Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
File:                     T4QeODPgrG_hvu69ABI10VKOzno.mft (raw, json)
Hash identifier:          wvekJO5e+389Hi5HBeQBMh9vGMjaZbDaXwi5Nr7sEaM=
Subject key identifier:   01:E0:EB:84:80:45:AD:B8:D4:D7:5C:6C:BA:73:F3:12:7B:82:82:B6
Authority key identifier: 4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
Certificate issuer:       /CN=A913AF6A/serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Certificate serial:       0131
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
Manifest number:          012F
Signing time:             Sat 23 Aug 2025 04:40:34 +0000
Manifest this update:     Sat 23 Aug 2025 04:40:34 +0000
Manifest next update:     Sat 30 Aug 2025 04:40:34 +0000
Files and hashes:         1: T4QeODPgrG_hvu69ABI10VKOzno.crl (hash: ahNczJe8USuQeQhQfFFS9sQC/jOkc1R6+wipfIJzZtE=)
                          2: 658B1AC8AE4711EE8C130419C4F9AE02.roa (hash: pBuyb8tUeoDi0BGNU1PyCW1Le78/gB9wiXHTRO2r0pw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl
                          rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 04:40:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AF6A, serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
        Validity
            Not Before: Aug 23 04:40:34 2025 GMT
            Not After : Aug 30 04:40:34 2025 GMT
        Subject: CN=68a94642-9726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7d:7a:b0:dd:16:94:04:3c:a0:e5:16:96:da:
                    2a:12:36:f3:37:70:d5:cf:41:6d:35:10:f3:5c:67:
                    c3:54:4f:0c:80:58:ea:1d:be:e1:ff:87:8c:e0:66:
                    2e:b7:70:9f:8a:a7:2f:6f:ee:15:48:db:05:1f:40:
                    d6:e2:77:ff:7d:06:23:b5:f1:05:c3:d8:de:38:9d:
                    84:4f:87:bc:12:10:e1:98:eb:84:b1:e7:09:c0:99:
                    59:cb:48:56:3f:15:20:dc:72:3b:a0:7e:16:1d:36:
                    7b:bb:00:cd:6a:97:32:b1:24:de:c4:1f:ea:96:f6:
                    84:fe:99:e8:23:ff:7a:6b:05:98:8c:71:c9:3c:dd:
                    55:20:bc:34:ad:86:39:a8:56:ad:2c:ec:86:ce:0e:
                    ca:24:86:4e:67:35:0e:d0:2f:9e:b1:a8:83:2b:db:
                    1d:4c:48:21:c8:86:2f:1c:26:f6:3b:af:85:52:c7:
                    13:82:45:70:fd:91:80:e9:d0:d8:dd:9e:82:e2:44:
                    f3:7b:6f:42:79:e8:99:36:63:99:c6:d7:8b:1c:db:
                    c1:37:bb:98:e9:56:de:12:be:0f:b4:ab:d0:e7:8f:
                    48:9b:36:dd:e4:b3:08:29:f4:86:46:3b:9e:a0:54:
                    76:09:0b:ee:a1:68:30:d7:a9:45:87:c0:ce:98:42:
                    7f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E0:EB:84:80:45:AD:B8:D4:D7:5C:6C:BA:73:F3:12:7B:82:82:B6
            X509v3 Authority Key Identifier:
                keyid:4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:df:2e:4f:0a:5b:e5:09:eb:41:7b:63:e2:2b:0c:4c:8d:16:
         ed:7d:76:c4:de:af:76:64:74:3e:6a:87:49:21:bc:e6:59:c9:
         16:0a:60:21:9a:b2:1e:a8:e2:b1:40:49:42:d9:84:9d:28:57:
         ce:22:44:af:9e:ec:a6:4a:5b:a8:b3:e5:3b:58:d8:e4:9b:50:
         b4:e4:34:f2:39:55:bf:12:87:f4:4d:bb:6e:0a:43:49:6c:9f:
         92:df:f0:ff:cc:62:49:d2:8d:2d:e7:9c:5f:19:c3:d2:5a:5d:
         84:e0:f5:34:31:e3:aa:16:18:e7:e1:bf:dc:07:e8:64:d8:cf:
         ff:48:b5:27:79:af:ed:2d:91:0e:2d:0d:cc:38:88:eb:e6:9a:
         1b:81:f2:4a:84:3c:40:53:8d:e6:a5:db:1d:71:cc:7c:94:b1:
         48:71:10:71:57:cf:2b:a7:68:83:ba:d3:de:cb:07:3e:4b:dc:
         0b:e3:fb:d0:fb:77:bd:e2:3d:21:71:c9:aa:97:78:10:dc:fe:
         2c:9b:4c:75:01:49:b8:9b:e7:a6:91:b3:7b:1a:aa:7b:eb:b9:
         d7:31:ec:6b:6f:21:a0:c7:a6:3e:4d:99:19:5b:fa:cc:59:07:
         2d:f3:68:98:90:f5:0d:bc:a1:6b:88:6c:06:b7:00:ad:98:49:
         fc:50:8b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:08:18 2025 by rpki-client