Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
File:                     eEGgmdwU4pNx5MwYVIn_riEyI0k.mft (raw, json)
Hash identifier:          mtmg23iUmfS8Y0Q3aMp2ZtYNCyd5Pl7ukkWQlvPNDvc=
Subject key identifier:   26:6B:1B:88:F8:73:06:89:4D:76:3F:96:8D:82:7D:C5:D5:74:44:F4
Authority key identifier: 78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49
Certificate issuer:       /CN=A91F8966/serialNumber=7841A099DC14E29371E4CC185489FFAE21322349
Certificate serial:       098A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
Manifest number:          0983
Signing time:             Fri 22 Aug 2025 20:14:53 +0000
Manifest this update:     Fri 22 Aug 2025 20:14:52 +0000
Manifest next update:     Fri 29 Aug 2025 20:14:52 +0000
Files and hashes:         1: eEGgmdwU4pNx5MwYVIn_riEyI0k.crl (hash: 2WyQ/c8d6TlAD7nM2vlH6bHXgri8tgFFF5V10uu6zuw=)
                          2: CA4C06CA976711EAA651F944C4F9AE02.roa (hash: IM9yFzmqS+Is/NhhSreqHJdhDGFnp0WA0QJtpqV2ULo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl
                          rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 20:14:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2442 (0x98a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8966, serialNumber=7841A099DC14E29371E4CC185489FFAE21322349
        Validity
            Not Before: Aug 22 20:14:52 2025 GMT
            Not After : Aug 29 20:14:52 2025 GMT
        Subject: CN=68a8cfbc-e8e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dd:7a:9c:68:2b:db:7e:75:2c:62:0c:7a:b5:
                    96:c9:ab:92:d0:c7:58:03:eb:62:10:ce:f7:7a:5b:
                    c8:b5:c9:9d:c8:9e:b6:7b:93:ba:21:2d:f5:f2:9b:
                    e3:ef:3e:6a:05:72:e9:0a:e0:73:27:3a:91:0d:d9:
                    e2:a7:ab:30:15:a5:f3:1c:be:62:5e:c6:a0:88:cc:
                    b2:b6:26:59:40:14:e6:23:2b:a1:d4:37:72:38:b1:
                    e5:24:6a:e8:db:46:eb:d2:8d:88:c4:18:3c:d9:72:
                    a6:cd:86:dc:93:45:82:0c:a4:2e:10:a3:4b:4d:24:
                    35:e6:93:8e:36:f0:a3:2d:7e:b4:4b:9c:14:53:00:
                    d8:89:79:2c:10:d4:06:18:62:19:89:9b:30:76:1e:
                    b4:a3:06:bf:12:1e:10:ce:3b:31:0d:65:9b:1b:a0:
                    c1:6f:27:07:e1:fe:1a:b3:77:17:ee:67:88:a9:ac:
                    05:bd:fa:fb:14:b5:c9:95:b8:36:c6:5e:b1:ad:d7:
                    26:fe:69:4b:e3:9c:71:09:b3:07:a0:b1:41:4e:c9:
                    cc:08:f8:4c:36:ee:7f:ca:2b:94:ea:63:f5:c3:89:
                    e9:c9:45:45:6f:97:d8:dd:7b:1a:46:72:1d:30:d5:
                    4e:a1:8d:06:c3:d8:91:29:16:89:36:51:92:df:b6:
                    9a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6B:1B:88:F8:73:06:89:4D:76:3F:96:8D:82:7D:C5:D5:74:44:F4
            X509v3 Authority Key Identifier:
                keyid:78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:8d:3a:42:91:01:2f:1b:a1:95:44:28:f5:01:be:b9:a6:12:
         94:b3:29:42:55:4b:b5:66:4e:59:8d:63:eb:15:63:33:0d:dc:
         8a:1a:d9:73:65:b7:ee:3f:2d:20:10:65:cf:ec:6f:f5:a8:3d:
         2a:53:2d:40:b0:56:04:80:e0:73:e2:d7:c6:c4:de:64:c5:42:
         11:13:65:c5:a5:01:3c:e9:2e:55:5b:7a:1b:49:42:2d:30:69:
         27:c9:43:33:28:9f:37:6c:31:b4:65:e4:1e:9a:4f:51:cd:b6:
         55:7b:fb:37:97:79:4d:d2:4f:6c:a1:22:45:61:ef:d2:0c:fa:
         eb:ec:54:e6:cd:3c:d5:b7:cd:ee:c4:7c:22:47:86:88:7c:89:
         3e:02:54:87:16:2b:9f:73:52:0e:a4:cf:2d:f9:52:b4:c5:79:
         3d:04:b0:e4:af:39:96:ed:b5:4e:27:2c:c9:70:f8:39:80:d7:
         cf:a0:b2:d7:a4:e7:f7:91:c3:76:a8:47:4e:73:a7:95:6f:39:
         0b:5a:8e:fe:88:a6:b9:93:de:d8:6a:65:b5:00:fe:9f:d9:9a:
         7f:2f:16:54:aa:10:ef:f1:96:07:2d:20:14:77:65:93:da:08:
         64:8b:6f:3f:bc:1b:d6:ba:1b:78:40:c9:3a:21:28:9e:26:45:
         f3:29:8d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:02:18 2025 by rpki-client