Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
File:                     i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft (raw, json)
Hash identifier:          12RyDy58GAkKxvwm9b1mujNlIMFDiCf8C1FVn5zybUE=
Subject key identifier:   4B:1C:47:E4:00:FD:B3:FF:E3:D6:FA:38:9C:4E:2F:6D:4B:DB:E0:92
Authority key identifier: 8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D
Certificate issuer:       /CN=A91D37E4/serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D
Certificate serial:       079B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
Manifest number:          078E
Signing time:             Fri 22 Aug 2025 21:36:13 +0000
Manifest this update:     Fri 22 Aug 2025 21:36:12 +0000
Manifest next update:     Fri 29 Aug 2025 21:36:12 +0000
Files and hashes:         1: i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl (hash: L3DEDdnBhRFtHzjRxEdsjnzhXsN3c4NpET+yapOXL00=)
                          2: D933655E23B511EBA7BDD50FC4F9AE02.roa (hash: 8WBXx40LoIwub2WeF3ccrcQG4fq4wKZ7IVrDku/6ikQ=)
                          3: BD764EAE1D5B11EBAB008D19C4F9AE02.roa (hash: faL6wM9GsLMo9++JSpEkUSiwl7+QPEuIOOkR0NTNngU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl
                          rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:36:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1947 (0x79b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D37E4, serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D
        Validity
            Not Before: Aug 22 21:36:12 2025 GMT
            Not After : Aug 29 21:36:12 2025 GMT
        Subject: CN=68a8e2cd-4406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ea:26:6d:47:16:88:cd:17:04:78:e2:b4:58:
                    11:28:ca:e9:b9:4b:ed:9a:64:53:b2:dc:d5:e9:eb:
                    43:e1:84:54:e8:9a:5e:28:09:7b:c2:f3:9e:15:48:
                    d7:ad:04:59:09:3b:ca:92:ce:10:68:5c:ac:4c:2c:
                    df:8e:f6:9d:59:47:f0:8f:20:7d:d8:92:d9:39:c9:
                    1a:2e:d9:e1:d4:0f:cc:35:03:f7:80:a3:65:84:5f:
                    19:9d:b2:8c:35:b4:41:d6:f4:bb:b0:59:0a:29:42:
                    e5:72:b4:0e:c0:8a:ba:06:58:61:02:ef:5a:07:0d:
                    17:64:53:23:da:dd:d0:f6:17:f2:44:cd:78:1a:24:
                    ae:bd:e5:39:c7:52:a9:7f:6c:b3:33:7e:f9:4f:58:
                    fb:be:98:f4:44:32:d1:df:14:75:4b:9e:e1:6e:24:
                    04:4e:ff:d8:c5:b7:f1:2b:4e:00:07:1e:eb:9d:3a:
                    40:25:4e:d7:f1:bd:73:f2:4e:ed:56:39:07:5a:37:
                    03:d0:5f:34:b8:44:17:ba:28:b6:37:3b:b1:86:f4:
                    07:35:56:d2:53:ea:22:f4:57:af:ef:11:29:5e:eb:
                    08:48:ed:3b:e8:e1:26:da:9f:5c:cd:48:03:a6:b8:
                    f0:c8:ed:b0:54:3c:03:45:f9:0a:1d:ce:82:ac:0c:
                    52:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1C:47:E4:00:FD:B3:FF:E3:D6:FA:38:9C:4E:2F:6D:4B:DB:E0:92
            X509v3 Authority Key Identifier:
                keyid:8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:48:6c:d8:17:19:88:2b:ac:ab:1d:81:00:4f:8c:0b:34:61:
         ca:a4:4f:6d:ad:8a:2b:da:38:9a:46:db:02:72:81:f6:80:f7:
         1c:06:c5:a3:7a:df:96:5a:3e:44:f5:78:54:b3:a4:2f:7d:43:
         a9:e5:1c:42:71:67:9f:6d:4b:ea:4a:5e:45:0d:23:4b:6e:cd:
         13:33:bc:43:56:28:e0:a8:6f:04:03:99:e4:fc:cf:bd:ac:2f:
         5b:24:a8:cd:f6:d1:af:09:c0:a6:43:07:f7:92:f5:8e:e4:7a:
         6e:14:ef:76:87:00:b9:be:57:f4:d3:00:6a:5f:06:d3:3a:40:
         77:53:df:70:9f:2a:4d:55:cb:c5:1d:e0:3a:58:5f:83:94:2b:
         a6:24:60:fd:11:fb:47:b3:1c:23:c5:0d:f9:80:65:97:66:93:
         53:e4:64:a5:51:db:b0:8f:f9:72:d9:fb:4d:de:ce:4d:fe:9b:
         fc:8e:50:a2:da:74:be:10:9b:5f:ab:6b:c7:ab:a3:7d:d6:fe:
         fa:d6:2b:08:77:bf:81:6c:79:18:cb:1c:34:37:6e:1f:93:d1:
         bf:c0:9a:65:dc:9f:07:68:6c:a7:cf:68:b7:8d:22:ad:ec:4d:
         4c:d0:1e:c5:86:7e:59:02:18:ad:e2:c4:92:dc:c6:37:eb:ac:
         f8:49:36:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:19:42 2025 by rpki-client