Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
File:                     ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft (raw, json)
Hash identifier:          YKCB0ZOK6+JfhoEeORHauVq/s26tqycAPZmdgzlqZWg=
Subject key identifier:   AB:17:99:4D:D7:98:68:4F:2E:09:CA:17:11:6A:25:32:DB:6B:1C:83
Authority key identifier: 72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7
Certificate issuer:       /CN=A91CC1E9/serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7
Certificate serial:       01C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
Manifest number:          01BA
Signing time:             Sat 23 Aug 2025 03:16:57 +0000
Manifest this update:     Sat 23 Aug 2025 03:16:56 +0000
Manifest next update:     Sat 30 Aug 2025 03:16:56 +0000
Files and hashes:         1: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl (hash: uptQ5DBykdMuEbxajvOdhUbJC8ltjD2219Iq3ZTzXog=)
                          2: 2AB990CAF0A911ED80D2CB35C4F9AE02.roa (hash: jWM3qF3q7kpRiSXeFFNjIBgWbV7okecU61rSD6G1V5E=)
                          3: 1333404E5A0D11EF8810E217C4F9AE02.roa (hash: LSSqPw0m9vdH2z02yt+UwvMOawigT/2JykBCEQ4iiVM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl
                          rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:16:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454 (0x1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC1E9, serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7
        Validity
            Not Before: Aug 23 03:16:56 2025 GMT
            Not After : Aug 30 03:16:56 2025 GMT
        Subject: CN=68a932a9-9d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9c:8c:ab:ea:58:cb:44:1e:fa:90:b6:d1:ad:
                    c6:cd:1b:9a:64:34:47:b4:1a:7c:54:ef:95:98:41:
                    2e:b5:51:71:e0:e0:42:9f:74:4b:02:32:47:a5:8c:
                    d5:2f:85:93:a9:3c:a2:e8:54:73:a8:5f:b9:c6:7c:
                    9f:62:fb:32:65:3b:31:98:d4:d6:da:b9:24:7b:a9:
                    39:ad:72:18:fb:56:da:92:78:20:e9:d3:a5:3d:1c:
                    23:f7:d9:13:b1:d9:72:dd:88:38:4c:68:06:43:ea:
                    94:a0:5a:eb:56:e5:a0:5a:a4:3b:e0:50:21:e3:46:
                    8b:be:ed:c3:b5:75:e5:1c:c4:54:91:29:1e:f2:46:
                    a5:67:45:e9:ae:5d:ad:a5:61:7e:59:86:28:51:dd:
                    fc:62:42:73:5e:f7:d5:0e:ab:95:a2:8c:2b:90:ff:
                    6c:63:e2:df:e5:90:ab:ab:05:eb:70:1e:45:1e:e4:
                    8c:40:de:bf:a4:bd:e6:58:7e:57:92:b7:e2:26:a6:
                    5b:6e:8c:ee:1a:82:d2:ba:e0:b8:2e:91:87:1a:77:
                    dc:6d:ea:ff:92:28:1f:f1:7e:25:a6:9f:4f:39:9f:
                    75:3c:5a:d4:61:14:f4:4d:e7:48:e1:42:a1:27:88:
                    be:f7:9d:c1:76:ec:96:e6:dd:29:d0:e8:91:d9:93:
                    c3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:17:99:4D:D7:98:68:4F:2E:09:CA:17:11:6A:25:32:DB:6B:1C:83
            X509v3 Authority Key Identifier:
                keyid:72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ec:80:60:ed:80:fb:cf:7f:ac:d0:93:08:29:30:fa:88:fe:
         2f:c8:a7:24:ef:1f:a3:21:45:32:2b:da:c5:f7:fa:9e:09:ee:
         dd:86:4d:3a:e1:b1:eb:53:55:c6:86:db:de:83:86:b3:a7:76:
         21:24:3d:20:30:42:f4:b7:54:80:7e:bd:ee:84:98:48:81:f3:
         a4:55:3a:20:c9:8c:ed:73:8f:7c:f0:5e:72:9a:65:bf:7d:c4:
         94:cf:bc:de:08:41:2d:3d:9a:ed:28:2d:95:3f:8c:e7:49:1d:
         7c:ec:e2:e9:2f:ef:6b:22:63:35:b9:ef:ae:3a:fb:4a:14:16:
         ba:df:2d:74:aa:fe:11:12:06:dd:f2:93:34:b0:93:7e:c9:60:
         b4:99:13:3e:15:66:dd:9b:48:33:b0:21:d5:bc:4d:a5:ef:1c:
         c8:eb:25:89:15:77:56:d1:5b:f9:cc:4c:e1:63:ba:4a:eb:75:
         ef:66:88:03:c9:b6:d4:3f:b2:d2:74:c5:cb:40:5a:4e:25:c1:
         34:ce:bb:9a:ef:90:fe:81:21:70:3e:7e:36:f0:eb:ad:0e:4a:
         43:3b:42:b7:82:f1:15:04:dc:38:0d:d6:90:44:94:e9:cc:50:
         f5:e2:49:2a:e9:9a:c0:2d:60:c6:ba:b7:d4:54:46:c1:47:fb:
         df:86:1f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:16:58 2025 by rpki-client