Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
File:                     E1XVGH0uY9fm1JB42OcfoFHEVuM.mft (raw, json)
Hash identifier:          TLsiGfV/y8RpVTyu/jYWkKofFa6OSm61CpoQjRRrQRU=
Subject key identifier:   EF:D8:EC:D4:12:3E:AB:8D:6D:C7:E4:4A:A3:4A:71:E3:0E:16:01:36
Authority key identifier: 13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3
Certificate issuer:       /CN=A91B3CB5/serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3
Certificate serial:       0C98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
Manifest number:          0C82
Signing time:             Fri 22 Aug 2025 18:29:35 +0000
Manifest this update:     Fri 22 Aug 2025 18:29:35 +0000
Manifest next update:     Fri 29 Aug 2025 18:29:35 +0000
Files and hashes:         1: E1XVGH0uY9fm1JB42OcfoFHEVuM.crl (hash: 4y//U5rDz79N/kfT/yCKW4MYkuYBc4cL/moklSIrTTI=)
                          2: E26173CE050611EAA0470B49C4F9AE02.roa (hash: Xn8UFabkBh7C11XTNFuqVWX0DQ3YtKdO4oP8X6zIrEU=)
                          3: F2F8C8B2AAE311EFB889317FC4F9AE02.roa (hash: wQzyXgNB8e39dNmdtHKa5IWJxgKdAoXLBNvYY5X5/EU=)
                          4: 257E3B94E37B11EA84A20810C4F9AE02.roa (hash: ZW4D52b/QqoUPTvkPyb0ztzXgPBkyyW+b1SqWMCRNR4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl
                          rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 18:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3224 (0xc98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3CB5, serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3
        Validity
            Not Before: Aug 22 18:29:35 2025 GMT
            Not After : Aug 29 18:29:35 2025 GMT
        Subject: CN=68a8b70f-aba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c3:23:2a:47:af:e3:53:42:53:46:97:02:6f:
                    77:d2:9a:a6:02:87:3d:fb:38:3e:02:2c:b0:8e:30:
                    8f:af:af:23:30:0a:18:85:3a:94:ec:e2:88:20:06:
                    3a:69:23:32:23:be:06:d1:e6:36:47:5b:b5:2e:02:
                    64:17:78:de:21:3d:79:ea:39:d8:0f:73:aa:13:3c:
                    b9:67:2e:f2:55:39:bf:96:f7:5c:8a:0d:b7:ef:f6:
                    b8:86:e8:d2:c2:f6:ad:6d:2b:31:3d:43:db:1d:2b:
                    f5:23:8d:b0:72:2e:0c:b4:46:18:cf:66:49:35:d5:
                    c2:0b:8e:64:11:7d:1c:fe:83:a3:5d:88:57:88:aa:
                    12:a9:14:9b:75:ef:49:78:f7:fe:9a:2a:bc:4a:d9:
                    34:cf:0c:2d:ea:64:5a:c0:2a:53:65:f4:c9:d3:6e:
                    bb:02:21:c1:ee:47:ff:6c:0b:e4:f3:b3:25:ed:d7:
                    81:31:a9:7e:06:8d:4f:4a:a2:ee:99:a0:c0:1d:c8:
                    07:54:18:ac:18:bc:2b:f3:1b:75:3d:d4:8e:f6:98:
                    5b:74:79:c8:b2:ef:0a:0c:32:18:94:ad:b3:14:3f:
                    e6:c2:31:21:63:f0:2e:e2:c2:57:dd:36:11:c1:c9:
                    33:66:ac:05:62:a1:9b:be:27:10:37:94:76:0d:1a:
                    2c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D8:EC:D4:12:3E:AB:8D:6D:C7:E4:4A:A3:4A:71:E3:0E:16:01:36
            X509v3 Authority Key Identifier:
                keyid:13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:fa:ae:ef:e3:80:57:1a:31:9b:08:0e:7f:da:de:4a:a0:fc:
         62:a8:a4:1f:37:b0:f9:30:d9:45:6a:c1:e9:3b:14:65:d4:42:
         44:8f:a3:f5:eb:3d:b3:95:f4:6b:95:23:0d:cc:12:f8:3e:45:
         54:b8:23:74:64:6b:ca:67:a0:ef:11:1d:dc:f1:c0:08:eb:cd:
         d8:44:ef:8b:2b:1d:d3:6a:ac:63:dc:c2:33:3d:a0:93:be:37:
         7a:28:8d:0e:89:0c:74:2a:c9:60:38:b7:d6:0f:0e:81:24:f9:
         39:08:78:86:99:47:e4:fc:9f:9d:9d:0c:93:53:1f:09:74:3e:
         d9:1b:39:2e:b5:22:68:6c:22:60:88:98:c4:aa:dd:b9:97:f9:
         dd:e1:53:e3:df:4a:f4:e8:d3:e4:23:f9:fe:5f:e1:b1:1a:dd:
         84:6e:58:53:0d:a8:2f:3a:43:8a:04:1a:ed:23:c3:f5:50:19:
         6f:a8:48:18:f9:07:0d:b2:b6:d0:1a:be:62:7d:6c:d1:b5:57:
         ab:13:ee:4d:d1:38:79:e0:77:41:f6:93:e8:ff:8c:67:fe:89:
         99:f4:92:3f:63:6e:9b:bc:27:53:eb:1f:83:28:71:07:c9:23:
         c4:79:fb:97:ce:53:70:d2:37:62:19:de:cf:3e:5d:76:ec:5a:
         91:13:0d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:40:30 2025 by rpki-client