Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft
File:                     ISgYkHWJssqEa0nRCd0zrJ4utUM.mft (raw, json)
Hash identifier:          b5vz3sRM16JzWOvuFnVlDI/BEIe5iIq5V92BN84Tsio=
Subject key identifier:   E4:F3:FA:C6:71:D5:37:CE:29:23:43:00:2B:63:99:97:1C:97:A0:9C
Authority key identifier: 21:28:18:90:75:89:B2:CA:84:6B:49:D1:09:DD:33:AC:9E:2E:B5:43
Certificate issuer:       /CN=A913695E/serialNumber=212818907589B2CA846B49D109DD33AC9E2EB543
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft
Manifest number:          1F
Signing time:             Sat 23 Aug 2025 08:05:54 +0000
Manifest this update:     Sat 23 Aug 2025 08:05:53 +0000
Manifest next update:     Sat 30 Aug 2025 08:05:53 +0000
Files and hashes:         1: ISgYkHWJssqEa0nRCd0zrJ4utUM.crl (hash: rrL+UAThC5Loct25p5qvgN2JhzlKjuFDm2HT9pTc8Do=)
                          2: 499C2F0A534111F089393B42C4F9AE02.roa (hash: fSSf7ryiBLDRlZlFztp2IYlUMMSWWQRmpXOgQAMLAFs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.crl
                          rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 08:05:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913695E, serialNumber=212818907589B2CA846B49D109DD33AC9E2EB543
        Validity
            Not Before: Aug 23 08:05:53 2025 GMT
            Not After : Aug 30 08:05:53 2025 GMT
        Subject: CN=68a97661-2f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:6b:7d:4b:30:01:0f:11:dc:4e:b1:ba:0b:5f:
                    b6:21:d7:8b:a1:eb:18:88:48:1e:23:c5:97:a9:13:
                    0d:e3:32:95:22:4c:61:85:6f:e5:89:2a:a4:80:a2:
                    7a:d4:bc:e4:fc:a6:18:3c:d6:01:14:12:d3:f3:32:
                    09:70:25:c4:bb:8f:bd:b3:4b:0b:e6:73:60:5c:0d:
                    07:01:88:0e:7b:bf:17:e5:bc:19:f2:1a:ef:87:3b:
                    12:66:a9:7b:c9:11:85:dc:db:9c:c6:64:a6:2a:77:
                    8a:27:5d:8c:73:63:95:fd:e8:44:d2:af:7a:07:1a:
                    72:2a:8a:ba:69:e3:95:bf:ca:ee:66:e2:30:18:7f:
                    d5:e5:92:08:5e:1b:56:a1:6d:df:b6:5a:d1:bb:2b:
                    55:7a:12:bb:34:ee:8d:68:8d:13:fc:b5:b5:f8:1c:
                    08:98:70:14:7e:73:46:3f:ee:0c:73:02:79:a7:b0:
                    e3:f2:ee:1f:8d:b5:04:c2:01:de:5f:a5:72:57:a8:
                    3f:60:69:d4:6d:ae:a4:af:2a:73:84:23:23:6f:81:
                    99:ab:9a:6c:10:b7:af:76:4d:8f:8b:ae:2a:e1:8f:
                    06:39:17:7c:dd:24:37:c4:4f:d4:4a:3c:a1:f0:53:
                    f4:e5:36:cc:21:8a:52:fd:8f:92:d1:cd:dc:be:32:
                    b3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F3:FA:C6:71:D5:37:CE:29:23:43:00:2B:63:99:97:1C:97:A0:9C
            X509v3 Authority Key Identifier:
                keyid:21:28:18:90:75:89:B2:CA:84:6B:49:D1:09:DD:33:AC:9E:2E:B5:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:66:d6:da:78:ae:6c:ec:53:47:ab:fd:b6:78:fd:23:17:ba:
         a2:19:8f:41:7b:e3:e8:33:af:cd:cf:48:c5:0c:69:9e:a7:85:
         9f:4c:78:6c:14:d5:ee:28:6e:2b:b2:32:77:44:0f:2a:34:30:
         21:cc:fb:6a:67:37:bf:c6:e4:bd:35:b1:bf:37:3d:cd:26:83:
         af:04:fe:e7:df:62:60:32:9a:b9:a6:e1:19:0c:d6:2a:50:ea:
         14:28:2c:e5:26:d1:1c:82:ec:37:e6:9c:7b:52:3d:62:12:bb:
         7e:aa:f3:00:f8:21:b1:6c:c4:c8:96:df:a5:c3:6e:11:89:12:
         d0:fd:c5:9a:76:2c:ca:d0:7a:08:ff:e0:96:32:6b:ba:44:4f:
         ce:a8:4f:fa:f6:10:bb:fd:4d:48:ae:c2:dc:3c:7b:55:e0:29:
         43:de:9e:7d:44:7a:60:11:c9:31:b3:de:33:ca:65:34:2c:d5:
         0b:97:3f:ed:4f:16:6e:86:88:0f:5f:35:21:e1:db:ec:48:3f:
         3c:7f:b2:63:19:b8:a7:e9:41:c4:4c:94:81:b2:aa:12:e9:74:
         3d:b8:28:a6:52:63:87:98:92:e2:5d:36:c3:94:2c:7b:29:63:
         4a:c8:1e:05:84:61:64:f2:5f:0d:fe:31:25:a1:ba:9e:1c:06:
         b9:76:02:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:31:41 2025 by rpki-client