Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
File:                     0q268NfVLLlNShOXizIFO833eg8.mft (raw, json)
Hash identifier:          dCvlGE46SkmQb+JyJW8IQuur3vq5IT0hhSbZOVYEbgs=
Subject key identifier:   9F:84:30:EB:8F:F5:E6:51:46:C7:9D:28:5A:7C:C3:4B:F5:C5:5D:75
Authority key identifier: D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F
Certificate issuer:       /CN=A91BE514/serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F
Certificate serial:       015B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
Manifest number:          0159
Signing time:             Sat 23 Aug 2025 04:13:41 +0000
Manifest this update:     Sat 23 Aug 2025 04:13:41 +0000
Manifest next update:     Sat 30 Aug 2025 04:13:41 +0000
Files and hashes:         1: 0q268NfVLLlNShOXizIFO833eg8.crl (hash: ZVPUJwHjbJBlgFR9PGoNtOwxqx/52/Cim1TgMTfnolE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl
                          rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 04:13:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE514, serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F
        Validity
            Not Before: Aug 23 04:13:41 2025 GMT
            Not After : Aug 30 04:13:41 2025 GMT
        Subject: CN=68a93ff5-2005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a6:ad:a5:8e:e2:64:d6:54:5f:00:19:77:26:
                    bd:fe:75:52:db:0c:98:e3:84:5d:b9:56:81:93:36:
                    3a:36:25:cd:e5:f2:ec:c7:4f:a2:2c:a9:3b:5b:b9:
                    3a:45:c5:82:19:31:e2:38:dd:31:a2:26:37:a6:50:
                    38:1a:8f:a1:89:de:34:ba:4c:ca:e3:70:5f:39:a7:
                    c1:a3:29:80:c8:1e:70:e5:fe:1a:1d:e4:72:ad:6f:
                    49:f0:64:07:1b:d6:b4:e7:a9:05:58:25:2b:14:f6:
                    29:6b:2c:32:16:a0:94:89:4a:46:5e:4a:c7:7d:84:
                    ec:52:ed:c0:8e:85:fc:7c:9d:86:00:f5:ee:59:08:
                    0c:6b:4a:e0:d4:02:5d:41:66:d1:c7:6e:58:c9:91:
                    ce:05:b1:70:e6:24:65:96:dc:fa:29:08:e7:5b:3c:
                    93:39:b0:40:c7:2f:e0:5c:0f:7e:b6:85:dd:d3:c5:
                    0b:2e:ca:74:8a:ad:eb:4c:1e:de:81:55:9f:67:14:
                    9d:6f:13:e2:61:7e:55:ae:ef:3b:40:4c:19:75:9f:
                    da:59:fd:64:c6:36:69:46:ec:4e:61:f6:11:9b:99:
                    6e:bf:eb:0c:20:2f:f2:3a:15:35:e6:98:04:a1:fd:
                    bf:31:7e:92:47:6b:67:7f:55:7f:c5:35:d8:bc:a5:
                    8f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:84:30:EB:8F:F5:E6:51:46:C7:9D:28:5A:7C:C3:4B:F5:C5:5D:75
            X509v3 Authority Key Identifier:
                keyid:D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:a5:a7:db:6d:c2:a9:f6:62:e5:7c:e6:33:a4:1d:05:a7:24:
         d5:67:61:85:21:5c:6a:dd:58:28:bb:3c:a5:ec:45:0d:d9:d4:
         5c:78:bf:88:3c:a7:28:87:ab:13:a7:b0:eb:df:80:c7:87:b7:
         80:22:1c:d8:b4:cb:2f:98:68:f5:4c:aa:b5:d6:ee:bd:7b:55:
         8a:4e:c1:0d:69:48:fd:1e:67:8d:c1:aa:b5:10:64:86:22:4c:
         4c:72:65:4a:10:6a:38:3f:fc:5e:72:75:13:f1:e9:3d:38:de:
         cf:7a:51:b9:cd:0c:e5:8e:97:0c:77:8c:c8:82:0d:6c:37:8a:
         16:f1:b5:71:2b:f5:4a:b9:7b:d6:c8:0b:56:78:2a:fa:ba:1f:
         b9:70:b7:71:f6:2a:19:a8:00:fc:38:32:32:b5:c0:3f:8b:c1:
         1b:c5:d7:55:92:4d:d3:45:a1:32:4b:a3:d7:64:f8:90:98:49:
         b1:dc:f8:86:10:0d:6e:64:dc:a6:16:d1:58:19:98:ae:d3:90:
         b0:b8:4d:bd:a6:b1:4a:ef:e8:46:55:bd:3f:a3:3b:15:10:e5:
         79:57:bc:79:aa:4c:02:7b:d7:22:06:ef:4b:42:8a:d4:01:4b:
         60:40:7b:3a:14:4b:a5:5a:b8:97:de:74:fb:70:3c:be:68:c6:
         f0:ad:12:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:30:21 2025 by rpki-client