Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft
File:                     eHZtYCpA71cBQmhKcj6KNAxv84I.mft (raw, json)
Hash identifier:          pjBxbS99oo5/Sex9UaHPUMf2aIQXo5z3AUQ9XHBJeFg=
Subject key identifier:   CF:FD:E6:E8:5E:23:40:D4:6C:0F:A0:71:D5:B3:97:55:A7:41:FB:A4
Authority key identifier: 78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82
Certificate issuer:       /CN=A912A70D/serialNumber=78766D602A40EF570142684A723E8A340C6FF382
Certificate serial:       0472
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft
Manifest number:          046E
Signing time:             Sat 23 Aug 2025 00:21:44 +0000
Manifest this update:     Sat 23 Aug 2025 00:21:44 +0000
Manifest next update:     Sat 30 Aug 2025 00:21:44 +0000
Files and hashes:         1: eHZtYCpA71cBQmhKcj6KNAxv84I.crl (hash: 0wepUYuNR6Ii2c7p+UfYgwKE5JZQ/R4omFcf7Bg5GE4=)
                          2: 90AE61AC595711EC8761C361C4F9AE02.roa (hash: xHB6klxUWxKIW0ZETWDrSBAoOokIy/M1aOS9u4crx4w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl
                          rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 00:21:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1138 (0x472)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A70D, serialNumber=78766D602A40EF570142684A723E8A340C6FF382
        Validity
            Not Before: Aug 23 00:21:44 2025 GMT
            Not After : Aug 30 00:21:44 2025 GMT
        Subject: CN=68a90998-5430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f1:04:c2:27:a4:81:e7:19:c0:6d:3b:20:81:
                    8b:a4:9f:02:9f:18:b5:a8:ef:27:40:bc:c0:08:05:
                    2c:20:33:d4:15:88:2e:d9:36:64:d9:77:c4:03:b3:
                    56:0f:24:6d:73:0c:99:2b:bc:59:21:a8:fd:97:5b:
                    e0:0d:83:f9:65:9d:74:29:10:e7:a3:d8:3f:a8:e3:
                    52:23:67:9d:10:b3:03:0e:f7:95:d9:24:48:64:80:
                    9a:d4:0c:06:80:f6:03:e2:9d:47:ab:c3:8d:92:8d:
                    e9:70:16:2b:26:aa:37:d5:ee:ec:4c:e2:4d:86:21:
                    c8:30:e6:a1:ab:6e:c2:a5:62:b6:40:1b:97:2e:5c:
                    17:70:bf:5e:c8:66:50:04:56:eb:7a:f9:0c:f1:c8:
                    ce:31:2f:b5:df:5e:c1:0a:eb:5d:1b:0e:d3:c7:2f:
                    f6:8f:2d:d2:b0:33:3c:45:fd:c6:39:cf:f5:df:f5:
                    b3:63:e4:19:f9:ed:04:a0:ce:d3:d8:e7:f4:df:0f:
                    af:2b:3f:8e:f0:ed:ba:8c:b0:7a:07:82:f2:5b:c9:
                    c6:99:bb:35:9a:c7:f2:a2:5a:d7:c5:58:2d:42:70:
                    6a:5e:61:4c:05:20:fa:81:3c:eb:b8:43:ac:9e:e9:
                    c0:fd:52:12:cb:f0:41:29:ce:f1:f1:31:72:0d:37:
                    69:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FD:E6:E8:5E:23:40:D4:6C:0F:A0:71:D5:B3:97:55:A7:41:FB:A4
            X509v3 Authority Key Identifier:
                keyid:78:76:6D:60:2A:40:EF:57:01:42:68:4A:72:3E:8A:34:0C:6F:F3:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHZtYCpA71cBQmhKcj6KNAxv84I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A70D/1114C9BA595011ECAE093282C4F9AE02/eHZtYCpA71cBQmhKcj6KNAxv84I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e9:4d:e5:42:ef:c9:91:fe:43:b0:98:d9:52:ca:b4:e8:fe:8f:
         80:80:63:82:ca:21:ac:bd:69:c4:04:f4:2e:5d:a7:06:82:f0:
         21:6f:e2:67:32:a3:14:8b:45:16:60:fa:c7:c8:4d:63:1b:bf:
         c0:f8:fc:8a:8e:9b:7b:34:c2:48:05:c0:f8:a2:92:51:40:f0:
         ff:a1:d7:fe:c5:e6:c3:14:d2:c1:6b:a3:5b:2b:f4:5a:48:7f:
         43:78:2c:13:26:a6:4d:c4:8f:f7:92:e3:20:b6:8f:c3:48:d3:
         27:18:1b:79:e9:52:d9:6a:10:8a:aa:c8:fc:8f:ea:13:ed:f2:
         70:23:1b:28:eb:9c:26:c6:50:06:fd:f3:b2:ac:b6:18:78:ed:
         8c:55:d0:a4:1d:87:b6:75:d7:24:5e:93:eb:7f:77:45:e8:77:
         0b:51:48:c1:63:9e:c9:d6:83:8a:b1:2d:50:06:3a:6d:4f:8f:
         b2:ec:fd:c5:d8:92:59:75:42:b6:32:96:6a:44:7a:9d:ee:54:
         85:6f:ac:56:61:e6:37:a6:90:36:f6:bb:9d:82:26:af:02:08:
         3d:ab:d0:8f:f5:17:d5:00:0f:30:98:01:1f:92:f4:15:a3:74:
         3f:16:0c:20:9a:55:b9:07:8e:53:2e:a8:d6:dc:d4:2e:b1:6c:
         3a:eb:d4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:39:28 2025 by rpki-client