Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
File:                     kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft (raw, json)
Hash identifier:          a63TBaMmfQzBuA2Gvmneu/8MslcYuK6anwLWDIVou+E=
Subject key identifier:   00:EC:6D:04:A1:55:1E:79:3A:13:A0:AB:47:42:DC:38:4A:7E:7F:13
Authority key identifier: 90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5
Certificate issuer:       /CN=A91C7169/serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5
Certificate serial:       18AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
Manifest number:          187B
Signing time:             Fri 22 Aug 2025 16:36:22 +0000
Manifest this update:     Fri 22 Aug 2025 16:36:22 +0000
Manifest next update:     Fri 29 Aug 2025 16:36:22 +0000
Files and hashes:         1: kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl (hash: K2cAyZ8JpeVaTH1e48fPHzGGpgVeMlor9Zdtnc8ZkTI=)
                          2: 4EE90B48FFC211EC84726555C4F9AE02.roa (hash: 0Hk/JTzfSmJcP+g4AF1rCd/nSi8tK+tRLevIlcCpxuc=)
                          3: 8EF27886A20C11EDB188BD36C4F9AE02.roa (hash: RTd1gy6ZyYYTKEcSbAQaQ+DXLhKHMG+bXISIBRDublA=)
                          4: C6EB748CDE7911EDB5D88539C4F9AE02.roa (hash: fqb531+0yEI8UHFqrZYc/bXnwHc5QFyzq+zP+SK3xx8=)
                          5: 7B9B345895F711EBB7B18033C4F9AE02.roa (hash: CNF2bQbvx54fbqlbE6d9eIkZgGR9D+Dhe0VNtxI5HFs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl
                          rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 16:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6317 (0x18ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7169, serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5
        Validity
            Not Before: Aug 22 16:36:22 2025 GMT
            Not After : Aug 29 16:36:22 2025 GMT
        Subject: CN=68a89c86-e8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:67:02:83:c1:f5:8f:04:3b:91:c2:9c:66:ee:
                    6e:0c:9c:fd:7e:0c:d9:c9:97:f3:1b:83:ea:25:7f:
                    db:aa:a6:62:ca:4f:5d:99:56:41:95:a0:9a:46:cc:
                    80:3d:b7:70:37:66:3c:3f:a0:7e:bf:27:38:54:8e:
                    5e:33:a0:70:1b:77:75:ac:24:6f:df:71:5c:9d:d4:
                    90:4e:d2:b9:bc:0a:b3:45:59:90:19:f3:ac:8c:05:
                    37:dd:e1:c1:d5:74:14:20:4c:70:89:a9:02:aa:6f:
                    86:0f:54:5b:73:4b:63:26:e4:71:3e:36:01:74:b1:
                    34:a3:86:98:e3:77:be:ea:f1:ca:18:69:13:28:b6:
                    8d:07:7c:58:7d:cd:ca:71:8f:c5:b7:00:fb:9f:b0:
                    5c:81:d2:4f:fd:f1:9f:ec:d3:a4:25:92:40:e0:b8:
                    9a:f6:08:cd:8e:37:84:2e:26:9c:76:b0:74:0b:33:
                    50:e2:68:57:83:09:65:21:8f:f3:c1:ea:26:66:06:
                    d7:05:37:b1:8a:d7:e0:ca:6c:19:6c:36:ca:b6:6b:
                    8f:6f:9e:4e:59:cc:b7:96:01:ed:07:7f:49:d3:3c:
                    23:cf:eb:d1:9a:42:30:4c:fd:05:6e:bd:79:6f:f9:
                    99:0f:1d:76:15:a3:95:ac:b4:8c:98:8b:5e:16:b2:
                    57:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:EC:6D:04:A1:55:1E:79:3A:13:A0:AB:47:42:DC:38:4A:7E:7F:13
            X509v3 Authority Key Identifier:
                keyid:90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:a7:3e:35:da:09:32:70:eb:b4:71:bc:0a:99:6b:a3:3f:f1:
         31:34:c9:61:b9:59:3f:f4:5c:66:36:01:3b:6e:51:95:a9:ad:
         42:a5:ea:fc:35:c2:bc:82:62:d3:cb:5f:41:52:f7:6e:5a:de:
         10:81:34:1b:d3:a8:21:1f:66:4e:d0:c1:d1:4b:40:23:97:66:
         fb:94:f0:78:5d:f8:4e:b3:ec:d1:d0:b7:f0:9d:0a:64:fd:50:
         32:43:01:d5:2d:bd:1f:e1:14:bb:5c:96:57:98:c8:ba:a4:95:
         3c:4d:ed:00:27:e7:18:4d:3c:ae:6f:e3:b7:03:fb:13:ce:1f:
         5f:8d:3b:b8:e9:49:89:ad:e6:0d:25:b9:52:0c:10:fe:98:a3:
         7b:66:50:89:42:55:04:12:fd:ba:6f:dd:7e:eb:94:60:40:b5:
         66:58:18:29:25:fb:28:c0:47:f1:91:8a:5c:a4:3b:54:37:3d:
         b1:93:c5:0f:be:3e:75:6b:f7:70:11:ca:85:9f:45:7d:9d:09:
         a0:bb:d0:ad:98:ea:44:b5:d3:c4:01:79:db:9d:b6:8c:ba:1a:
         9b:fb:be:67:19:4e:45:a9:ff:9e:86:24:63:eb:8a:4e:5b:66:
         5b:07:78:c9:54:d5:ce:78:b4:6d:1e:19:66:80:1d:be:79:12:
         69:44:a0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:37:20 2025 by rpki-client