Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.mft
File:                     5jRJcTfNjgmazQdoyBzzu0QmUbo.mft (raw, json)
Hash identifier:          WC+m2vmq0717/PccidroTXa4xukRZcFjq3t3J8MGv1g=
Subject key identifier:   C5:94:11:02:32:3C:53:E5:32:76:C5:23:6A:AC:4C:D5:0B:05:E1:37
Authority key identifier: E6:34:49:71:37:CD:8E:09:9A:CD:07:68:C8:1C:F3:BB:44:26:51:BA
Certificate issuer:       /CN=A91CF064/serialNumber=E634497137CD8E099ACD0768C81CF3BB442651BA
Certificate serial:       CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jRJcTfNjgmazQdoyBzzu0QmUbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.mft
Manifest number:          CE
Signing time:             Sat 23 Aug 2025 05:49:59 +0000
Manifest this update:     Sat 23 Aug 2025 05:49:58 +0000
Manifest next update:     Sat 30 Aug 2025 05:49:58 +0000
Files and hashes:         1: 5jRJcTfNjgmazQdoyBzzu0QmUbo.crl (hash: 9BPpDp8IkHX+KgiVA2kpTwMDLUC4AOK9kQKZTSzrNrw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.crl
                          rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jRJcTfNjgmazQdoyBzzu0QmUbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:49:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF064, serialNumber=E634497137CD8E099ACD0768C81CF3BB442651BA
        Validity
            Not Before: Aug 23 05:49:58 2025 GMT
            Not After : Aug 30 05:49:58 2025 GMT
        Subject: CN=68a95687-d6a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f2:53:75:eb:62:42:b9:e6:24:c0:a6:b0:44:
                    41:7a:84:62:bd:98:8e:0f:c0:70:a2:98:4c:8e:bb:
                    4b:d2:07:c9:1e:49:cd:e6:fc:93:b3:bf:07:fe:ff:
                    09:b5:05:8e:91:d3:7c:63:c0:13:df:fc:10:9f:02:
                    c3:f6:20:ee:65:e7:6a:5d:9d:e4:fc:49:9a:5c:a3:
                    61:71:40:53:be:9f:6a:05:c4:05:64:c0:6f:98:27:
                    7b:2f:85:2b:23:8c:63:76:4f:23:36:68:c3:d4:57:
                    44:36:78:a9:a0:27:cf:bd:3e:f9:8c:14:f4:31:9b:
                    80:0a:6a:7b:ce:bb:95:41:2b:12:bf:04:ab:80:4d:
                    68:a1:73:9e:62:6e:72:97:56:df:36:5a:b5:30:f2:
                    0e:11:0a:3a:92:53:d2:98:f7:0e:6c:a6:f6:2c:db:
                    2b:59:e3:87:e2:8d:1f:ec:2c:ba:12:41:fd:7d:67:
                    63:a2:ba:91:5c:f4:5f:cd:bc:7a:83:a5:5d:07:f4:
                    1d:80:65:8f:19:c0:2e:ad:c0:fa:c2:09:05:93:a8:
                    77:59:c0:5a:85:9d:86:0e:f9:60:8e:04:22:14:d8:
                    61:f3:28:96:57:89:b7:0c:67:65:ca:9e:de:c8:b5:
                    ab:7e:9b:eb:8d:a4:36:55:02:bf:10:2b:9d:91:dd:
                    f1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:94:11:02:32:3C:53:E5:32:76:C5:23:6A:AC:4C:D5:0B:05:E1:37
            X509v3 Authority Key Identifier:
                keyid:E6:34:49:71:37:CD:8E:09:9A:CD:07:68:C8:1C:F3:BB:44:26:51:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5jRJcTfNjgmazQdoyBzzu0QmUbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF064/FC2FF9C644E211EFB13F2214C4F9AE02/5jRJcTfNjgmazQdoyBzzu0QmUbo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:2a:cc:e1:3a:75:c7:b2:e1:c2:29:da:e1:a5:be:3d:bc:0d:
         0b:55:11:22:d6:42:8b:41:91:e4:0c:47:51:6a:62:09:cc:32:
         fe:98:59:c5:12:42:b4:ee:35:26:47:ed:de:f7:58:ec:f0:0c:
         87:f1:c4:22:a4:5f:fc:d9:9c:d3:4e:eb:76:97:2c:65:91:ee:
         2a:4c:b1:d0:38:e6:f1:db:66:ad:88:6c:26:1e:61:fe:fa:bf:
         b3:50:7c:06:fa:e2:06:d6:e4:d3:a5:44:19:89:81:65:b7:33:
         9b:6a:30:29:79:4f:b0:ad:0b:a5:07:18:cc:21:38:15:3b:24:
         b6:7a:61:3f:ad:f6:d3:86:41:87:8f:f9:84:ea:67:de:a2:81:
         70:7d:d9:3d:8f:be:f1:3e:ad:db:27:b1:67:83:95:c8:60:2c:
         81:a7:81:62:06:1a:5d:cd:51:c1:ea:db:b1:98:30:07:6a:22:
         f2:4d:b7:de:4d:2a:a1:3e:c2:2d:fb:e5:f2:e0:0b:b9:e3:cf:
         21:64:d7:8d:04:d4:37:67:d5:be:aa:ad:34:33:aa:3f:36:0c:
         ba:c1:b6:d0:52:e0:eb:b2:e9:e5:38:a6:37:89:f1:26:70:13:
         97:b7:d2:57:c0:76:19:4e:c8:db:9b:dd:0c:1c:37:66:81:8d:
         4c:2c:47:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:12:49 2025 by rpki-client