Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
File:                     J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft (raw, json)
Hash identifier:          LgNtJkxE8tv2insjXy3DvEQHBUQbWje/r1N+rCLu4H8=
Subject key identifier:   3C:AD:50:51:7B:0B:04:51:C4:F3:53:6C:1B:58:71:AE:29:6F:B7:0A
Authority key identifier: 27:B2:E6:62:91:48:22:13:6B:09:62:DB:B5:BA:44:7C:25:3F:52:1B
Certificate issuer:       /CN=A91BBCAF/serialNumber=27B2E662914822136B0962DBB5BA447C253F521B
Certificate serial:       0163
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
Manifest number:          015F
Signing time:             Sat 23 Aug 2025 04:10:46 +0000
Manifest this update:     Sat 23 Aug 2025 04:10:45 +0000
Manifest next update:     Sat 30 Aug 2025 04:10:45 +0000
Files and hashes:         1: J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl (hash: YD8Pg600FJ6NovLrS5+XBB6aoRo5u40EJgSPZM+/ELQ=)
                          2: D2FA5DBE6C1E11EEBB9EAB7AC4F9AE02.roa (hash: VxCtnEbF2p63KawOX+Ec2pPAYcngxsY5VpNi8SAFc50=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl
                          rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 04:10:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBCAF, serialNumber=27B2E662914822136B0962DBB5BA447C253F521B
        Validity
            Not Before: Aug 23 04:10:45 2025 GMT
            Not After : Aug 30 04:10:45 2025 GMT
        Subject: CN=68a93f45-1e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:58:58:83:7f:3d:1f:28:b0:f2:15:dc:81:be:
                    c3:92:e7:63:f4:06:2b:4d:80:a1:16:38:e9:70:9d:
                    7e:a2:fd:9e:ba:44:e3:7a:b5:25:5a:49:ad:e6:31:
                    cd:ee:f1:1b:23:13:c2:0a:6e:e2:9d:a3:3f:ba:c8:
                    58:6b:65:42:20:d4:10:98:fd:ae:2d:eb:42:31:e6:
                    f6:f2:91:95:67:81:af:b8:b5:22:25:da:2e:54:32:
                    7d:77:e2:8a:01:01:7e:c5:31:18:94:10:3d:28:5c:
                    0f:ed:31:71:38:e2:36:bc:26:fa:50:3a:db:bf:bf:
                    df:99:63:29:05:e2:3e:df:43:03:86:c1:b1:6b:10:
                    93:99:59:a0:d6:22:43:3b:48:e4:a9:05:a8:35:00:
                    88:56:c5:32:24:a6:a4:07:5b:4c:25:7a:ca:3c:6a:
                    57:6a:6f:c1:87:d6:cc:58:2a:46:21:36:35:ca:fb:
                    76:f4:3d:4f:8c:a4:39:80:1b:64:6b:d1:9f:42:1a:
                    75:23:9d:34:94:de:e9:5c:6f:16:71:39:11:2a:c5:
                    a8:e7:10:c0:3f:7e:84:85:7b:01:34:ff:41:e1:f8:
                    2b:be:b2:2e:93:73:a0:d7:d2:04:98:3c:76:78:7f:
                    be:cd:cb:bc:bc:be:f1:3f:92:0c:4b:ce:51:b1:36:
                    85:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:AD:50:51:7B:0B:04:51:C4:F3:53:6C:1B:58:71:AE:29:6F:B7:0A
            X509v3 Authority Key Identifier:
                keyid:27:B2:E6:62:91:48:22:13:6B:09:62:DB:B5:BA:44:7C:25:3F:52:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:a1:c9:e8:63:40:f0:ed:5c:a7:78:e3:b7:4f:72:48:44:0c:
         c8:f4:6e:73:92:f8:f4:7d:de:8f:12:e1:a8:c5:3f:77:7e:56:
         ed:bd:4b:d2:7e:ee:f3:ad:25:4d:2b:d6:a6:17:21:bc:27:01:
         ed:e4:fe:30:a7:90:25:d2:69:8a:4e:25:f3:3b:26:ae:3c:1d:
         2b:c8:dc:d6:a5:56:5a:b7:a5:b3:84:db:e2:83:44:32:c7:6d:
         8c:85:44:89:91:56:64:43:8d:16:e5:7b:ad:5b:ea:e6:3e:0a:
         ab:83:73:36:81:c9:fb:8e:7c:a1:0f:01:88:d5:e2:5b:49:03:
         ad:07:0f:4b:db:17:b7:1d:42:66:83:2b:c3:a9:6e:72:d4:3d:
         e9:46:c5:89:42:76:f3:bd:c8:46:e7:f9:b7:68:5f:56:f0:a5:
         ce:39:ed:8e:f8:3d:1b:27:d9:83:e1:7e:7d:93:fb:43:60:86:
         57:5b:ec:c9:a9:35:a6:95:ac:21:3d:bb:e8:67:a4:bc:60:32:
         fb:f4:ad:9d:9d:e6:b6:b3:9d:45:1c:e5:ff:0c:b6:cb:01:02:
         3b:6c:34:b9:b3:d2:1a:be:5b:12:93:19:6c:21:b0:f7:76:49:
         9b:cd:d9:35:34:f8:fb:8c:94:00:99:54:6b:73:24:fe:a8:2a:
         d3:d2:97:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:38:11 2025 by rpki-client