Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
File:                     hrKx0eeCRIuE9pgY8WofcHtUyGw.mft (raw, json)
Hash identifier:          T2v2YJ+dsOhADJEXPK1N3r8geWkK1gtCjpUiSxKHWAA=
Subject key identifier:   8A:A5:CB:DC:DB:9D:77:8C:F2:96:4B:58:50:48:13:9C:E3:FF:0A:AC
Authority key identifier: 86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
Certificate issuer:       /CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Certificate serial:       06FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
Manifest number:          06ED
Signing time:             Fri 22 Aug 2025 22:10:13 +0000
Manifest this update:     Fri 22 Aug 2025 22:10:12 +0000
Manifest next update:     Fri 29 Aug 2025 22:10:12 +0000
Files and hashes:         1: hrKx0eeCRIuE9pgY8WofcHtUyGw.crl (hash: OcS1hR9RQ2wiHzv8/eiye7JZki6RHW2qad2bYW8nQmc=)
                          2: 956449BEFBF411EDBEAD0A26C4F9AE02.roa (hash: dsXz2lfcHryblqx1Ukw1H9WGMnpRDnzyM9OTmUgJl/0=)
                          3: 7A27A6E45FDB11EBA5C9EA7CC4F9AE02.roa (hash: W63Eb+30MCK+wn3+q84oKaizsJ4BNesWyN0s9mJY3b8=)
                          4: C5186FA283D311EEADE09225C4F9AE02.roa (hash: 6R33YrxpQxTL0tryG4KL8AOz8hxoPlF0ceIkKdbUGro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
                          rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:10:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1790 (0x6fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC979, serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
        Validity
            Not Before: Aug 22 22:10:12 2025 GMT
            Not After : Aug 29 22:10:12 2025 GMT
        Subject: CN=68a8eac4-6652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:85:80:2d:5b:b5:a5:a7:23:fe:7b:fb:b9:68:
                    1f:d2:9c:23:d2:5d:f2:67:51:1b:c1:1a:dd:18:a9:
                    af:dd:b8:2e:f6:2f:0e:c1:50:f6:33:68:2c:3e:35:
                    a8:08:09:0b:e0:2b:43:ba:4d:d7:15:97:75:d9:58:
                    ce:54:2f:0e:9c:dc:b5:95:00:c3:d5:f2:03:3f:3e:
                    ec:7c:28:ee:00:5b:ce:bf:a8:a9:05:36:b2:1d:82:
                    17:11:82:3f:f4:03:d9:66:99:92:b4:29:9e:78:9f:
                    9a:ad:c0:dc:7b:57:0f:e6:79:3f:c6:78:50:09:3e:
                    3e:03:3d:f3:51:08:03:55:57:98:89:f9:dd:ea:df:
                    4e:b4:24:12:b0:5b:48:9a:5d:41:fe:db:43:69:b0:
                    7c:51:0c:49:70:1d:6c:18:8d:0c:39:a4:18:b2:b0:
                    f8:94:5e:10:98:7f:74:41:66:13:92:12:2a:56:f3:
                    13:83:8a:d1:d5:34:e9:74:f6:a5:52:ea:48:64:7e:
                    5b:cd:fc:47:ba:f3:28:38:d1:48:6f:7c:88:15:78:
                    c3:54:f9:7c:02:4a:83:a8:cd:2b:07:09:24:0a:98:
                    3d:30:11:80:ff:c7:2c:a0:13:5f:0e:ea:c0:ab:71:
                    5b:92:8e:5a:91:94:6b:7c:bc:0b:4d:ad:8d:5d:6e:
                    02:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A5:CB:DC:DB:9D:77:8C:F2:96:4B:58:50:48:13:9C:E3:FF:0A:AC
            X509v3 Authority Key Identifier:
                keyid:86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:70:9a:b0:8a:45:ee:3e:25:6b:84:7e:ec:f3:f5:20:f8:9b:
         af:f0:84:11:5d:9c:2b:3c:5a:0e:0a:39:51:4a:a3:bf:93:8e:
         73:c9:a2:f7:ec:ee:a1:e3:4a:b9:ae:2e:94:48:0c:3a:eb:fd:
         0d:a6:ba:63:42:00:70:a8:79:2d:60:fa:3f:99:9f:e2:a1:ff:
         4a:c4:3f:e5:69:75:7e:6e:c7:2c:30:24:ef:18:76:b4:76:a4:
         9c:47:81:92:7a:c5:9c:f4:91:d2:1f:60:f7:eb:1b:dc:0f:d9:
         75:09:1f:45:fd:95:7f:c1:18:c1:09:16:22:8f:f2:f4:99:f2:
         0b:60:f4:04:aa:68:1c:2b:d0:37:10:bb:47:81:97:87:df:cf:
         f0:79:91:9f:60:c7:ab:15:f0:fb:57:cb:7e:09:54:2e:d3:90:
         16:7f:34:e9:f4:e6:3d:dd:51:7c:e6:a1:0e:1b:ed:d5:57:84:
         eb:5d:0e:30:6b:35:b2:e1:b7:55:74:61:f7:c6:ec:06:91:c9:
         86:f7:ad:7d:fd:fa:0a:2b:e3:55:67:a5:1e:07:58:d7:fc:a4:
         05:d6:e3:ea:c3:9f:bd:8d:af:0d:73:bd:a7:04:89:60:9e:3c:
         0f:4c:6d:da:26:2a:f2:c8:ce:32:c1:b5:3b:be:d5:64:97:0b:
         49:5c:ad:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:17:00 2025 by rpki-client