Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
File:                     O8azIf17YMVg8V19JMrFozdED7Q.mft (raw, json)
Hash identifier:          DbXOLt9fA76fLIj3FVfJ4+wgxb5LIP0KNLlt++CQRLw=
Subject key identifier:   23:AA:48:94:AF:67:B0:CB:55:8C:81:6F:05:95:E5:4A:40:B5:05:B1
Authority key identifier: 3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4
Certificate issuer:       /CN=A911980F/serialNumber=3BC6B321FD7B60C560F15D7D24CAC5A337440FB4
Certificate serial:       0730
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
Manifest number:          0728
Signing time:             Fri 22 Aug 2025 21:58:41 +0000
Manifest this update:     Fri 22 Aug 2025 21:58:41 +0000
Manifest next update:     Fri 29 Aug 2025 21:58:41 +0000
Files and hashes:         1: O8azIf17YMVg8V19JMrFozdED7Q.crl (hash: i4wzaPDzKgQt6d2V/BYOgVUihwmKJXffWXBPIVwL6qU=)
                          2: 9FAB1ADC65C111EF8769DC14C4F9AE02.roa (hash: WiTy8cm0FJ/aEESc91vlgZl0JT8P/pFPtZ2Ry9TBveA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.crl
                          rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1840 (0x730)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911980F, serialNumber=3BC6B321FD7B60C560F15D7D24CAC5A337440FB4
        Validity
            Not Before: Aug 22 21:58:41 2025 GMT
            Not After : Aug 29 21:58:41 2025 GMT
        Subject: CN=68a8e811-474a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9d:10:58:95:2e:cc:5f:09:a9:64:bf:5c:1c:
                    7d:71:14:bd:36:65:4d:b8:46:a5:3e:08:28:d6:48:
                    f8:7c:56:d3:63:e8:cb:66:64:e8:13:69:19:af:06:
                    73:c0:d7:d2:56:55:28:71:e5:1e:1e:3a:bd:e7:65:
                    36:cc:ef:f7:c8:9d:24:c5:60:65:47:94:fa:1f:e2:
                    a9:c2:9c:c8:80:47:8a:50:fa:c7:8b:83:44:ee:e5:
                    82:cb:4c:61:74:05:52:f9:7a:ae:a9:6e:98:ae:c0:
                    5a:7a:3e:7e:1f:4a:2c:f0:51:84:96:e8:7a:cf:65:
                    0c:01:25:4b:41:67:c3:6b:4a:36:b1:00:a3:35:04:
                    e7:7c:34:9e:e5:38:c7:50:80:e1:da:39:81:00:cb:
                    20:e0:33:2e:21:2a:55:0e:d6:9f:9e:e0:af:76:6f:
                    f9:7c:a0:77:5a:c4:1b:b8:5f:4c:b5:55:22:dd:b6:
                    f1:8c:5c:75:6c:ed:b2:12:e2:7b:e5:3c:3f:fe:72:
                    a3:af:54:12:a8:e9:50:2b:20:94:ae:1f:73:45:5c:
                    78:cf:3f:3a:d6:71:b7:eb:5c:8d:fc:2a:17:5c:76:
                    b0:b9:6a:67:e4:1b:fe:69:18:64:2e:bf:1a:24:ab:
                    24:1f:5f:19:d9:db:0a:14:43:53:77:fe:81:83:ef:
                    fe:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AA:48:94:AF:67:B0:CB:55:8C:81:6F:05:95:E5:4A:40:B5:05:B1
            X509v3 Authority Key Identifier:
                keyid:3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:ef:31:19:d7:c1:94:8f:fc:6d:0a:2d:06:c5:88:35:ba:91:
         2c:31:e0:83:54:db:6e:9b:c9:aa:6a:5d:21:44:21:98:e0:f4:
         1c:01:bb:16:de:ce:8c:be:f1:f5:34:3f:0b:a0:ab:37:a3:9b:
         fc:cf:bb:d4:cc:ef:50:e2:ae:9f:26:63:10:70:0e:76:5b:da:
         4b:ba:7a:31:2f:46:a2:36:9f:09:81:24:3d:98:6e:eb:a5:ea:
         00:d0:4c:42:81:a9:d1:ea:2e:3e:8a:0c:b9:13:60:b1:b7:4b:
         6e:9b:99:70:da:36:49:a1:cf:3a:df:60:c1:61:d3:bd:df:eb:
         08:91:82:5a:cf:aa:53:05:31:da:22:9f:1a:c3:cf:d8:33:82:
         29:a1:a3:d7:3e:fc:63:33:ef:a8:c9:d6:e0:4b:e0:0f:56:99:
         06:62:d6:75:8d:b7:fd:b6:af:93:50:cc:6c:c9:ea:07:c0:10:
         ca:5a:4b:d7:b5:b1:83:2c:43:31:ec:51:6d:33:14:fb:5d:b2:
         73:d1:d4:11:f0:7c:ae:2e:ec:ef:e6:64:d7:c4:d5:15:8a:f4:
         84:af:dc:4c:32:49:09:dc:61:4d:56:3d:cc:0f:bd:41:ff:ab:
         07:60:53:0c:ad:d7:3b:d8:0b:ff:2a:a1:01:9e:f3:22:49:cc:
         07:54:fe:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:44:39 2025 by rpki-client