Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft
File:                     stpsovF-3e60xFAzYfTYgigLyog.mft (raw, json)
Hash identifier:          LsJ0LuSs6tij97pPkcjFRic8ST+ZOeP0Tn/+s65aJgI=
Subject key identifier:   FF:96:7C:46:5D:EE:1A:70:1F:7B:85:E2:87:A7:2C:3D:44:C9:EE:AC
Authority key identifier: B2:DA:6C:A2:F1:7E:DD:EE:B4:C4:50:33:61:F4:D8:82:28:0B:CA:88
Certificate issuer:       /CN=A9122FD2/serialNumber=B2DA6CA2F17EDDEEB4C4503361F4D882280BCA88
Certificate serial:       0815
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stpsovF-3e60xFAzYfTYgigLyog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft
Manifest number:          0815
Signing time:             Fri 22 Aug 2025 20:58:30 +0000
Manifest this update:     Fri 22 Aug 2025 20:58:30 +0000
Manifest next update:     Fri 29 Aug 2025 20:58:30 +0000
Files and hashes:         1: stpsovF-3e60xFAzYfTYgigLyog.crl (hash: K0RapzjwE3ElKBoM6qYo7rwB7GAB6q4cmLgmkje/Ut8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.crl
                          rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stpsovF-3e60xFAzYfTYgigLyog.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 20:58:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2069 (0x815)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122FD2, serialNumber=B2DA6CA2F17EDDEEB4C4503361F4D882280BCA88
        Validity
            Not Before: Aug 22 20:58:30 2025 GMT
            Not After : Aug 29 20:58:30 2025 GMT
        Subject: CN=68a8d9f6-d810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a8:4b:c5:c1:5d:26:22:b6:57:5c:27:9a:b2:
                    2d:0d:92:7e:2d:27:47:94:15:78:ac:b5:af:80:c2:
                    b4:8b:f0:cf:b7:91:4a:d4:4b:77:bc:1d:7c:60:3e:
                    46:e9:f5:8b:f7:a7:60:fc:96:c1:19:a8:0e:8c:d6:
                    30:d6:73:a6:ac:e7:bf:75:9e:f9:76:d6:b9:1f:9f:
                    ef:48:81:3a:53:20:86:3a:80:56:b0:dd:ec:3f:03:
                    72:66:8f:7b:60:23:7c:13:67:05:99:8d:a1:25:2c:
                    e6:89:c0:96:ac:08:5b:16:69:96:90:6f:36:7d:27:
                    b3:78:d8:86:5c:70:28:54:6f:5c:3a:d8:f1:b4:3f:
                    5c:e6:0e:8d:a8:83:dd:6b:08:6b:9c:1e:de:24:46:
                    3b:be:63:92:3f:98:85:19:04:43:33:70:7b:45:53:
                    ae:35:6a:d4:5e:be:8a:87:9a:f9:5e:21:64:3e:2a:
                    f3:77:fe:b9:b9:fb:16:4c:68:48:4e:8f:19:4e:d3:
                    09:91:92:6d:1f:10:e8:24:1a:a7:85:d4:88:1d:b7:
                    92:81:0c:a4:8c:e0:42:89:b3:46:72:2d:ad:e6:0d:
                    25:41:6f:60:12:2e:fe:9a:c0:5b:80:6f:df:61:ac:
                    9a:7b:8a:04:51:a3:2b:3e:f0:29:2c:61:f7:a5:9b:
                    6d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:96:7C:46:5D:EE:1A:70:1F:7B:85:E2:87:A7:2C:3D:44:C9:EE:AC
            X509v3 Authority Key Identifier:
                keyid:B2:DA:6C:A2:F1:7E:DD:EE:B4:C4:50:33:61:F4:D8:82:28:0B:CA:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stpsovF-3e60xFAzYfTYgigLyog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:0b:85:94:a7:d6:ec:3c:c5:ef:07:b1:92:9b:fd:a6:d6:99:
         59:ec:24:09:99:43:b9:22:ac:ce:29:84:80:a5:47:db:3b:f8:
         af:4f:d4:de:77:8d:90:f2:80:0c:62:70:bb:1e:81:5f:e4:90:
         ba:24:f2:e1:b4:d7:11:ce:7b:a0:5e:fb:6d:d5:24:b5:09:1e:
         45:ad:e1:f7:bb:0c:db:17:01:24:cb:6c:47:ab:af:2c:cd:4f:
         d9:2c:ad:7d:3b:9c:50:bf:ea:f0:a3:0e:c3:e2:f3:c9:4c:32:
         ca:34:d5:2d:31:e2:c9:01:50:9c:36:e6:c3:dd:60:cc:7e:77:
         bf:0e:7b:03:2e:6a:cf:c7:56:85:c2:77:fd:2b:47:46:9b:d1:
         17:8c:8b:ec:fa:32:01:35:63:62:b2:5a:e5:e3:6e:a6:3b:10:
         10:de:a4:3c:a9:82:ca:e7:61:5c:a7:0c:11:d4:4f:06:aa:bf:
         6f:03:14:59:d5:07:05:78:63:cf:0d:12:99:2d:16:cb:92:95:
         d5:63:20:3e:9e:55:56:8d:39:7f:e5:4e:b3:e5:e1:c5:58:08:
         bb:85:d8:a2:fc:da:c8:2f:6f:a5:53:09:b7:da:7e:bb:bc:38:
         41:07:4f:96:9a:8b:e7:56:df:aa:4f:a0:03:4f:d5:76:70:28:
         4d:71:f2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:48:31 2025 by rpki-client