Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
File:                     4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json)
Hash identifier:          SByx8xgh0cj0Ag5kxSamog8HcofTG8p7+MnNBTtEoTE=
Subject key identifier:   79:68:84:02:FC:11:66:83:C6:E5:DD:C9:48:B1:21:9F:82:DC:56:81
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Certificate issuer:       /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial:       080A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
Manifest number:          07C5
Signing time:             Wed 02 Jul 2025 21:39:02 +0000
Manifest this update:     Wed 02 Jul 2025 21:39:01 +0000
Manifest next update:     Wed 09 Jul 2025 21:39:01 +0000
Files and hashes:         1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: fFUJpDlFBSJD1pbFmQO3648UhXDt4WW+YcifGyDsmjI=)
                          2: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: JGXFZsvdAlPkzVwMIVDlhUnyxUdEjpH4xc3F+m/pQB0=)
                          3: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: yu9kaJ9SbaIghj5mweHVls+umbPvibjZ8k0y4rtHgrI=)
                          4: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: KYrgpq+j2JdiosQSHACv2bRMY5BVzOvfLnyNf5narws=)
                          5: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: Y/iBnK8ZipjxkATaALxABZ9CTEeJIdjjxY8Yxx9n9DM=)
                          6: 0989F3EE120911EB83107638C4F9AE02.roa (hash: ZN83zETo/fGZjHplsgi4LIPj/1+Cv9tK+RMfhDQAvcM=)
                          7: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: MIyFaAMcoVX+JijHyNBp9lzEprzyQwwRu4V9wwVXios=)
                          8: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: CoOgUqT0FD59n+BELVSjes/s0qoXYfrPfM4+T31Fkoo=)
                          9: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: Ej4Olhx/k6YWemdl2TV8Frzo1JOOuwGbcCqfJq8lBxg=)
                          10: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: UjevdaGjYYh/fLHbv94Vi82GRHni+SflrmcRbP8Ltsg=)
                          11: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: BJy4+HNv8kQ6Lc2CH7nff6rHz79DtOyFMzKFxBbxH6Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
                          rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 21:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2058 (0x80a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
        Validity
            Not Before: Jul  2 21:39:01 2025 GMT
            Not After : Jul  9 21:39:01 2025 GMT
        Subject: CN=6865a6f5-7bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:b0:e4:3a:e4:37:91:8b:e3:4f:98:77:ba:
                    1a:25:9b:54:dc:54:8f:d0:55:c5:aa:8c:c0:94:a2:
                    20:1b:79:9e:73:86:2e:0f:20:5d:1a:91:f4:64:60:
                    eb:f8:9e:10:73:00:14:26:12:a0:71:15:63:04:fe:
                    1a:c2:88:83:b9:d8:24:7a:4e:a8:4d:ac:63:1e:26:
                    aa:58:5e:7b:6d:9b:29:34:0a:9c:6e:bb:d3:6e:d4:
                    bf:50:a1:28:1f:47:dd:73:ed:0a:66:2e:62:ea:54:
                    4a:65:14:d6:96:d5:7b:a7:06:ba:10:d8:5c:cf:12:
                    24:bd:34:11:69:f3:06:64:b0:a5:f4:83:a1:1e:a7:
                    83:c1:33:60:ea:bc:59:93:14:eb:3d:08:62:ab:08:
                    ef:ca:34:70:6e:f9:06:69:b5:dc:b4:23:0e:c9:34:
                    f4:f2:b5:de:54:2c:0a:85:5b:c6:9c:6e:1a:5f:8b:
                    ff:8e:c2:98:fe:72:e9:d5:16:5c:ed:ae:28:bc:65:
                    02:43:4f:28:61:fb:29:bf:6f:d1:44:d2:af:a8:a0:
                    b9:e1:03:e7:5c:5f:be:80:a2:3e:b1:98:27:54:09:
                    56:aa:3e:f4:63:36:a1:19:76:58:6c:85:55:b2:37:
                    5c:20:66:02:db:ec:0c:25:d3:15:72:50:1b:e3:90:
                    46:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:68:84:02:FC:11:66:83:C6:E5:DD:C9:48:B1:21:9F:82:DC:56:81
            X509v3 Authority Key Identifier:
                keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:df:f0:77:c8:77:be:77:8c:30:2f:72:4e:c8:23:e8:6a:08:
         c7:c9:3d:57:7b:0a:6a:a1:0b:70:7a:72:45:89:06:38:4e:8e:
         a5:7e:98:78:14:cc:3d:0a:02:32:6a:3b:9f:50:8a:f7:d0:4d:
         e9:b3:ab:ce:29:bc:ab:d8:b9:ce:69:2e:3a:23:ec:b9:45:a3:
         7a:64:65:10:a7:46:ae:e8:a3:b4:b3:b9:a3:cd:9d:16:71:b9:
         ca:95:9d:63:73:b5:c1:a2:90:4e:45:84:9d:ad:7a:20:fa:96:
         54:ac:6a:50:b5:67:98:80:23:96:18:2f:17:0a:b7:00:a5:76:
         cd:98:37:3d:fb:cf:c6:fc:b5:a8:a0:9c:42:ed:b9:f0:53:26:
         ff:15:19:ae:e7:e4:92:5a:01:e7:1f:fd:52:7e:cb:79:4c:10:
         27:fd:98:42:bc:7c:6a:0d:5e:24:21:76:88:9c:a8:a8:19:fd:
         32:6d:5e:b4:93:76:b9:23:c7:3e:de:02:f3:24:6b:d4:30:14:
         b3:22:c4:9d:8b:82:db:f5:09:b7:dd:cb:48:7f:c4:87:bf:96:
         8d:e2:53:1f:b6:0c:14:cd:50:5a:94:79:8e:51:2d:f4:d0:61:
         23:02:56:3b:ad:95:06:2c:8e:db:20:32:07:e9:8a:aa:92:41:
         9d:81:d7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:08:10 2025 by rpki-client