Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
File:                     u-Sfy0H1Amo1v2yTuR_f88iMc24.mft (raw, json)
Hash identifier:          uI2CZUPbTlivQP30Bv4IQkn+i7nvZTbBcpERzd/VaL0=
Subject key identifier:   C8:9C:37:60:D6:65:F8:39:C7:98:ED:A6:95:92:7B:79:A8:57:7E:F3
Authority key identifier: BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
Certificate issuer:       /CN=A91DEA56/serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
Certificate serial:       08AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
Manifest number:          0898
Signing time:             Wed 02 Jul 2025 20:50:00 +0000
Manifest this update:     Wed 02 Jul 2025 20:49:59 +0000
Manifest next update:     Wed 09 Jul 2025 20:49:59 +0000
Files and hashes:         1: u-Sfy0H1Amo1v2yTuR_f88iMc24.crl (hash: n0C3Lvq6Jo+K8PRY7MK/T3/iHrRz7LrqraAqa/fDLgs=)
                          2: 660823EABF3C11EAAF328582C4F9AE02.roa (hash: McY2AJFANrzWmI75qEuoRVmbI5bYcHMLwYH623aHbh0=)
                          3: 65051AB6BF3C11EAAF328582C4F9AE02.roa (hash: 4sHi+d6qz1n7lwCxnRDnO0jNP13ZRhYE6FAGlfuub+c=)
                          4: 65877060BF3C11EAAF328582C4F9AE02.roa (hash: 8Ve/Cl0hRolwdHsLuG0VDkNM1FdRmkmQ9YowmP0sm+M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl
                          rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 20:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2220 (0x8ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEA56, serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
        Validity
            Not Before: Jul  2 20:49:59 2025 GMT
            Not After : Jul  9 20:49:59 2025 GMT
        Subject: CN=68659b78-3e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:b2:51:48:a2:27:ba:99:d8:00:51:84:1c:ab:
                    5e:6d:09:6c:95:5d:d9:dd:8b:dc:0a:fd:37:d6:2c:
                    3d:8a:fa:58:db:13:8b:30:9c:08:7d:17:ef:02:ac:
                    b8:29:2d:2f:6f:c8:05:20:c1:8c:3b:e5:e6:b6:8b:
                    33:ed:c2:5e:da:e0:36:89:4c:30:e8:20:65:a7:40:
                    55:dd:99:aa:3a:d6:6f:1b:49:9d:52:75:2b:82:e2:
                    1c:d5:94:c2:46:b6:1b:1d:68:3d:7c:8f:24:fd:63:
                    6d:c2:45:f5:cd:31:e3:00:27:3f:52:da:32:4c:51:
                    76:fe:63:cc:4a:9a:7c:e0:5c:cd:1a:c3:c6:3b:76:
                    4f:10:cc:1c:64:b6:d3:9b:1f:11:6e:cc:4a:67:73:
                    7c:c8:e0:cc:d3:a4:96:ce:a5:fe:7c:72:58:5a:0d:
                    a2:68:6a:38:09:d2:fa:b5:30:d2:19:37:b3:3e:19:
                    69:9b:76:4f:ab:2d:25:d4:40:0c:85:12:e4:9e:36:
                    58:12:84:61:b4:4e:cd:f8:fc:19:0d:31:ba:47:18:
                    1b:c6:44:f0:10:8b:6d:39:ec:36:a3:9b:7e:43:17:
                    2d:bc:1a:92:38:07:3b:d2:bf:00:b7:52:a6:e3:f5:
                    49:89:98:fe:85:bf:0c:5f:51:0a:2a:c0:65:c8:51:
                    a2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9C:37:60:D6:65:F8:39:C7:98:ED:A6:95:92:7B:79:A8:57:7E:F3
            X509v3 Authority Key Identifier:
                keyid:BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:2f:f9:ad:13:1a:c9:d7:e9:a8:64:d2:c2:14:3b:ce:ba:83:
         28:29:09:71:5d:2a:06:d2:aa:fb:68:9a:ad:e0:08:28:f4:f4:
         88:b5:ca:9d:40:ce:66:f3:ee:df:65:c9:78:f1:ee:bf:f4:18:
         16:b6:7f:cf:1c:59:53:70:4b:06:65:1e:8d:7d:5c:69:86:94:
         05:f6:9b:0a:0e:b6:4f:a6:60:91:f3:32:88:06:84:dd:df:38:
         24:c9:61:08:cf:7b:e7:df:1c:fa:a8:f8:13:21:05:6e:63:1d:
         b7:2a:25:52:1b:f5:c8:88:36:82:5c:71:d6:e7:49:b1:da:7c:
         be:12:d5:a2:44:0c:d6:b4:e4:b9:60:0c:8a:33:39:c5:79:e0:
         86:08:80:d9:49:de:80:cd:d7:9d:82:d8:2d:ce:3f:bd:e4:23:
         ca:82:90:c7:c2:04:92:b9:08:3a:85:5c:cb:a1:69:0b:a7:bd:
         42:f5:ec:34:5f:f4:24:f9:f7:83:c6:53:29:01:7e:e9:c6:c8:
         34:a9:88:76:d5:93:fa:8d:6b:7e:d2:22:6f:1f:38:fa:4a:85:
         67:8b:ba:98:1c:9b:db:a7:4f:83:ac:ed:d9:14:99:6d:e2:0a:
         6c:4c:79:47:c5:f2:8e:1e:3f:79:66:74:56:a3:b7:7f:17:3a:
         c4:58:32:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:59:16 2025 by rpki-client