Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft
File:                     x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft (raw, json)
Hash identifier:          5tHo/aRnx7eky8Tt6f5ywgng4HPshU4+Nri2cHgRozo=
Subject key identifier:   37:A1:F3:4A:71:17:9D:B2:5E:F3:8D:9C:21:31:69:47:BC:C4:07:59
Authority key identifier: C7:7C:13:09:F4:A1:53:0E:A3:95:41:45:28:81:5F:9C:76:7C:51:5B
Certificate issuer:       /CN=A91E3377/serialNumber=C77C1309F4A1530EA395414528815F9C767C515B
Certificate serial:       057C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft
Manifest number:          0577
Signing time:             Fri 22 Aug 2025 23:28:36 +0000
Manifest this update:     Fri 22 Aug 2025 23:28:36 +0000
Manifest next update:     Fri 29 Aug 2025 23:28:36 +0000
Files and hashes:         1: x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl (hash: BsfdLeSSaMkBPiAoaPp5YHUQUF8kVtSws4LmvZLOfsE=)
                          2: 4756B350EF9011EBAAE0375AC4F9AE02.roa (hash: H5pjI/DUhiXyW6sQwhGG/wb5HeJLy8aTxQs1mqyRqSU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl
                          rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 23:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1404 (0x57c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3377, serialNumber=C77C1309F4A1530EA395414528815F9C767C515B
        Validity
            Not Before: Aug 22 23:28:36 2025 GMT
            Not After : Aug 29 23:28:36 2025 GMT
        Subject: CN=68a8fd24-93df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:45:d6:de:bb:3a:2d:12:ca:73:c2:d8:36:64:
                    dd:b7:93:7a:ce:49:6b:5d:86:a9:1b:df:9e:05:c5:
                    99:2c:9b:32:e4:de:90:21:93:3e:c9:27:c1:00:43:
                    fa:ec:4e:23:03:e6:dd:89:8e:0d:79:bc:ae:d4:18:
                    59:08:13:e0:bc:94:6d:41:b3:75:0c:6d:b2:fc:8e:
                    fd:f7:ab:1f:93:f2:0d:49:c4:0e:89:3d:e3:f4:50:
                    9a:b1:92:05:da:9e:7e:df:59:e2:de:66:60:06:b0:
                    11:c4:e2:58:09:73:f5:80:4a:6d:ff:24:64:ba:6d:
                    84:73:9d:b0:7e:18:c6:d1:86:69:73:45:be:36:65:
                    b1:88:cf:ae:75:a9:5e:bb:84:a8:40:b8:65:6a:fc:
                    79:c2:61:98:db:cc:26:94:99:09:9e:55:29:d7:15:
                    60:d3:14:49:9a:be:36:ab:b0:73:12:d6:7f:78:28:
                    95:e1:23:a1:bb:11:fc:70:7a:12:d2:76:31:65:a1:
                    78:c9:dc:f3:1c:1c:cf:6f:de:b8:f3:22:12:f3:97:
                    03:39:07:21:25:73:ee:92:18:a0:86:9c:68:89:4f:
                    7c:bc:8c:26:2c:e9:54:69:f1:69:3e:e0:c6:f0:7c:
                    06:8a:16:30:fc:40:85:16:68:e5:f3:2c:72:7c:6c:
                    f9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A1:F3:4A:71:17:9D:B2:5E:F3:8D:9C:21:31:69:47:BC:C4:07:59
            X509v3 Authority Key Identifier:
                keyid:C7:7C:13:09:F4:A1:53:0E:A3:95:41:45:28:81:5F:9C:76:7C:51:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:4b:c6:42:ce:82:bf:1e:eb:be:c9:6a:76:dc:9e:5c:7a:a5:
         86:7b:43:80:4a:65:29:46:d1:0b:71:bf:45:3a:50:98:24:6b:
         51:79:dc:82:41:23:61:bd:b7:f6:d2:a3:96:af:db:04:2a:05:
         c4:bf:ef:6d:53:06:9f:74:3a:89:d8:b5:1a:c1:ac:62:8e:10:
         77:c4:4c:a6:fd:9f:17:40:d5:1f:2e:dd:87:c3:08:5f:8c:c4:
         07:26:c8:5d:58:5c:bf:4d:a6:27:7e:a8:7d:de:28:e0:b7:e2:
         3a:9a:91:a3:db:5f:69:2a:3e:e3:5d:9b:bd:74:4a:7d:ce:21:
         67:9a:03:e8:5f:52:52:e6:51:fa:03:c4:9a:40:61:13:13:49:
         10:73:c4:0b:a8:a2:12:fd:88:fe:8b:34:ab:1f:71:09:00:d7:
         70:f5:58:48:ef:a9:8c:69:26:da:f7:dc:b7:7e:b3:e4:81:53:
         32:33:27:5b:5b:06:02:3f:67:8d:ce:3d:c3:f4:3b:e3:e8:1f:
         39:6c:3c:79:d4:d0:5f:cd:22:2d:ff:99:a2:bc:2e:7d:0f:f7:
         20:ae:ff:d7:31:ee:84:7f:41:3e:e7:6f:d1:df:84:16:47:c7:
         74:08:57:f8:0e:a9:47:33:d6:bd:46:0d:c2:84:e7:43:5c:46:
         9d:4d:ec:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:25:23 2025 by rpki-client