Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
File:                     t6pTc4MhTWSOYzvMQg071oYWeP0.mft (raw, json)
Hash identifier:          XlXnYKG8og5VcUzJTqcsc6gHYEconGoj3q8X6ZmeGco=
Subject key identifier:   31:F3:91:10:DE:61:B4:FC:F2:E2:9C:65:BB:C8:9C:45:24:F8:10:C6
Authority key identifier: B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD
Certificate issuer:       /CN=A91C3083/serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
Certificate serial:       1B50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
Manifest number:          1B06
Signing time:             Fri 22 Aug 2025 16:23:47 +0000
Manifest this update:     Fri 22 Aug 2025 16:23:47 +0000
Manifest next update:     Fri 29 Aug 2025 16:23:47 +0000
Files and hashes:         1: t6pTc4MhTWSOYzvMQg071oYWeP0.crl (hash: I6tDreM7r3eyNkJsiMZl4NIslHuK6YWOI1BJZR2HIMY=)
                          2: BF6CF7EE1D1811E89AF8344EC4F9AE02.roa (hash: 2FdeFk6BkACA2x84QQhSx1d4f7hfVmpEG3T9lZ0KKs8=)
                          3: 2504266C1D1A11E8BDAD4F54C4F9AE02.roa (hash: Y4AICBsuBLbr1eccCbbUOeleXrW+auIswSTrvYqJTo0=)
                          4: B35788BC2E6111E7B9FA6971C4F9AE02.roa (hash: hXTTzP3kFcpIZ/DM7zay0NC5KhlwF/RDBBTbxArfKKA=)
                          5: AF7700B2B52A11EAB9426C7DC4F9AE02.roa (hash: EBfpSajs+p8kmDGMcsROIkdAjLRuCAc9bxp8aA0ImwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl
                          rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 16:23:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6992 (0x1b50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3083, serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
        Validity
            Not Before: Aug 22 16:23:47 2025 GMT
            Not After : Aug 29 16:23:47 2025 GMT
        Subject: CN=68a89993-6651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2b:9f:63:ac:76:0b:a3:ca:99:05:ef:34:fb:
                    3f:e5:44:09:90:9d:e8:e1:5f:ac:0f:8d:27:18:d3:
                    46:b7:da:28:9c:c6:fa:65:dd:7c:3b:85:4c:bc:da:
                    2a:2e:6e:12:fe:4c:f8:b0:cd:f1:bc:a2:8b:76:13:
                    e6:a9:0c:27:55:e9:41:df:57:31:08:47:1d:26:c5:
                    e4:48:d1:2b:96:37:33:88:7d:27:db:01:42:da:e6:
                    5c:eb:b8:23:80:e1:88:ee:4d:f3:74:d4:61:30:34:
                    be:18:fd:b1:95:0d:f9:d1:41:4b:e9:11:14:67:1d:
                    16:79:d5:dc:0f:78:31:9a:80:b2:4a:a4:5f:dc:ad:
                    1a:76:10:5b:fb:2b:f9:6d:0d:87:99:83:29:ef:28:
                    d9:1f:c8:00:13:e1:fe:7a:6f:29:89:a7:14:7a:a9:
                    5f:cd:71:b8:00:2c:0f:5a:11:4d:b9:b3:77:5d:de:
                    30:6d:b1:62:f8:73:93:1b:fa:ac:39:c7:00:96:b5:
                    cb:42:86:ec:6c:8d:1a:0f:f8:1f:51:e0:a5:03:aa:
                    cd:68:f8:62:c9:b0:89:f9:25:37:b7:8c:b0:df:3a:
                    2d:8a:df:55:28:2d:84:b1:5b:5a:c7:f6:8a:fd:56:
                    eb:f3:51:9c:ba:e3:53:96:34:60:b8:7d:95:de:52:
                    ad:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F3:91:10:DE:61:B4:FC:F2:E2:9C:65:BB:C8:9C:45:24:F8:10:C6
            X509v3 Authority Key Identifier:
                keyid:B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:cf:a0:5d:75:1e:13:ed:e2:88:f6:34:b5:e4:b7:e0:c1:3d:
         23:ee:48:50:1f:2a:95:d6:a9:89:3e:68:84:34:ce:78:ac:0a:
         f3:79:e5:2f:b3:87:28:34:2e:d6:58:7b:bb:97:92:3e:b7:f4:
         5c:4a:83:94:1b:92:0c:f1:7d:6e:60:bc:71:2e:2e:48:15:33:
         87:9c:be:a3:95:4a:83:ea:37:5b:47:c7:b5:bb:bf:92:b3:f1:
         1e:bf:4a:81:b0:99:f9:79:26:a6:e2:05:3a:d4:73:13:ce:52:
         d9:2c:45:84:f9:f9:8e:be:f0:b7:3a:ea:af:49:a5:13:67:8a:
         13:39:0e:26:2c:1e:e8:91:f7:bf:ad:e5:f0:a7:0d:1e:d0:9e:
         71:ef:14:e4:11:e7:66:d5:b5:be:b8:be:58:dd:60:66:88:d6:
         89:37:cf:ba:59:dd:16:ef:45:37:be:eb:97:de:8c:13:ea:a6:
         c0:82:e7:26:ab:c4:39:30:12:7e:9e:cb:af:61:0c:8c:17:c0:
         d5:42:19:38:49:4f:60:f2:a7:19:93:dc:d1:07:49:8a:2f:d3:
         0e:6f:b6:35:50:ac:2b:8e:c3:76:c4:79:38:f5:ab:58:88:96:
         86:90:fe:0e:72:a1:be:a5:77:de:57:5d:88:d9:7e:94:39:0d:
         38:65:95:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:16:59 2025 by rpki-client