Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft
File:                     4190GdVyqG920uv3gpq22dA0CQU.mft (raw, json)
Hash identifier:          ygaWVyDpO1SvZcPxJFRLrbitXO2vAEtsiePYqFWpAnU=
Subject key identifier:   AA:F6:38:4D:BF:05:C5:FC:21:30:20:2B:93:24:FD:66:7F:BE:68:3C
Authority key identifier: E3:5F:74:19:D5:72:A8:6F:76:D2:EB:F7:82:9A:B6:D9:D0:34:09:05
Certificate issuer:       /CN=A91E8AF5/serialNumber=E35F7419D572A86F76D2EBF7829AB6D9D0340905
Certificate serial:       0188
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft
Manifest number:          0185
Signing time:             Sat 23 Aug 2025 03:42:22 +0000
Manifest this update:     Sat 23 Aug 2025 03:42:22 +0000
Manifest next update:     Sat 30 Aug 2025 03:42:22 +0000
Files and hashes:         1: 4190GdVyqG920uv3gpq22dA0CQU.crl (hash: M76s7mA/tXvEHvB+WnIZ98weKax7CjXbeJSe5t4va9Q=)
                          2: 9985244A2D1411EEAA9EA45DC4F9AE02.roa (hash: gPmbtMjtLenMFEAnNmFzzGl8ckVYYI4uHTkTnXpU64U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.crl
                          rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:42:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8AF5, serialNumber=E35F7419D572A86F76D2EBF7829AB6D9D0340905
        Validity
            Not Before: Aug 23 03:42:22 2025 GMT
            Not After : Aug 30 03:42:22 2025 GMT
        Subject: CN=68a9389e-1567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:50:d9:dc:7d:2a:25:d1:ad:28:12:56:ed:94:
                    38:fc:c0:08:95:6b:79:3f:35:be:68:53:4e:bf:55:
                    2f:81:59:37:46:53:1c:27:3d:01:61:b8:a4:29:4d:
                    d7:c8:d5:ee:eb:3e:18:bb:af:e6:56:a0:b4:69:f3:
                    d7:a3:f0:f3:07:79:c4:63:e0:13:3b:6b:eb:ea:3f:
                    e4:97:e4:12:18:47:b6:2a:45:cb:ac:79:28:e0:03:
                    bc:29:f1:07:67:0b:aa:56:e3:a2:66:8c:65:ed:90:
                    76:a0:87:e6:43:c6:c8:80:b3:1e:90:10:f1:11:e9:
                    71:f6:90:7f:85:d6:a9:6c:e2:57:04:65:25:66:ea:
                    59:54:ed:b4:7b:98:d8:86:34:4c:aa:b7:2c:e1:6d:
                    8d:b7:f9:89:bd:b9:7f:68:30:e4:58:33:ce:a3:57:
                    1e:b8:25:08:44:09:81:fc:16:45:b3:54:ed:b2:00:
                    9f:c0:62:46:08:b3:47:90:85:fe:bc:fd:92:d3:fd:
                    d5:86:34:ae:c4:02:8c:b1:cb:dd:b5:b1:f2:0a:dc:
                    2e:01:0a:50:30:f5:cd:a4:ef:ab:f6:d0:90:2e:20:
                    42:d0:c2:3c:80:d7:6b:e3:5e:90:aa:0b:65:b9:0f:
                    1e:6e:3e:56:8d:9e:62:fe:de:e5:87:a4:f4:6c:a7:
                    d2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F6:38:4D:BF:05:C5:FC:21:30:20:2B:93:24:FD:66:7F:BE:68:3C
            X509v3 Authority Key Identifier:
                keyid:E3:5F:74:19:D5:72:A8:6F:76:D2:EB:F7:82:9A:B6:D9:D0:34:09:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4190GdVyqG920uv3gpq22dA0CQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8AF5/33F725862D1111EE996CC610C4F9AE02/4190GdVyqG920uv3gpq22dA0CQU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:79:56:78:4d:fa:ae:13:20:e1:85:48:7f:87:90:3f:7e:d8:
         82:bc:e1:62:49:57:f6:85:29:99:51:1d:81:0f:b3:f2:a5:63:
         40:33:4b:3f:29:ea:ec:02:0c:6a:23:73:ff:cd:d3:7d:26:16:
         d3:f5:3e:38:5a:46:46:45:f9:48:8d:27:24:76:d9:1c:af:27:
         2c:bc:a8:c2:cf:ad:c7:c0:0a:27:d8:b6:87:4c:96:2f:13:77:
         32:0b:90:6e:18:2e:cc:84:aa:02:12:ba:a7:f4:8f:04:0d:34:
         bd:51:b2:ed:5a:2f:27:ef:f1:19:7c:30:66:ce:ea:51:3c:96:
         51:49:e1:e1:2f:c9:3b:a7:66:dd:ba:34:77:11:0e:f6:89:e9:
         64:19:af:19:e7:87:52:99:fd:8d:af:bb:f3:f1:c7:92:35:51:
         c3:28:8d:02:21:d8:a3:fa:57:f3:0f:65:a8:4c:5d:f2:2e:02:
         50:8e:53:55:f7:d2:66:3b:8e:3d:c9:69:f7:07:1e:9f:78:5a:
         34:01:b3:f2:4b:88:92:79:7b:06:ec:ea:f3:ad:36:c3:fe:bd:
         73:cc:14:b1:64:9b:bf:bc:10:5e:03:4d:f5:ec:4c:5b:0c:ed:
         d1:07:be:68:24:f6:be:8c:d6:65:70:a4:8d:7c:0b:f3:f0:6a:
         7b:c4:45:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:35:11 2025 by rpki-client