Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft
File:                     v49Do1Dk9qJgvwPtS9_BqB2itaE.mft (raw, json)
Hash identifier:          zbarCkE6Q64xX0nToaEi0EL+g2bS6EGwxxqBcQHtdd0=
Subject key identifier:   AE:3A:1F:DA:33:7F:73:F7:2A:97:A5:33:75:2D:62:98:22:68:F7:8E
Authority key identifier: BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1
Certificate issuer:       /CN=A91FAB62/serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1
Certificate serial:       06A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft
Manifest number:          0681
Signing time:             Fri 22 Aug 2025 22:46:36 +0000
Manifest this update:     Fri 22 Aug 2025 22:46:36 +0000
Manifest next update:     Fri 29 Aug 2025 22:46:36 +0000
Files and hashes:         1: v49Do1Dk9qJgvwPtS9_BqB2itaE.crl (hash: 2Kp4fJyIUw5s5ZYoH0yQjIg1lz+yM7Ql1KzNyGO3qJY=)
                          2: 606DB4B298D111EB84F5A23CC4F9AE02.roa (hash: d5GPHUQ6PbzbALE1pusneP0He2eAPmJTteAnoAOf/Gs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl
                          rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1696 (0x6a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAB62, serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1
        Validity
            Not Before: Aug 22 22:46:36 2025 GMT
            Not After : Aug 29 22:46:36 2025 GMT
        Subject: CN=68a8f34c-dbac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b6:2e:fa:37:a5:f6:0e:09:65:91:c8:95:e2:
                    bd:86:18:74:1e:f0:5d:11:ad:84:a2:87:7a:f2:f0:
                    d9:a2:ed:7d:8b:f8:dc:d6:cb:39:e9:5a:bb:a9:89:
                    4f:c1:34:fe:7a:7a:cb:51:53:2b:6f:0d:db:a4:ea:
                    26:0f:4b:1e:7a:2b:40:db:ee:c3:30:b7:ba:28:94:
                    3d:62:d4:92:bf:c2:d8:a1:73:e7:bc:e4:fd:ef:72:
                    bd:c7:6d:30:c9:d8:00:33:cc:73:95:5f:e5:c5:6c:
                    7c:a9:81:2c:c1:46:ac:26:c9:9b:77:9a:22:c3:7f:
                    fd:d7:98:11:ef:70:22:e3:d1:0a:67:5c:cc:98:51:
                    06:c0:c9:d3:69:72:8e:e7:b7:46:cd:6d:02:b8:5f:
                    49:6b:01:5a:7b:ff:07:6d:f7:2d:d8:0e:e5:22:28:
                    58:fc:2b:f7:60:6f:a8:bd:1f:a2:64:01:61:cc:56:
                    43:26:f6:41:f1:aa:57:8d:84:c7:61:b8:c1:fc:4c:
                    18:d0:d6:c1:cc:83:94:fe:db:66:d5:88:38:01:cb:
                    4c:e0:77:bb:53:df:be:0c:d6:ca:87:c5:9a:f9:3b:
                    f5:a5:24:cd:21:bf:d7:8a:0c:ce:43:dc:9c:d5:69:
                    42:b1:51:3f:55:46:c2:39:a1:68:89:2b:ed:95:da:
                    b7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3A:1F:DA:33:7F:73:F7:2A:97:A5:33:75:2D:62:98:22:68:F7:8E
            X509v3 Authority Key Identifier:
                keyid:BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d1:53:ec:a1:49:70:48:a1:74:36:72:83:ba:37:32:a0:db:
         be:f2:36:ff:2b:f5:2e:d2:90:44:ed:03:02:4c:e3:9f:e5:16:
         ae:9c:cc:2c:8e:06:04:aa:20:97:44:ae:66:80:fe:0d:22:05:
         e9:f5:13:53:fb:7d:94:71:b8:98:fc:6d:29:ca:ee:e2:08:1c:
         af:38:f2:c3:49:c8:4c:86:4a:bd:30:f1:87:3e:b3:7f:4b:bb:
         ff:b4:4d:80:09:e5:67:10:35:5e:c6:7e:b8:4e:c0:59:a5:4b:
         7e:28:b3:a2:56:79:49:55:f4:aa:c5:2c:57:6d:7b:de:df:4f:
         76:74:57:75:be:8e:6a:37:ce:cd:9c:dd:9c:9e:fe:b5:3e:01:
         05:6a:71:c6:08:0c:24:cc:25:30:5e:29:cc:e0:85:b4:92:34:
         3b:0a:2c:44:7b:23:22:00:31:52:4b:69:26:b5:6d:d8:08:7c:
         b6:0e:35:87:00:8c:f9:b9:0e:a5:82:c0:9d:3c:07:57:1d:69:
         e9:9e:ba:45:be:21:cb:8e:81:4d:c5:08:30:99:70:0c:f6:8a:
         84:94:03:b0:d2:45:a7:95:77:cb:7b:38:f5:40:da:8a:4f:57:
         37:e9:ed:6a:b5:d5:bb:92:22:b1:22:08:e4:5f:d1:1a:5f:37:
         e1:40:d0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:42:26 2025 by rpki-client