Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
File:                     30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft (raw, json)
Hash identifier:          KAOGfCREDSdrIn1ZrAEvyX0xBW03tlzdDDNrd81L0R8=
Subject key identifier:   00:BB:48:24:77:82:C3:7C:73:1E:49:BF:4C:A2:CF:AB:B2:81:75:A9
Authority key identifier: DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93
Certificate issuer:       /CN=A9118479/serialNumber=DF4069F246E9FEA97B0ABE3A5FEC778E53931793
Certificate serial:       34B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
Manifest number:          34B3
Signing time:             Fri 22 Aug 2025 15:03:00 +0000
Manifest this update:     Fri 22 Aug 2025 15:02:59 +0000
Manifest next update:     Fri 29 Aug 2025 15:02:59 +0000
Files and hashes:         1: 30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl (hash: 9+gk4BhTfFknJqiTt3rXf92JEWJJvpWvAYGiMFEf2a4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl
                          rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 15:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13491 (0x34b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118479, serialNumber=DF4069F246E9FEA97B0ABE3A5FEC778E53931793
        Validity
            Not Before: Aug 22 15:02:59 2025 GMT
            Not After : Aug 29 15:02:59 2025 GMT
        Subject: CN=68a886a4-20f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:af:e6:b9:9c:e6:67:2e:79:e7:a3:76:cf:7f:
                    d0:35:13:03:1d:f8:36:e8:1c:79:fe:ed:32:b1:e0:
                    57:c6:ea:51:2b:a9:6d:30:06:3a:c6:8c:77:ba:0e:
                    0b:30:b6:ae:8d:48:52:94:3f:54:19:f5:10:05:be:
                    7b:a1:04:00:2c:17:2a:ad:7c:c1:85:09:60:31:1d:
                    ce:f2:73:c0:e2:4d:21:14:bf:ad:9c:b6:ae:dd:15:
                    e8:79:04:8d:ea:3a:05:4d:28:93:e5:0c:af:e1:9c:
                    af:5c:1d:d5:90:a1:93:0f:5e:e7:ad:4f:34:f4:4d:
                    58:ae:dc:e5:15:61:e5:8d:a4:67:d1:d6:d2:9a:ab:
                    22:ac:cf:1c:7f:63:42:51:7c:ed:f0:86:81:12:d9:
                    f1:0b:04:af:78:3f:a9:53:92:50:43:1b:fd:fc:8c:
                    29:9c:9f:6a:28:16:67:16:93:11:13:d7:a7:46:7f:
                    f6:d3:8b:73:ec:d3:4f:07:08:d4:d7:cd:bd:35:3c:
                    f2:b9:1d:a6:19:76:8d:a8:99:17:79:86:28:35:6b:
                    73:36:6d:da:92:43:27:30:84:83:df:81:66:cd:2c:
                    6c:5d:77:d7:4c:44:4c:ae:e7:08:1e:d9:d8:45:f9:
                    f7:f3:d4:b7:49:31:c1:57:91:11:ce:7b:86:f7:7e:
                    d0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BB:48:24:77:82:C3:7C:73:1E:49:BF:4C:A2:CF:AB:B2:81:75:A9
            X509v3 Authority Key Identifier:
                keyid:DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:60:f5:52:63:15:fe:94:03:17:3b:43:77:74:e9:6b:68:11:
         df:41:90:c9:5d:75:d9:bf:44:c2:c1:8c:58:a7:59:f5:85:05:
         65:ec:6a:f3:a7:6b:39:a7:b2:70:aa:3d:08:b5:03:cf:3e:16:
         02:04:21:5a:eb:09:05:db:93:1e:67:6b:53:ae:27:28:76:68:
         b2:ee:73:3e:a7:82:61:55:b3:ce:65:5c:46:5c:a9:dd:10:b3:
         5a:23:15:49:de:78:41:72:18:ac:32:ef:01:4b:21:d1:fd:d0:
         3c:85:90:77:ec:26:96:08:05:30:7c:f6:dc:bb:94:7f:c2:c3:
         69:80:35:f7:a4:30:1f:be:66:54:ca:f0:f2:2b:27:63:64:ab:
         57:16:a2:1e:1a:dd:b2:ec:39:e2:28:3e:36:2b:e4:d7:50:f8:
         03:39:c1:9d:d5:b3:7b:43:fa:4d:f1:b8:9a:bf:f6:dd:ae:a8:
         70:5e:f0:30:36:bb:2c:62:87:83:29:af:d0:bc:c4:f7:83:09:
         bf:da:97:70:35:59:5f:e8:ec:26:c5:15:08:aa:45:63:a1:dd:
         62:ab:5b:a7:4f:9d:59:6d:20:7c:22:ab:e5:94:28:44:1e:6f:
         3e:45:d8:34:dc:96:08:81:4b:18:9f:ee:04:e9:12:d1:b6:28:
         a3:28:34:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:03:02 2025 by rpki-client