:04:7a:1c:5f:d3:39:78:8e:a2:e7:6b:05:10:a8:fc:b9:1c:
         03:ab:cd:8a:55:e0:ff:70:fc:97:59:0b:2e:44:aa:fc:18:25:
         d7:fc:4e:b7:1c:8d:49:5e:f6:ee:1b:6d:eb:97:d6:5f:a3:a1:
         46:71:1e:b3:66:9e:fa:ce:34:99:a2:12:3a:2b:6f:e6:19:89:
         94:ed:31:db:b9:e3:64:7d:2c:a2:3d:74:cb:9f:81:3c:a2:fc:
         cc:a9:24:e4:dc:26:ed:41:3a:53:bf:d6:35:81:73:fe:bb:03:
         cb:aa:02:5a:d0:db:35:1b:ac:b5:3f:50:72:c3:9c:7e:70:ad:
         66:43:8c:de:c2:e0:00:4b:db:38:12:1d:66:05:a4:f4:68:f2:
         05:25:81:24:65:0c:f9:91:ba:4e:42:e2:ad:8b:d3:0b:64:74:
         a0:d4:9a:f0:25:c1:bd:89:25:c0:d9:36:c0:8e:9e:c2:27:12:
         6d:2c:9a:6b:3b:3e:8c:3b:66:93:78:d0:69:83:c9:2d:77:01:
         9e:18:15:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:31:41 2025 by rpki-client