Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
File:                     31_iG3yVUhWTRHF5TYsHBmPSs04.mft (raw, json)
Hash identifier:          D48CGxVfvCUUjRkuXJj+7i5Xn/BM++A/E4y0au/0OOI=
Subject key identifier:   73:A9:F9:A2:84:94:2B:3F:15:AA:F4:23:73:44:E5:B9:82:EF:39:2F
Authority key identifier: DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E
Certificate issuer:       /CN=A91F7537/serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
Certificate serial:       9B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
Manifest number:          96
Signing time:             Sat 23 Aug 2025 06:42:37 +0000
Manifest this update:     Sat 23 Aug 2025 06:42:36 +0000
Manifest next update:     Sat 30 Aug 2025 06:42:36 +0000
Files and hashes:         1: 31_iG3yVUhWTRHF5TYsHBmPSs04.crl (hash: YK+lrwHAMYDxqJbw3lpu6Ao17V5MGLt4MelIukmadUg=)
                          2: 42F359D22DE211F0A991F83DC4F9AE02.roa (hash: GS7VGsIuP00slQDLOowlxynsnmpTUaLEp1HD+LKtTww=)
                          3: 42230DF42DE211F0A991F83DC4F9AE02.roa (hash: ak2PMRQUjFtffexIQ55kAPaMfx+wqf8bsH7hFH3Plx4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl
                          rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:42:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7537, serialNumber=DF5FE21B7C955215934471794D8B070663D2B34E
        Validity
            Not Before: Aug 23 06:42:36 2025 GMT
            Not After : Aug 30 06:42:36 2025 GMT
        Subject: CN=68a962dc-90f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fe:3e:b2:6a:2f:4f:3b:5f:63:8c:9d:13:6e:
                    ab:54:5f:ff:d1:05:a4:f1:20:71:df:9c:20:f0:ca:
                    d1:6f:c1:94:66:4f:dc:7a:9c:4a:78:7a:d4:2d:8e:
                    a8:fd:b8:ab:5a:08:f7:a5:c7:a4:79:cf:77:03:c4:
                    2b:a4:f4:38:c4:a9:67:d6:99:ed:ac:a5:7b:fe:c7:
                    7b:df:82:0d:af:45:1e:d6:40:a8:61:4d:5f:49:9b:
                    9c:18:ef:87:a9:93:ee:b3:5d:25:5c:90:fa:fb:8a:
                    fb:3d:d4:18:54:02:7c:7d:0f:2a:79:00:8a:51:85:
                    32:41:85:f2:e7:0e:d2:75:ba:43:82:5b:0c:58:4d:
                    57:04:50:23:00:59:3b:71:9b:61:75:7d:7d:45:02:
                    eb:75:b2:1e:d9:cb:84:6b:2b:86:a9:2d:b9:59:ad:
                    1e:51:28:63:15:35:8d:5f:ab:07:0f:99:f8:ac:66:
                    c1:18:55:ae:a7:12:84:c4:73:8f:f3:ac:63:a3:f9:
                    35:e8:e5:b9:39:90:1b:8f:64:2b:16:82:82:40:50:
                    e6:ec:eb:9b:fd:64:90:96:06:8b:d2:b2:b7:04:8a:
                    71:b1:ee:a3:49:81:af:e1:73:17:de:26:9d:ab:a7:
                    6c:9e:0e:13:64:69:36:36:e3:f3:66:92:07:4d:b9:
                    05:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A9:F9:A2:84:94:2B:3F:15:AA:F4:23:73:44:E5:B9:82:EF:39:2F
            X509v3 Authority Key Identifier:
                keyid:DF:5F:E2:1B:7C:95:52:15:93:44:71:79:4D:8B:07:06:63:D2:B3:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/31_iG3yVUhWTRHF5TYsHBmPSs04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/802AE646A27111EFA392F079C4F9AE02/31_iG3yVUhWTRHF5TYsHBmPSs04.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:08:b5:4d:82:8d:8e:d8:71:6c:be:9d:19:e4:9f:d1:af:b8:
         9f:60:bb:b4:34:df:a4:0d:ec:be:f1:c3:ee:e2:e9:f3:1e:a9:
         73:0c:f9:88:b8:55:cd:dc:9e:1b:fd:07:de:12:74:28:09:27:
         16:00:5a:74:e3:ac:c7:4e:44:3b:50:92:e1:c4:43:c3:99:ba:
         e7:62:5d:f1:34:b7:8b:55:0a:0f:cc:21:76:32:74:ca:bc:ba:
         44:3f:b0:b1:58:6b:e3:42:33:f2:2c:4f:d7:12:f5:6d:86:00:
         48:5b:c1:91:6f:42:f0:05:fe:c3:05:78:ca:93:3b:69:d3:ee:
         2f:8d:f1:03:6c:f0:e0:fa:68:e2:33:ff:1a:10:01:30:13:71:
         de:ec:15:92:8e:80:06:37:0b:9e:bb:ec:b4:7d:90:d2:43:f2:
         16:bb:a1:e0:06:9a:25:71:0d:49:5f:36:00:81:01:7a:43:eb:
         28:ac:39:51:ca:ec:ee:bd:7e:2a:87:13:8c:a0:f9:8f:73:45:
         75:27:52:d3:fc:dc:eb:e1:d6:46:d2:8c:6a:63:71:0b:62:b0:
         97:c2:e8:25:aa:f2:a9:37:50:74:c2:8c:30:14:3f:f4:fb:1c:
         66:09:dc:f0:67:97:55:1d:06:8e:81:9f:d7:9b:90:61:ee:70:
         b9:70:21:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:12:22 2025 by rpki-client