Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft
File:                     drnTOfrNYrR-k-iITehQOW2877Q.mft (raw, json)
Hash identifier:          h9bxn8MwgqW9ONkFma9C8i30CKOunnZYVnP0yJD8EQI=
Subject key identifier:   FB:09:6E:FA:D6:38:62:EB:60:98:B6:54:76:6E:3C:AD:C4:FA:53:25
Authority key identifier: 76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4
Certificate issuer:       /CN=A911E6CA/serialNumber=76B9D339FACD62B47E93E8884DE850396DBCEFB4
Certificate serial:       0B15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft
Manifest number:          0AFD
Signing time:             Fri 22 Aug 2025 19:30:53 +0000
Manifest this update:     Fri 22 Aug 2025 19:30:52 +0000
Manifest next update:     Fri 29 Aug 2025 19:30:52 +0000
Files and hashes:         1: drnTOfrNYrR-k-iITehQOW2877Q.crl (hash: PA04yjg8So1TtJISS7iXPSDS9sz603ZwO3J7poAQ6sg=)
                          2: 83882F7AF83B11ECB4154E31C4F9AE02.roa (hash: YH3lhLXoSVbhjIpXiN2vn5qlApvWo5uVmDvE4K7XYgk=)
                          3: 4FFC83964CA311EE815AF017C4F9AE02.roa (hash: UA3Z3TNFXnNBwmElq5Ec0QuBLoZlUKqnBYT4/k/3BsY=)
                          4: AA1ABF0AB20011EA9C0DFB2FC4F9AE02.roa (hash: FcXy6QLc2Tvjs24Fp66P1cwtAXMmWgi5gNPzljev1BY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.crl
                          rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 19:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2837 (0xb15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E6CA, serialNumber=76B9D339FACD62B47E93E8884DE850396DBCEFB4
        Validity
            Not Before: Aug 22 19:30:52 2025 GMT
            Not After : Aug 29 19:30:52 2025 GMT
        Subject: CN=68a8c56d-b02f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:01:66:fd:32:28:70:46:42:43:c8:a9:86:8a:
                    58:6d:b0:ab:e0:73:1d:eb:31:81:8c:49:b6:1b:98:
                    77:dd:e4:89:d5:db:b2:3e:bc:dc:23:2f:13:6d:d1:
                    08:14:1e:f0:89:b6:6b:fd:c5:e8:97:18:0b:10:6f:
                    c1:9c:9f:b2:26:cf:36:7d:d4:1f:12:f7:2e:18:f0:
                    43:1e:34:cf:f7:7d:e1:79:54:dd:e5:d2:80:06:cf:
                    29:3a:45:2e:6a:21:8d:3a:1b:9c:e9:c6:c0:5c:ad:
                    f0:3c:2f:db:8b:a1:15:f3:5e:69:b5:84:7f:d2:1d:
                    a6:b8:81:97:2e:7a:47:20:a6:3f:bf:d8:2d:35:fc:
                    c5:6b:64:1f:06:8a:a6:3c:55:46:f8:c3:13:02:81:
                    c8:48:e4:f8:18:ed:90:51:fd:6e:62:34:18:7b:65:
                    53:e8:1f:db:88:80:b8:40:60:d7:41:6e:8a:6f:ec:
                    dd:b2:66:d7:ec:c6:94:1d:f0:b8:4c:99:78:ea:81:
                    af:2c:86:42:77:05:a2:83:a9:c3:8d:dd:83:aa:29:
                    70:90:02:5e:eb:e2:14:79:af:ef:a8:08:91:28:88:
                    1e:ab:00:3d:04:95:6b:fd:dd:6d:e9:91:30:8c:b0:
                    0d:cf:d1:ac:46:dc:5d:ed:44:19:f2:51:c4:fd:60:
                    88:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:09:6E:FA:D6:38:62:EB:60:98:B6:54:76:6E:3C:AD:C4:FA:53:25
            X509v3 Authority Key Identifier:
                keyid:76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:10:c8:6a:15:91:3d:f2:53:8f:99:ea:0c:08:2b:d2:9f:b5:
         85:25:c2:03:bf:1c:b4:ae:9a:ec:ee:35:f5:bf:cd:7c:7d:8b:
         90:0d:7f:7e:d7:ea:b1:f8:37:22:26:ac:12:2d:d9:69:b7:27:
         d1:8f:2e:02:5f:dd:b9:30:98:fb:23:f6:2e:91:c2:a8:84:50:
         72:db:51:3d:e3:23:33:0c:31:49:9b:68:6d:90:0a:76:07:ac:
         ef:8d:fd:93:29:14:33:21:99:af:55:5a:2d:9a:34:2e:2d:c8:
         ac:b8:92:08:59:b4:4a:ae:ba:ae:9f:50:3a:de:25:1d:62:60:
         ab:43:3e:5a:1b:03:a2:18:17:f7:8c:b4:19:ff:b1:df:c6:5b:
         61:90:39:df:93:03:af:3a:d8:c3:2a:2f:1f:81:66:8f:78:be:
         81:1d:e2:1b:0a:bd:35:90:6f:11:aa:91:f6:53:54:c9:10:b5:
         03:13:4e:e2:74:38:e5:16:2a:62:dd:7d:27:27:94:d7:26:5c:
         63:bf:cc:bc:9c:77:1b:75:ad:ad:3a:60:e7:0c:3c:b5:2d:32:
         22:e3:e1:8a:71:c8:cb:b6:36:d4:a1:35:01:86:a3:03:6c:fc:
         d6:0c:e3:f5:05:4e:47:58:1f:33:2e:75:85:9f:4c:40:83:80:
         f7:5f:7b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:36:09 2025 by rpki-client