Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
File:                     EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft (raw, json)
Hash identifier:          g5sDwgNePzIYdMZbMrlu5FVMf6azxIq0un5ouoSuIOI=
Subject key identifier:   6A:35:C4:8F:71:34:D9:21:1D:9A:89:B3:15:F5:93:6C:3D:61:EF:5D
Authority key identifier: 11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53
Certificate issuer:       /CN=A91E7222/serialNumber=11B44556B79627853F4031ED6DD57284056EFF53
Certificate serial:       0698
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
Manifest number:          068E
Signing time:             Fri 22 Aug 2025 22:26:32 +0000
Manifest this update:     Fri 22 Aug 2025 22:26:32 +0000
Manifest next update:     Fri 29 Aug 2025 22:26:32 +0000
Files and hashes:         1: EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl (hash: jQGXTowwp9CDEQKzDsK9qClbyFkFGtbxGRKBNE+c4Os=)
                          2: 6BA11A56807911EBA6F1A955C4F9AE02.roa (hash: BEroe25M20UrAiw8SyEvv6Pk5mXlFp9GQ+z/Vqtvaw0=)
                          3: 6C46B54C807911EBA6F1A955C4F9AE02.roa (hash: sdo5dB4yf8kL9E/pHn7+OshW8DyNii5atqW56lYezBk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl
                          rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:26:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1688 (0x698)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7222, serialNumber=11B44556B79627853F4031ED6DD57284056EFF53
        Validity
            Not Before: Aug 22 22:26:32 2025 GMT
            Not After : Aug 29 22:26:32 2025 GMT
        Subject: CN=68a8ee98-f81c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:47:57:bf:c9:0c:a6:2c:dc:40:ff:d9:ae:13:
                    ae:ec:f0:e4:0c:bb:57:50:de:99:ad:68:43:62:de:
                    e9:56:15:5b:2f:11:6c:22:f5:3e:53:1b:62:94:5c:
                    3d:40:32:cd:42:6f:2c:40:2a:e3:3a:83:89:6c:a2:
                    8a:3d:20:cf:a6:7a:f1:41:e0:e4:d5:ae:b6:4d:6f:
                    49:d3:03:cc:42:22:25:c7:0b:a4:34:91:c3:73:98:
                    3c:d7:e7:2f:58:2b:85:d2:c0:52:d2:7c:aa:d2:f4:
                    46:27:22:12:a8:99:32:d8:a6:9d:97:05:08:f2:56:
                    81:04:49:ba:23:f9:0b:52:53:7a:cf:17:7f:4a:d3:
                    eb:51:b1:68:e0:ba:83:10:c0:0a:0f:14:fe:04:29:
                    84:77:81:a8:54:0f:d4:95:2c:15:13:05:8e:0e:0e:
                    e6:6c:64:fa:96:a3:b7:53:4e:82:d0:1f:2a:4d:bd:
                    09:ca:bb:40:1f:a8:0d:fe:e0:ac:ee:31:65:4b:a9:
                    bb:f5:93:ba:48:1a:a7:a9:1a:c1:c8:d8:00:cd:0a:
                    dc:f4:a1:58:32:d0:f4:81:ae:cf:1a:09:2b:11:5f:
                    60:12:11:03:6c:33:3b:63:5c:2b:4f:47:bf:fd:6a:
                    0f:31:67:e7:55:d0:82:9a:3e:c0:c1:41:1b:11:b3:
                    1a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:35:C4:8F:71:34:D9:21:1D:9A:89:B3:15:F5:93:6C:3D:61:EF:5D
            X509v3 Authority Key Identifier:
                keyid:11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:95:ff:4f:c0:b7:b7:db:1f:0c:ed:d0:d4:e9:26:01:3c:0c:
         b0:e2:7e:86:46:8e:21:8e:33:d3:b5:89:cb:7c:6b:b9:4b:a1:
         5b:96:fd:b8:30:19:22:15:4c:d4:94:2f:97:e2:12:04:b2:56:
         b2:36:41:d5:19:ce:c8:b9:65:b6:ff:49:78:bb:53:91:80:dc:
         9c:e8:fd:b6:ff:d8:8b:0f:ee:f0:98:41:38:92:d4:58:cd:c8:
         bf:f2:e0:6c:ae:01:5a:8b:48:64:00:82:2b:e2:66:3e:14:31:
         1e:2f:c4:b5:3f:4f:56:1c:16:69:b6:b2:99:a9:b5:d5:4d:21:
         4d:ce:05:26:94:12:f6:51:03:3a:a5:2a:87:a1:fa:86:4f:56:
         6e:21:df:b7:62:2e:13:a7:96:91:03:8a:b2:3c:a2:62:74:a3:
         dc:52:6b:2a:b8:43:3f:54:9f:25:de:57:9a:ee:19:7d:4f:3b:
         d6:28:c4:95:c8:a9:a5:a6:1f:59:f6:62:41:8c:a0:5f:83:20:
         39:d3:bb:e4:58:b8:03:b9:21:18:60:22:bc:75:1a:e8:d7:70:
         87:1b:fd:c4:7b:23:38:ff:82:da:b9:e4:62:45:55:e8:04:de:
         44:49:ea:8b:3f:ae:5c:4f:3e:87:6f:1f:33:ed:ed:c9:69:fe:
         58:d7:77:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:12 2025 by rpki-client