Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft
File:                     _U5c-75RNAFgOW1ZbhsySM_IHMQ.mft (raw, json)
Hash identifier:          sWX/WtVAAaPyzfWplCF7NBMUMFF8x82dUiS9nkF8v/Y=
Subject key identifier:   AD:19:7D:58:94:6B:E7:7B:62:D7:84:C5:2A:53:89:87:BC:75:04:C8
Authority key identifier: FD:4E:5C:FB:BE:51:34:01:60:39:6D:59:6E:1B:32:48:CF:C8:1C:C4
Certificate issuer:       /CN=A91B5CEA/serialNumber=FD4E5CFBBE51340160396D596E1B3248CFC81CC4
Certificate serial:       0216
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft
Manifest number:          0210
Signing time:             Sat 23 Aug 2025 02:22:47 +0000
Manifest this update:     Sat 23 Aug 2025 02:22:47 +0000
Manifest next update:     Sat 30 Aug 2025 02:22:47 +0000
Files and hashes:         1: _U5c-75RNAFgOW1ZbhsySM_IHMQ.crl (hash: jxOuy6lvm3GVK/DuXt/4oy2BkHJsI7jjcUeDDs7evgI=)
                          2: B42198DC64F211ED9AEC046FC4F9AE02.roa (hash: 9taiAk5oqRem+++FlFWs0bgv4cUdlRkoPSLMugraGUw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 02:22:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534 (0x216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5CEA, serialNumber=FD4E5CFBBE51340160396D596E1B3248CFC81CC4
        Validity
            Not Before: Aug 23 02:22:47 2025 GMT
            Not After : Aug 30 02:22:47 2025 GMT
        Subject: CN=68a925f7-34bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:87:20:64:92:5c:84:54:bc:0a:bb:ab:01:4d:
                    5f:b1:7f:32:4b:0e:b6:74:1b:81:69:2f:09:31:8a:
                    48:fd:aa:a3:05:0d:a6:f4:d1:d3:a5:12:85:b7:cd:
                    02:ae:de:f8:46:30:65:fd:7a:0f:16:52:43:1c:e1:
                    8e:af:7a:a9:26:03:fe:b6:04:3e:dd:cf:f2:e7:ce:
                    de:00:8c:00:c6:86:b4:43:1e:f4:73:6a:7d:3d:43:
                    87:dc:84:40:38:8b:e3:fb:2c:c3:74:dd:71:9b:c7:
                    41:4c:79:ac:3c:30:89:bd:e7:e7:40:cb:ca:bc:d9:
                    d5:0e:62:da:7f:8a:28:0d:f4:c2:0b:49:fc:e9:04:
                    57:27:b4:a5:0c:49:d1:f2:fa:5b:4f:20:27:6b:31:
                    df:09:93:af:3c:d2:3d:c3:02:bf:fd:64:7b:3a:5d:
                    3d:c0:e1:fb:93:ad:c5:56:39:78:d3:d2:ed:23:e9:
                    b4:f0:c8:22:70:e9:4c:96:ed:51:38:f2:8f:e5:99:
                    9d:d5:1a:25:3b:79:43:e3:10:48:78:d2:cc:72:10:
                    7e:11:27:df:bf:c6:d7:9c:a0:09:a8:fd:3c:cc:13:
                    93:d7:f2:29:77:ee:9d:40:b8:03:71:59:c4:f9:cc:
                    6f:aa:12:a6:72:f6:fb:0a:89:84:9c:82:9a:ca:e8:
                    ab:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:19:7D:58:94:6B:E7:7B:62:D7:84:C5:2A:53:89:87:BC:75:04:C8
            X509v3 Authority Key Identifier:
                keyid:FD:4E:5C:FB:BE:51:34:01:60:39:6D:59:6E:1B:32:48:CF:C8:1C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:33:23:47:71:5b:9d:59:f5:8d:29:28:69:3f:8e:0b:9c:30:
         81:de:7c:fb:27:a8:f2:4e:1e:ca:c1:0f:d3:7e:71:e9:cb:d7:
         02:28:c8:3c:c4:5e:3e:14:08:e4:96:e2:7d:c5:d9:ee:d1:b6:
         71:1a:68:bd:df:86:a3:7b:bd:e2:96:36:65:1f:e9:46:b2:45:
         cc:ac:87:c8:93:06:6a:fc:be:eb:96:3d:06:82:29:a2:8a:78:
         45:cd:7c:90:fb:16:1b:ce:e6:14:f4:3f:08:85:1f:fd:38:03:
         06:5a:37:f8:59:38:75:42:12:b6:02:ca:24:a0:d0:7c:2f:89:
         de:9d:7e:16:c8:70:cd:e9:f5:96:70:de:3f:65:ec:d9:f9:4d:
         04:58:db:e1:a2:37:17:9f:c2:e4:b4:47:53:8f:a9:11:c4:89:
         69:44:32:67:a1:ec:0c:92:55:8a:64:31:ca:c0:2e:0c:a5:90:
         57:03:48:bf:07:c4:ec:46:13:03:e0:34:f3:9e:b3:5a:02:75:
         39:92:41:86:42:4a:b9:a2:10:0f:8a:33:d4:fd:dd:f0:b2:bd:
         9e:13:6f:34:d2:9a:16:a4:06:35:ce:92:83:82:9c:a3:24:65:
         f3:13:dd:d5:4b:d6:33:27:f7:81:09:6b:5e:d7:cd:34:a3:96:
         36:a1:a3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:57:07 2025 by rpki-client