Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
File:                     dHyGw8wUp3lzgFMVQIzcoQohR7I.mft (raw, json)
Hash identifier:          7S/uBm4e7ayDZ+Ry7vuCbmj7O5RqkTO9rG66zN9ky4E=
Subject key identifier:   9B:7C:B2:40:08:58:C1:C5:9C:50:22:96:93:3D:CF:86:B8:8F:79:53
Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
Certificate issuer:       /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Certificate serial:       079B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
Manifest number:          077F
Signing time:             Fri 22 Aug 2025 21:38:50 +0000
Manifest this update:     Fri 22 Aug 2025 21:38:49 +0000
Manifest next update:     Fri 29 Aug 2025 21:38:49 +0000
Files and hashes:         1: dHyGw8wUp3lzgFMVQIzcoQohR7I.crl (hash: LmeQXNyjDKJ4+P9fSAYlrdMhGIdAONIr8Ya5/v2JOiA=)
                          2: 827329BE232B11EBB2348B23C4F9AE02.roa (hash: JZswEN+XecxArpSSM4RVMDRfDgGMw001dDeS9M+57zo=)
                          3: 8126464A232B11EBB2348B23C4F9AE02.roa (hash: oEPtlYq/nXMulTOfDIA15K7NQ6WPK/Aw89/ToBV4eiI=)
                          4: 81D72348232B11EBB2348B23C4F9AE02.roa (hash: a7MdMxFeYrNOuayo2yExYYUNllObfBGwl1IXCgsh4ko=)
                          5: 8320FBE8232B11EBB2348B23C4F9AE02.roa (hash: UcnwxScsysCMY48lVfpQF1IzUJ5+Szuvgh1AHnaByPI=)
                          6: FAA525207A4411EB804B7430C4F9AE02.roa (hash: qRd5pNy25aeVVisd65wzJ8hT+cyr+S2QBDIpDf9Jz7M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
                          rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1947 (0x79b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
        Validity
            Not Before: Aug 22 21:38:49 2025 GMT
            Not After : Aug 29 21:38:49 2025 GMT
        Subject: CN=68a8e36a-871d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ab:9c:07:ee:5b:96:16:d5:e0:d2:77:9c:69:
                    ae:7a:9a:dd:b8:ba:a6:3e:ac:b4:05:dd:28:89:c5:
                    60:d4:6d:5f:96:53:79:0e:b9:fc:a3:8b:a3:da:a0:
                    26:e4:ff:7b:96:1d:3c:d6:a0:59:cd:b4:cc:26:b9:
                    a0:49:21:bd:bc:a7:0c:23:27:c2:5e:d2:cc:48:1b:
                    2d:02:28:dd:39:91:e9:1d:ca:87:36:4b:9a:a6:0f:
                    9f:01:55:9a:df:dd:db:d3:63:23:b1:7e:3c:17:83:
                    74:02:55:43:40:0e:d9:a3:55:a2:25:f7:a0:d4:01:
                    10:e8:a9:8e:6d:e9:bf:f8:09:9e:bd:87:04:4c:0c:
                    92:c0:e1:56:fd:6e:47:16:a7:23:db:34:09:a7:ee:
                    6b:c9:c9:be:79:13:6c:2a:59:0b:a4:1e:42:52:48:
                    85:cf:76:eb:8b:d0:9f:4d:53:0d:ae:2d:26:a8:51:
                    05:45:dc:af:2d:e1:c8:56:49:7a:19:fa:82:da:87:
                    af:82:63:59:76:c7:e8:46:bf:c6:26:14:5f:55:41:
                    ed:d0:49:b5:6c:6f:a9:cb:f5:4a:63:61:5a:a2:8c:
                    59:fd:ba:90:46:f2:07:cc:09:2d:36:8e:7b:a4:45:
                    40:fd:48:f3:dd:87:c0:86:9e:65:37:bb:13:b7:47:
                    af:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7C:B2:40:08:58:C1:C5:9C:50:22:96:93:3D:CF:86:B8:8F:79:53
            X509v3 Authority Key Identifier:
                keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:bc:4f:5f:a0:fa:c5:f4:ee:8a:9b:24:e5:ba:61:df:88:5b:
         75:be:8d:3c:ec:27:35:2e:63:b7:4f:dc:e3:79:f0:1d:20:41:
         f5:28:17:2f:50:fd:62:e3:a5:22:81:ee:83:f7:5d:f7:78:7e:
         b2:99:38:7b:d7:2b:07:77:0e:65:23:06:db:91:b7:bf:38:87:
         0e:e2:49:37:b4:ab:c3:29:63:99:5a:37:9a:f2:36:0d:83:f6:
         f0:cd:94:86:4d:bc:6f:9c:c9:62:3d:ce:a4:cf:97:71:b1:ab:
         d4:5a:1c:89:f5:d2:4a:f0:53:ed:c5:1d:d1:3e:17:3d:f3:6c:
         c5:5e:70:e4:53:63:c9:30:dc:e6:0e:82:85:76:86:3c:ca:8e:
         d4:c3:0f:52:ad:eb:e7:d5:d7:13:65:d7:bf:fe:b7:3b:59:de:
         3f:7f:f9:fd:4f:3e:c4:d4:42:34:3e:bc:ca:34:d6:9a:2c:f2:
         ec:59:04:eb:71:84:b6:11:65:c8:73:d2:e2:d0:b5:f5:8c:09:
         95:9f:68:f6:4d:39:98:3f:0d:b9:51:97:f8:57:55:d4:7a:4d:
         5d:46:03:52:dd:cc:ae:21:ae:a2:f4:80:32:3c:03:7c:e4:04:
         2a:4c:75:57:22:06:a6:1d:37:45:fe:79:5a:52:57:45:4d:2a:
         da:45:57:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:29:27 2025 by rpki-client