Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
File:                     l_PsEBRVjghHCgOpR4yE8j5FADo.mft (raw, json)
Hash identifier:          KXrakpZEkUBtCvywLYV8usPFnqgSK7yHowI1GyQeZlI=
Subject key identifier:   70:10:8F:B0:68:BF:C3:50:CB:AB:51:20:F9:75:DE:0F:E2:F1:A6:16
Authority key identifier: 97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A
Certificate issuer:       /CN=A91E2E92/serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A
Certificate serial:       01BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
Manifest number:          01AD
Signing time:             Sat 23 Aug 2025 03:26:51 +0000
Manifest this update:     Sat 23 Aug 2025 03:26:51 +0000
Manifest next update:     Sat 30 Aug 2025 03:26:51 +0000
Files and hashes:         1: l_PsEBRVjghHCgOpR4yE8j5FADo.crl (hash: J2iT7icWOK2c1QIcNqhw2Mmd5Muzmr9tsudx/vgIjhc=)
                          2: B7D34CC444ED11EE8D931624C4F9AE02.roa (hash: ROkkzatt5V9Pz+AtU25/WOuwZ/bxAOBTVtr/gp1mTRQ=)
                          3: D78EA2DE44ED11EEA6685324C4F9AE02.roa (hash: agND8JJbqlEXowZERcfKWZ71YKoau8ULA8IOXEAGAms=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl
                          rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2E92, serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A
        Validity
            Not Before: Aug 23 03:26:51 2025 GMT
            Not After : Aug 30 03:26:51 2025 GMT
        Subject: CN=68a934fb-04bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c0:d7:29:75:63:e8:3b:40:ad:cf:30:83:cf:
                    0c:ff:04:15:eb:99:22:cc:bb:3d:1a:21:00:c7:a1:
                    17:70:72:ba:64:f9:85:5c:36:69:06:44:9a:99:7e:
                    08:24:e5:b1:cd:e3:e3:68:36:22:0c:7c:ac:fa:6f:
                    32:42:97:67:cc:a9:ee:d3:54:62:b8:c6:aa:f7:25:
                    b9:5e:7d:b5:87:04:67:bf:87:74:19:c5:35:79:d3:
                    50:7e:7e:0a:3a:dd:42:ca:ce:47:6a:57:a9:ff:af:
                    6d:3a:cb:2e:57:bc:8d:ae:78:b0:af:97:98:86:b9:
                    30:50:4d:be:da:e9:9d:18:1a:1f:1c:36:53:4e:dd:
                    9e:a4:98:00:3f:ec:f5:75:26:67:dc:8c:e1:17:71:
                    95:c4:e8:a2:64:00:60:c9:c8:17:22:a5:43:1b:66:
                    4e:a1:a4:dd:0b:ea:a4:8f:d4:6a:80:23:7e:8f:3b:
                    d0:dc:bc:38:2d:4d:c8:8f:34:84:18:ec:fa:c6:e4:
                    5c:2c:ff:90:1c:dd:3b:cb:9b:a1:e7:8a:f8:22:64:
                    a1:e4:a7:0e:fd:c6:62:55:2c:b7:47:0a:bf:30:08:
                    94:3c:40:f0:e9:52:c3:c7:e2:c7:31:05:c5:a7:cb:
                    b4:a3:e9:3a:bc:7f:79:f6:a1:b0:c6:60:2c:21:d9:
                    bd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:10:8F:B0:68:BF:C3:50:CB:AB:51:20:F9:75:DE:0F:E2:F1:A6:16
            X509v3 Authority Key Identifier:
                keyid:97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:6e:f7:8b:3e:8e:19:d6:65:be:4c:29:45:c3:79:41:e8:b8:
         b9:0a:f7:69:bb:ff:d2:f9:be:77:7e:59:6a:77:40:49:a2:c4:
         bd:3a:c3:f9:c2:a4:37:3e:63:91:eb:d1:8e:dd:c3:81:da:f3:
         e3:9f:83:1d:0b:ef:4f:f2:16:52:53:06:22:8c:dd:36:25:96:
         76:62:1f:c9:30:ac:25:d1:bd:97:2f:de:17:6d:41:14:27:44:
         25:bd:20:fe:7f:84:30:98:79:90:15:58:a3:b4:20:d2:a9:50:
         b3:98:54:3c:e8:b3:39:92:ba:5b:ad:7d:0f:53:7f:19:59:93:
         ba:cc:41:e1:2f:77:5a:a5:b3:b1:da:8f:1f:b6:5e:2c:f0:29:
         6b:db:c1:ce:a6:5d:d8:fa:82:8a:c7:b2:1e:87:31:3a:d2:9c:
         b6:e0:50:1a:87:51:a4:ad:9c:cf:ca:2d:e4:85:05:18:19:8a:
         d2:6c:46:e1:7b:5b:7a:f7:6b:8d:02:83:b4:c9:1a:d5:8b:cd:
         12:8c:32:46:c4:19:84:d0:2f:00:96:cf:03:1b:39:0f:8f:96:
         ed:79:65:8e:d8:5a:fb:ab:be:47:13:69:92:30:25:f7:1a:a2:
         9f:87:65:12:6a:7d:b6:4e:8b:0a:15:ce:8c:70:2b:6d:95:65:
         45:df:69:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:15:26 2025 by rpki-client