Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft
File:                     0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft (raw, json)
Hash identifier:          1NreLquaHgttQpLF/huAlm6Dhn8AgsCiCvraSZI3d/o=
Subject key identifier:   87:8E:7B:C2:1B:12:89:14:ED:C4:79:7C:5F:94:12:48:D0:32:D8:F0
Authority key identifier: D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82
Certificate issuer:       /CN=A91F018E/serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482
Certificate serial:       0E7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft
Manifest number:          0E77
Signing time:             Fri 22 Aug 2025 17:49:32 +0000
Manifest this update:     Fri 22 Aug 2025 17:49:31 +0000
Manifest next update:     Fri 29 Aug 2025 17:49:31 +0000
Files and hashes:         1: 0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl (hash: KKe3X7zGejULepY+g/GjZUZwY7wwauhVueLmLn5NhQY=)
                          2: 7214B0AA9E1711E9B3710950C4F9AE02.roa (hash: c4C00IYUahMg/MQNhIkPwEgft6IPuKV052m4LGanBW0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl
                          rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:49:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3710 (0xe7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F018E, serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482
        Validity
            Not Before: Aug 22 17:49:31 2025 GMT
            Not After : Aug 29 17:49:31 2025 GMT
        Subject: CN=68a8adab-a095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6a:bb:63:87:19:74:95:ef:c8:e2:98:14:88:
                    9c:48:ef:d3:c5:ba:85:c8:6a:8f:43:6b:81:51:0b:
                    b8:f3:bc:4a:f5:3a:79:94:c3:55:99:24:1b:c3:18:
                    be:81:8c:c9:8a:73:74:6a:d7:bc:de:c2:0a:74:ba:
                    b4:e8:d9:b0:e3:1c:b9:99:ab:84:af:7c:76:8f:ad:
                    d4:2a:dd:44:29:77:9c:37:8e:24:8d:ae:ec:a9:a9:
                    61:3b:d1:8b:05:b6:95:a4:72:c3:e3:31:4d:7e:21:
                    e0:7a:34:05:e2:0b:06:5f:7f:01:fd:bf:1f:16:d6:
                    e8:45:70:bc:1e:fa:fa:4a:c1:aa:60:a3:5a:08:ef:
                    09:77:50:6e:c4:fe:3a:09:72:03:41:23:77:f6:db:
                    16:0b:d5:e3:f3:b5:fd:3a:07:a0:08:92:d9:fe:10:
                    08:9d:5d:49:e1:e5:39:f4:27:62:4e:be:0b:85:48:
                    a8:f2:dc:b1:d2:39:0c:cd:1b:86:86:ed:2c:da:1d:
                    c9:e0:ef:c4:0e:83:57:fb:3a:f8:5b:95:66:13:8a:
                    1d:04:f7:ca:1e:33:1e:3f:8a:90:fc:80:67:bd:76:
                    81:ca:9e:8f:49:0a:c2:13:2a:1c:d6:d0:c2:6f:5b:
                    c1:f7:02:f8:f9:91:31:b1:32:7f:4e:fb:39:34:a0:
                    af:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8E:7B:C2:1B:12:89:14:ED:C4:79:7C:5F:94:12:48:D0:32:D8:F0
            X509v3 Authority Key Identifier:
                keyid:D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:f3:5f:9a:ec:62:62:e9:4d:19:92:35:f9:c8:da:fb:2a:f5:
         65:96:8e:27:68:88:ef:83:e9:f7:4e:05:52:7e:0d:09:f8:0e:
         a3:b9:ee:65:39:43:0e:98:8f:1e:8e:6b:4c:a0:15:48:2c:b6:
         6b:12:0d:06:80:97:d9:df:da:80:e1:e5:d6:e0:cd:cd:e3:a9:
         ac:8f:42:4c:1c:33:aa:09:a7:9a:35:39:98:1d:1c:00:a1:bd:
         12:c7:78:63:c0:48:03:cf:48:71:2b:c6:0b:42:42:10:4d:ad:
         bd:42:3f:49:d9:61:b7:ed:ea:4f:55:3e:3e:d8:e4:51:4d:5e:
         86:5b:a2:16:f8:0f:d3:c9:a5:51:f7:f7:d2:a6:40:5f:3c:6e:
         97:5f:7e:77:3b:1f:3d:c6:60:d4:af:38:92:5b:ac:09:67:d1:
         39:cf:8c:08:18:02:b7:1e:d9:08:58:ac:4e:1d:ab:fb:92:fa:
         a3:bc:ac:06:8b:0c:1b:75:8c:e4:0d:33:0e:68:95:42:5d:af:
         8a:af:25:7e:60:f1:7d:1e:9c:08:0d:2d:d7:06:86:a3:02:df:
         2a:8d:ad:2d:2a:52:c7:b0:db:ed:43:92:9b:61:c4:90:47:43:
         8b:43:2a:df:92:be:0a:81:3c:b3:d5:77:36:ba:19:3f:e2:0a:
         b5:23:a5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:15 2025 by rpki-client