Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft
File:                     V7aHJ0szGe2QcblmFY-birZK5vc.mft (raw, json)
Hash identifier:          vwsy3pHKcHdAR6h1e77ZGvMmSh0KXeuJ0/1rzrc7QNs=
Subject key identifier:   4A:15:A4:59:D9:40:FA:7A:4D:A7:09:94:4A:04:C8:C2:9F:0C:B4:8A
Authority key identifier: 57:B6:87:27:4B:33:19:ED:90:71:B9:66:15:8F:9B:8A:B6:4A:E6:F7
Certificate issuer:       /CN=A91B527E/serialNumber=57B687274B3319ED9071B966158F9B8AB64AE6F7
Certificate serial:       27C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft
Manifest number:          27B8
Signing time:             Fri 22 Aug 2025 15:40:46 +0000
Manifest this update:     Fri 22 Aug 2025 15:40:46 +0000
Manifest next update:     Fri 29 Aug 2025 15:40:46 +0000
Files and hashes:         1: V7aHJ0szGe2QcblmFY-birZK5vc.crl (hash: AOvYxCn0qoMnvoTSepll6Ug0HJzy9/ijcFwqlWu51MY=)
                          2: C22BA9D094E411EA9076F758C4F9AE02.roa (hash: 0PS4/rj5Rh5J9qWit0urM3xL4w3DPtmcsnvl2FziSAo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.crl
                          rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 15:40:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10176 (0x27c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B527E, serialNumber=57B687274B3319ED9071B966158F9B8AB64AE6F7
        Validity
            Not Before: Aug 22 15:40:46 2025 GMT
            Not After : Aug 29 15:40:46 2025 GMT
        Subject: CN=68a88f7e-ed14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3d:ca:e9:0e:a4:91:95:76:d1:df:b5:88:e2:
                    68:c5:29:94:6b:56:7d:2f:70:1d:19:02:1e:a7:d6:
                    fd:f8:5b:14:54:8f:51:b4:6d:4e:a9:b8:85:02:6e:
                    29:22:e7:9b:7a:4c:b6:ce:a6:df:59:43:d1:96:1d:
                    da:bd:6d:1e:f3:35:1a:58:91:91:ca:e2:09:16:be:
                    84:71:a0:d2:6f:eb:21:06:40:2e:26:1b:db:09:29:
                    1d:9d:b9:9c:41:c6:4d:70:d8:42:3e:41:06:99:67:
                    8a:3a:7e:e9:ed:1d:39:a3:36:c7:48:f6:ea:3b:72:
                    e0:9e:45:52:4c:b8:c7:78:d1:7d:79:fb:b2:e2:4a:
                    b5:e3:01:be:d3:41:1a:7e:13:ee:8e:aa:0b:af:53:
                    4b:ed:0c:96:76:5a:bf:6e:6e:1b:1c:84:5a:d0:d3:
                    e2:25:aa:5a:89:32:f7:ea:9d:0a:81:3d:10:c2:c2:
                    71:ab:e4:d1:c2:0b:01:68:a3:c9:b0:ab:cd:05:ed:
                    52:77:69:30:ba:57:c9:3a:07:ca:9c:5e:9d:f4:84:
                    ec:8b:56:1d:af:6f:5c:c8:4c:f3:02:d8:4c:1b:26:
                    d1:d6:cf:0a:2e:62:8d:37:7d:11:c3:c6:78:e4:5a:
                    a1:e2:d5:b5:72:ca:bd:13:b9:ca:57:3e:95:c4:07:
                    3d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:15:A4:59:D9:40:FA:7A:4D:A7:09:94:4A:04:C8:C2:9F:0C:B4:8A
            X509v3 Authority Key Identifier:
                keyid:57:B6:87:27:4B:33:19:ED:90:71:B9:66:15:8F:9B:8A:B6:4A:E6:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:86:34:64:4d:8d:bc:61:e2:f3:c4:ae:3a:f3:cd:eb:5a:e3:
         3b:a8:07:48:a7:ae:5d:b5:8b:fe:4a:a3:dc:dd:e3:38:fb:31:
         1c:ed:1d:29:e5:61:7a:52:6e:19:f6:e0:eb:1f:20:99:4a:f2:
         83:dc:4a:d6:af:d5:da:99:1a:d1:8d:ba:b4:b5:e3:06:34:f3:
         71:3b:4b:69:1f:21:5a:cc:0d:d8:e7:9c:15:c1:63:e1:85:db:
         d4:48:4c:d1:c0:9a:d8:d9:f4:09:60:bd:04:c0:b7:5a:a2:25:
         8c:34:45:b8:27:1f:67:f2:1f:75:1e:b2:f9:21:4b:74:ed:1b:
         b2:b5:74:3c:0d:43:64:45:80:4f:e2:f8:cc:88:d1:2a:e2:68:
         38:3d:5b:31:46:2e:66:53:08:57:67:b1:a2:a0:f2:4c:5c:f6:
         5a:27:e0:f8:9b:ec:df:7a:9d:b2:0a:c2:ad:fc:2b:a4:eb:8c:
         f4:b3:d2:84:49:60:95:e0:e7:ed:7a:04:cb:43:2f:5f:68:2d:
         7e:48:13:cd:80:2e:6e:84:11:46:69:fd:ef:98:30:9e:87:92:
         45:13:cb:d3:b1:fd:22:0b:e1:e4:10:67:c3:80:80:87:fc:d5:
         73:07:22:4b:a6:2d:3d:26:7c:88:16:53:b8:af:6f:9b:bb:d9:
         c3:0f:f2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:59:05 2025 by rpki-client