Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
File:                     dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft (raw, json)
Hash identifier:          43hx1Ts93szMqFsXyXNH5dZCVpIpQD5HWnLJf8aQP3U=
Subject key identifier:   43:A4:13:BE:FB:0C:83:27:F1:6F:13:AB:6F:83:18:EA:D9:7F:C6:8E
Authority key identifier: 76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11
Certificate issuer:       /CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
Certificate serial:       0697
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
Manifest number:          067E
Signing time:             Fri 22 Aug 2025 22:39:57 +0000
Manifest this update:     Fri 22 Aug 2025 22:39:57 +0000
Manifest next update:     Fri 29 Aug 2025 22:39:57 +0000
Files and hashes:         1: dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl (hash: qyiAmVcpVy4lkSJsQlIgtBR3D91j6truuZnG3OMY0I0=)
                          2: 94F5846AE0D011ECAF88A30DC4F9AE02.roa (hash: Tkim0bj/DqFtnK3qLWdBDKeH3dbPF/RS93ZGfjewyNw=)
                          3: 9056CDF6A6D211EDA1D2862BC4F9AE02.roa (hash: l25nuyCLbxX8YszYNp7Lh0hCVKg/XaMvp8JSklUBmx4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl
                          rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:39:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1687 (0x697)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B29F8, serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
        Validity
            Not Before: Aug 22 22:39:57 2025 GMT
            Not After : Aug 29 22:39:57 2025 GMT
        Subject: CN=68a8f1bd-27f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:18:d8:75:39:9d:39:63:b8:c5:fa:11:51:cc:
                    6f:ae:99:f1:ba:f1:c9:5a:22:a4:a8:52:1a:06:7d:
                    1f:97:49:51:99:30:16:ea:a5:64:79:37:bc:19:47:
                    19:f6:cf:97:94:7e:ff:f5:b1:1c:17:5c:45:ba:0a:
                    ac:44:e8:b0:34:0d:5d:18:f9:f3:c9:02:87:06:d2:
                    91:da:c6:a0:6d:4d:af:55:0f:d5:4f:bb:6c:11:cf:
                    92:53:f1:1e:2c:3f:86:ac:d3:55:f2:f2:eb:b8:7a:
                    40:da:cc:f0:59:c4:08:98:c1:cf:c8:dd:f9:b2:6b:
                    0d:05:d0:85:f9:8f:f7:69:f3:f5:9d:63:23:ef:b9:
                    72:fc:40:7b:0f:c2:e6:7e:02:fc:bd:9a:35:b2:81:
                    4b:03:0a:4e:08:09:0f:84:9d:3f:18:3e:41:2f:f4:
                    21:bc:da:1c:53:ad:6f:55:10:9d:1f:80:04:7e:a6:
                    bf:df:54:4f:47:db:a3:b8:6f:3c:27:ee:53:69:be:
                    fd:cc:3f:c5:88:89:48:b2:35:2f:aa:7e:55:b4:2e:
                    23:1b:54:86:b4:ed:b1:a2:ac:fd:b5:c3:af:04:3f:
                    43:40:78:6c:48:28:71:72:41:19:dd:b4:39:2c:60:
                    57:d7:d9:47:e2:44:56:94:c5:22:95:f0:bd:6c:f7:
                    65:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A4:13:BE:FB:0C:83:27:F1:6F:13:AB:6F:83:18:EA:D9:7F:C6:8E
            X509v3 Authority Key Identifier:
                keyid:76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:86:b8:0a:38:48:7f:dd:52:1d:85:cb:96:09:f9:7f:8c:06:
         38:1a:22:b0:42:46:ac:11:fa:cf:9c:1b:33:5f:b1:c6:87:86:
         b0:e4:22:89:70:80:61:27:d7:da:d3:ba:5c:84:53:8b:34:fa:
         22:44:d6:74:7f:39:55:a4:8f:c0:cb:9b:22:46:a2:65:3f:38:
         96:c4:84:4f:b1:4e:0f:b9:ae:c1:6c:a5:57:35:d0:c4:52:1c:
         17:c4:41:24:a7:aa:47:4b:5b:8f:fd:36:0f:f5:47:1e:65:90:
         e3:3e:bc:00:2c:24:46:fa:1b:49:ea:27:83:a7:55:ca:cb:85:
         5c:2a:f8:52:74:ce:08:97:d7:9c:f2:b8:30:82:65:84:49:fc:
         9a:e5:23:2a:1f:67:b9:ac:82:44:f4:f5:4b:da:1c:a7:9d:33:
         19:8a:72:89:75:6c:f7:95:dc:cf:ac:90:23:9f:96:42:4e:d0:
         6c:65:8c:c2:01:91:22:f3:7b:6c:25:62:ad:c6:6e:c8:58:98:
         dd:e3:31:d3:f7:c8:9a:ab:ed:95:50:32:a7:3d:ea:00:4f:9e:
         1c:f3:64:38:c1:96:ec:5e:07:0b:34:ed:dc:d8:3c:1a:5e:a8:
         c0:9c:16:91:d3:77:f6:dc:0f:d6:7a:e2:85:9c:b3:df:21:ee:
         6a:91:f5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:20:49 2025 by rpki-client