Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft
File:                     gmtEdLxvTzvkC151EfEFyuf-jAw.mft (raw, json)
Hash identifier:          E7TcOIroJPc2c/KGtl9ayYPmkH1hjAWjFr2Oc/pcb1E=
Subject key identifier:   78:D8:5C:71:64:49:C6:D3:EB:A3:46:B2:77:49:35:85:09:3F:83:E6
Authority key identifier: 82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C
Certificate issuer:       /CN=A91FAB3C/serialNumber=826B4474BC6F4F3BE40B5E7511F105CAE7FE8C0C
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft
Manifest number:          14
Signing time:             Sat 23 Aug 2025 08:18:30 +0000
Manifest this update:     Sat 23 Aug 2025 08:18:30 +0000
Manifest next update:     Sat 30 Aug 2025 08:18:30 +0000
Files and hashes:         1: gmtEdLxvTzvkC151EfEFyuf-jAw.crl (hash: Cn/w+1nyMojk4dlsi76q/oj44+C/7oovtcwfjRGuFIw=)
                          2: B92859F46EF611F0BEAA5130C4F9AE02.roa (hash: KxrlmGdN300w3GzZo2NWvwcNeTUF77b4vkK7jJtow4Y=)
                          3: 90BDD67E6EF611F0B80A0E30C4F9AE02.roa (hash: YAsradZ2aJS18fpOaKgFCMVexkVrOXolStNUtaxy12E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.crl
                          rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 08:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAB3C, serialNumber=826B4474BC6F4F3BE40B5E7511F105CAE7FE8C0C
        Validity
            Not Before: Aug 23 08:18:30 2025 GMT
            Not After : Aug 30 08:18:30 2025 GMT
        Subject: CN=68a97956-311d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:62:7b:8a:97:bc:22:b8:76:54:28:c5:7d:78:
                    06:d3:ee:fd:4d:3e:43:7f:07:1e:82:2d:34:4c:75:
                    07:90:4d:7d:f0:ee:d1:90:e7:10:65:d8:1f:28:7a:
                    4a:ab:fc:b1:03:04:21:5d:9b:08:83:b3:74:c1:0f:
                    24:3e:73:d4:4c:f8:29:23:c6:7c:e9:40:8d:1d:4a:
                    87:17:52:64:0b:48:33:93:c6:b3:e8:e9:32:a9:9f:
                    b0:3b:30:98:4f:39:d4:bf:c6:cc:74:f0:79:dc:ae:
                    9e:00:1b:a3:f7:6f:ff:93:cc:b1:e3:f6:90:eb:72:
                    a7:fe:b3:be:1c:dd:88:4e:1a:f8:7d:66:7b:78:ef:
                    8e:42:03:93:d2:b6:96:8e:2f:43:d3:4d:a0:8c:ed:
                    1a:66:da:4b:14:82:cb:3d:4a:f8:1b:ca:6b:31:ed:
                    53:41:f1:6b:c4:19:a4:9e:99:71:38:5b:d1:19:2f:
                    a8:00:0c:93:70:3a:10:bc:6c:29:c2:c9:50:d2:ae:
                    7f:3f:0d:88:94:ab:4b:4f:d8:81:f2:51:01:b2:a8:
                    c6:cf:b9:56:55:0d:da:9b:f5:93:f6:f4:6a:49:95:
                    75:54:27:c9:67:2a:9a:89:5c:eb:6d:a1:6d:f0:28:
                    37:46:b6:55:3c:dd:33:f7:06:ad:d6:07:45:35:74:
                    33:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D8:5C:71:64:49:C6:D3:EB:A3:46:B2:77:49:35:85:09:3F:83:E6
            X509v3 Authority Key Identifier:
                keyid:82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:4f:9d:eb:94:1b:35:89:d9:62:5b:0e:98:4e:d2:f9:05:1d:
         84:72:c6:33:28:8d:7e:99:68:93:28:7b:11:3e:c7:41:90:ec:
         ee:e5:e1:89:fe:29:f2:22:86:c5:37:49:07:89:7d:71:ed:d8:
         88:5e:c7:e9:f7:84:24:6c:c0:68:9a:7d:32:66:34:c5:f7:a7:
         78:72:3a:b2:fc:38:ec:aa:18:3a:c4:9a:79:4d:84:43:cd:74:
         28:0f:7c:47:5d:c4:30:80:28:1c:58:cd:88:3c:f6:00:07:39:
         db:18:93:44:e8:83:dc:d1:15:61:a7:74:8b:61:fc:31:89:bb:
         ee:7b:ae:21:14:1a:3a:32:16:04:9f:43:d1:3f:48:e7:46:d6:
         0e:a4:c9:05:fc:d5:db:33:ae:69:38:70:f9:6b:e8:1b:02:bb:
         d5:54:e4:f3:95:af:64:45:d2:09:8f:5c:f7:68:5c:53:f1:81:
         b9:30:92:34:3c:c1:0a:d1:5b:d1:bd:16:71:0d:d0:b2:f4:a8:
         9f:26:08:b7:ce:df:f4:e9:e0:5e:14:fc:e5:96:10:34:67:d6:
         85:f3:ae:29:71:c9:d4:16:ae:10:91:58:97:68:e9:ba:01:4c:
         94:31:1b:39:de:84:d9:bf:ac:99:da:ce:dc:00:36:5f:f2:d3:
         ae:ad:b4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:52:08 2025 by rpki-client