Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft
File:                     4PPPvfp9B0J0-nSdQCnO41iPd8M.mft (raw, json)
Hash identifier:          Ult7pYPDuk8uWUP20/gopcxqqSJrS3zAWVTgXhwKRE4=
Subject key identifier:   CB:B8:A6:23:80:AC:86:5A:4A:07:A3:D6:A0:D9:5C:95:F0:18:99:4D
Authority key identifier: E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3
Certificate issuer:       /CN=A91D0853/serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3
Certificate serial:       07DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft
Manifest number:          07D1
Signing time:             Fri 22 Aug 2025 21:16:48 +0000
Manifest this update:     Fri 22 Aug 2025 21:16:47 +0000
Manifest next update:     Fri 29 Aug 2025 21:16:47 +0000
Files and hashes:         1: 4PPPvfp9B0J0-nSdQCnO41iPd8M.crl (hash: FcFQJFfsvooLCzHmgU56kcX5j82acvUeRXd/evJkvfA=)
                          2: 3DAD522E1D7611EB8673F476C4F9AE02.roa (hash: e5b3DDJ+5AdBpB+VVjYybf9HAu4lpvnirB8lehNH2gE=)
                          3: 01F74A7EBFAC11EE89B0182DC4F9AE02.roa (hash: v+Wfr9mdwprqPsB/fgoxNe7MPi3W3bX6rDgX0OFI/s8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl
                          rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2010 (0x7da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0853, serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3
        Validity
            Not Before: Aug 22 21:16:47 2025 GMT
            Not After : Aug 29 21:16:47 2025 GMT
        Subject: CN=68a8de3f-f49c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5a:6a:b4:a4:bb:f1:96:c1:79:43:12:97:36:
                    62:c6:46:1e:40:d4:60:59:e9:04:fc:a1:6d:a9:fd:
                    0a:0e:d3:10:a1:d4:50:64:7e:7c:74:28:06:c4:63:
                    29:90:fa:1e:1a:ee:e3:03:d3:27:18:83:b1:98:9a:
                    23:3a:e0:f6:00:8e:4b:96:29:7f:8d:e0:33:14:4c:
                    aa:91:4e:c8:ed:bc:a4:91:e1:18:48:b3:c7:be:9a:
                    2d:82:83:11:7f:f8:9c:9e:14:ca:a7:2a:89:eb:72:
                    12:bd:a2:c9:54:69:13:e8:62:04:de:fe:e0:ff:82:
                    e6:d3:0b:82:d9:37:70:16:77:89:2e:03:2c:33:54:
                    52:46:e2:cc:41:42:17:f3:72:b8:45:ef:43:c5:cf:
                    58:e1:12:21:28:0b:85:ea:ae:f2:1c:8a:28:9a:67:
                    e5:84:c0:c6:a4:a7:21:b8:68:8a:16:f4:51:77:88:
                    8c:3b:6f:8b:d3:47:37:92:62:72:31:df:cd:0d:21:
                    01:d9:73:3c:23:01:33:e3:44:5b:57:be:87:55:3a:
                    6c:64:20:67:4d:12:4b:5f:2c:ee:b4:4b:85:22:17:
                    05:6d:5d:01:41:7f:9a:23:48:2f:39:a4:c7:ae:56:
                    c9:26:a9:3e:17:fc:26:4a:43:fc:ca:3d:08:fa:f1:
                    58:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B8:A6:23:80:AC:86:5A:4A:07:A3:D6:A0:D9:5C:95:F0:18:99:4D
            X509v3 Authority Key Identifier:
                keyid:E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:8b:cb:65:f7:6a:4b:4f:a7:3f:a7:73:a6:a8:96:12:e3:2f:
         41:6e:74:a4:cc:45:fe:cb:23:39:ac:3e:a5:d9:47:09:a6:93:
         a4:c6:4b:46:32:ec:dd:17:c0:e8:e9:6d:95:cf:71:9f:cf:c0:
         fa:47:30:4c:12:7f:bd:98:e5:b6:ea:f0:96:92:38:ef:14:a6:
         4a:49:47:9a:11:a0:9d:35:61:ff:74:34:2f:f1:03:4c:17:72:
         48:67:49:fc:86:48:b4:95:69:8c:ab:61:8f:6b:17:b2:5c:74:
         ec:26:f8:eb:b2:df:5a:e5:ee:92:e2:60:8b:07:0b:5e:ce:53:
         a0:80:35:99:54:b0:fb:55:12:56:b9:c7:e7:2c:00:dd:c3:4f:
         3b:64:f6:6c:ca:3d:7e:76:18:e1:85:31:bd:21:3e:2c:ce:5a:
         ad:0e:2a:6c:9c:a1:eb:c4:33:13:ac:26:ef:72:50:f4:89:29:
         b9:7a:26:f0:c0:e0:ea:29:f7:82:90:c8:e6:33:2d:f2:81:74:
         5d:5a:06:9c:5f:d4:ce:e5:1f:b3:cf:d5:99:5b:47:d8:46:bb:
         1a:f0:2f:7f:ff:82:94:f1:0c:bc:9a:c1:f7:d8:a0:fb:12:da:
         40:25:74:a4:b1:7c:d3:78:28:e4:07:6b:d4:d6:fb:32:19:43:
         23:65:bf:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:15:37 2025 by rpki-client