Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
File:                     -65NuTksgZMhr1EdxrK1qomYGfo.mft (raw, json)
Hash identifier:          S8nRx3IaqqYhyz8DVnSPqHpor1Ab+aqIf5v/D3uRTpA=
Subject key identifier:   78:25:43:D2:B5:33:87:B1:44:61:B5:88:12:1B:2B:61:6B:B2:54:D2
Authority key identifier: FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA
Certificate issuer:       /CN=A91F2D93/serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
Manifest number:          73
Signing time:             Sat 23 Aug 2025 07:06:57 +0000
Manifest this update:     Sat 23 Aug 2025 07:06:57 +0000
Manifest next update:     Sat 30 Aug 2025 07:06:56 +0000
Files and hashes:         1: -65NuTksgZMhr1EdxrK1qomYGfo.crl (hash: d/wu7oyxCAVqn+5i6MWtKVdK0AuH9eoYqzYD7DqdVRE=)
                          2: 93D86AAED76611EF9C982924C4F9AE02.roa (hash: LnJzBzEfTxjLgTZtBUJIJtCnRzaftx7eCk4WGWWItX4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl
                          rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 07:06:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2D93, serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA
        Validity
            Not Before: Aug 23 07:06:57 2025 GMT
            Not After : Aug 30 07:06:56 2025 GMT
        Subject: CN=68a96891-9410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7d:d4:5b:16:cc:c8:4b:5e:bc:6a:06:04:f1:
                    53:53:a5:4f:e1:96:18:30:ce:48:eb:0e:36:48:90:
                    ed:aa:e8:3f:cb:0d:7e:f1:28:d4:93:49:8d:93:4b:
                    b2:00:d8:0c:05:8f:8f:0e:13:b6:1f:fb:af:4b:f8:
                    aa:e5:3a:af:72:a5:81:7f:1b:3c:46:36:e9:87:08:
                    27:6b:6f:3b:fb:f2:df:da:c9:0e:2f:3c:50:06:bc:
                    23:5b:a4:ae:08:cb:b5:d1:82:f6:5a:35:ea:42:97:
                    c8:f8:4f:f4:e7:f8:0d:d8:85:51:2a:37:c9:08:08:
                    2f:d0:b4:d0:01:70:38:cb:63:98:58:35:a3:c6:09:
                    0a:8f:68:32:3b:7c:e4:84:a0:ba:ae:b8:5c:c4:95:
                    ed:21:75:22:5a:96:be:cc:cb:52:e8:6e:ae:33:30:
                    0c:79:de:79:3e:a4:90:de:99:d3:85:e5:95:83:d6:
                    54:5e:0a:f0:c1:61:7e:4d:e3:8d:cc:10:ae:fb:c6:
                    75:f4:9c:34:cf:b5:37:ac:14:62:37:91:aa:5d:86:
                    94:ad:ec:28:07:9b:4c:16:15:88:b1:a7:0e:6c:43:
                    aa:ac:55:3e:ff:d3:df:80:96:7f:e8:2f:7f:08:41:
                    02:b3:3e:35:e2:4e:7f:fa:1e:7b:b5:49:f0:01:21:
                    52:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:25:43:D2:B5:33:87:B1:44:61:B5:88:12:1B:2B:61:6B:B2:54:D2
            X509v3 Authority Key Identifier:
                keyid:FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:55:d0:ac:3b:96:e4:39:a7:3b:57:68:75:e2:bd:9a:3d:f5:
         6c:ed:72:44:b7:39:6d:c6:1a:4b:82:ab:77:55:18:41:93:8b:
         57:99:d6:32:0c:18:81:ac:26:8c:a6:47:5e:22:32:26:0c:0c:
         5e:2b:0d:81:4a:5f:20:62:5d:c9:40:9e:f6:21:9f:19:58:ed:
         d5:42:94:a2:98:86:5f:91:ba:c9:44:e3:39:1d:33:f1:94:ac:
         97:26:bf:09:ee:0d:a1:4d:8e:21:fc:38:fa:c3:5c:87:f6:c5:
         c8:b0:e8:fa:ed:71:93:d6:61:db:52:ea:e2:e1:30:56:e2:99:
         26:3b:c8:37:1d:16:96:d8:d1:0f:12:da:e9:75:3f:2e:50:ce:
         ad:20:44:f0:7f:dd:ef:c3:cf:43:08:d2:de:b2:3e:d7:74:44:
         f5:16:36:c9:dd:e1:88:e4:5f:08:8b:eb:3c:71:e3:c3:b2:92:
         af:a5:85:37:f3:96:44:02:02:20:b5:4a:76:47:76:e4:0d:77:
         5e:2f:30:a0:05:83:69:f3:26:1a:b8:42:a1:09:07:3d:53:31:
         66:66:a4:9c:3f:19:7f:19:8d:43:af:fa:63:cf:c1:01:f6:b4:
         a8:7d:b8:5e:92:ab:fc:b4:b8:34:9c:bc:75:7b:ea:94:da:38:
         0a:fe:35:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:22:19 2025 by rpki-client