Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
File:                     0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft (raw, json)
Hash identifier:          1JztjuuBdu+RscXJobIMK/o7pZwA2Uf1I2syUf60zNo=
Subject key identifier:   74:EF:6A:17:51:63:9E:5B:9E:CB:9E:2F:9C:3D:B1:E8:DE:28:14:43
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Certificate issuer:       /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial:       0982
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
Manifest number:          093D
Signing time:             Fri 22 Aug 2025 20:28:13 +0000
Manifest this update:     Fri 22 Aug 2025 20:28:12 +0000
Manifest next update:     Fri 29 Aug 2025 20:28:12 +0000
Files and hashes:         1: 0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl (hash: mvhB0IDlm4th1AUyKGX9xmGw5VfTwAg88BtPQBm5OOQ=)
                          2: BDB203466B5D11EF84E04577C4F9AE02.roa (hash: BOBDyoF9n7xbx3TtkofAs1yOLOgU9o92r9+fjg3ExtE=)
                          3: A02B90EA479311F0BBFADC27C4F9AE02.roa (hash: FSGba/ksTfUcD5c5nTx4WizNyHeIp3OO4bcFqqjagGE=)
                          4: 2857F2E4111A11EF86332415C4F9AE02.roa (hash: yNiSqyUgGq7X2OqvzLvfoSJUstp1wz+ZN5+bLrhI6IQ=)
                          5: 51B031C80E8D11EE89A0B128C4F9AE02.roa (hash: 4OgZKWzHSPDUQ7eYlV4agiNuq4N/lgNw19COSO6Bfk8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
                          rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 20:28:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2434 (0x982)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8F27, serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
        Validity
            Not Before: Aug 22 20:28:12 2025 GMT
            Not After : Aug 29 20:28:12 2025 GMT
        Subject: CN=68a8d2dd-4805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:88:07:9e:73:9a:48:20:94:16:10:a2:21:b4:
                    17:64:1a:1c:ba:9b:86:6b:2c:7a:32:ee:7f:de:7d:
                    32:47:18:cb:d3:11:ac:60:e4:e8:73:be:60:9e:0a:
                    52:f2:f7:14:17:0b:71:a7:2a:e2:58:28:cd:d4:99:
                    c3:14:71:a3:b4:61:61:2d:70:51:b2:72:ed:85:b7:
                    97:ce:4d:d4:1a:38:4d:86:a5:26:9d:3d:f1:32:31:
                    2f:4c:13:f4:e2:d2:e3:30:f2:2d:90:e3:06:ef:3d:
                    02:bd:41:a5:01:d7:d8:e4:83:4d:f8:a1:a3:d3:31:
                    e8:de:ec:6b:58:6a:8f:91:4a:99:a4:16:16:da:32:
                    46:c2:79:e9:79:2c:e1:c1:5e:4d:13:e1:f4:e1:63:
                    4a:05:e3:7f:0f:19:cb:73:38:27:66:58:39:62:d4:
                    fd:56:02:7b:42:43:e3:e9:2c:d5:65:36:28:59:03:
                    ac:72:aa:04:38:59:37:8a:3c:54:a5:4d:d2:e3:68:
                    17:b4:20:74:32:c3:0b:f5:06:88:5d:f9:6c:df:7a:
                    df:80:d8:91:ea:88:94:b3:4d:7e:6a:00:f1:17:68:
                    b0:5c:ef:56:e5:29:f6:72:08:f2:00:fc:77:05:49:
                    5e:51:74:06:14:87:04:50:a1:64:72:5f:9d:ec:16:
                    2a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:EF:6A:17:51:63:9E:5B:9E:CB:9E:2F:9C:3D:B1:E8:DE:28:14:43
            X509v3 Authority Key Identifier:
                keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ff:05:dd:05:2d:f8:bd:1d:53:d4:4c:15:93:a2:58:93:ba:
         8a:5c:24:3b:04:23:f8:39:3e:a6:a8:00:77:a0:5b:52:10:38:
         92:29:35:e1:46:f8:85:06:69:94:da:d8:da:4e:28:de:cf:e2:
         23:ec:9e:fe:8b:41:fa:b8:e1:fc:00:4c:c5:35:58:14:6d:7d:
         02:30:a6:7e:51:5d:53:6c:bb:71:25:80:9c:82:33:ab:3e:04:
         a2:63:9e:89:61:dc:5e:f1:12:a6:69:72:c2:ea:49:6d:06:f2:
         13:14:40:48:c3:7e:90:9b:bf:74:dc:4e:2e:3b:b6:8b:8a:e1:
         07:53:86:a9:f6:78:ea:a8:c8:f8:32:5f:50:08:a9:e2:4f:35:
         d3:a4:16:58:51:42:3a:af:e9:18:b5:e7:95:a6:41:3f:1e:f7:
         cc:84:92:2f:71:89:7b:66:6b:05:39:f7:f1:36:f3:a9:ac:2c:
         e0:e9:5f:6f:91:10:3a:f3:bb:3b:3f:1e:81:95:f4:0d:de:ea:
         5d:7b:2a:ea:09:cb:77:7e:ac:e1:8e:b1:6a:40:ea:e6:cd:4b:
         64:2d:9f:29:89:64:de:f5:71:0b:0a:b0:20:02:dd:5d:10:ff:
         f1:30:86:47:19:8b:e1:25:ca:03:91:86:79:03:b2:e9:6e:b0:
         27:5e:bb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:26 2025 by rpki-client