Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
File:                     ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft (raw, json)
Hash identifier:          pNAfmOncwlRbTLKNIvsapaoGC1mpMwGAg1b4J9H5+uA=
Subject key identifier:   A8:39:2F:17:30:1D:48:77:97:C7:A3:2A:A2:EE:F7:36:4F:7B:38:B6
Authority key identifier: 00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B
Certificate issuer:       /CN=A913C0C6/serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B
Certificate serial:       053D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
Manifest number:          0523
Signing time:             Fri 22 Aug 2025 23:52:54 +0000
Manifest this update:     Fri 22 Aug 2025 23:52:53 +0000
Manifest next update:     Fri 29 Aug 2025 23:52:53 +0000
Files and hashes:         1: ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl (hash: VruD3uof5f6ouZD1MBv9IgNaICJT9PJsv16XBTe5vpE=)
                          2: 2D197F6E52E611F087152212C4F9AE02.roa (hash: CiJQQxhDCCCQD8vktVOuYMhsjAd42UiB+ub/sDeCltU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl
                          rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 23:52:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1341 (0x53d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C0C6, serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B
        Validity
            Not Before: Aug 22 23:52:53 2025 GMT
            Not After : Aug 29 23:52:53 2025 GMT
        Subject: CN=68a902d6-87f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:ff:ed:b1:9d:88:65:31:87:7e:81:fd:a2:
                    c4:11:4b:86:9f:a9:13:66:e3:0d:aa:5d:2d:30:4b:
                    ab:a7:56:d8:e6:05:0d:c1:6a:81:03:bc:11:29:db:
                    58:a8:bb:65:77:4d:3e:0f:7b:8f:76:06:ec:92:d4:
                    85:97:6c:3e:12:76:3c:92:91:65:eb:b2:95:2a:f3:
                    9e:0d:89:b7:11:33:21:13:fa:b9:49:d7:05:e1:0b:
                    a6:5d:83:7f:32:f6:c7:0b:ba:5e:4b:f1:ee:f7:dd:
                    bd:82:69:99:39:37:3c:58:42:7e:38:5d:6a:f1:22:
                    9a:70:69:c6:b1:76:63:cf:68:bf:36:7c:18:86:d1:
                    79:5d:6c:94:cf:4c:81:7a:f0:fe:05:75:29:d1:09:
                    2a:0d:44:19:88:7e:4a:36:08:f6:27:fd:40:cf:02:
                    d8:d9:29:f9:da:d1:9c:3e:fe:19:d9:b3:b6:ce:0e:
                    77:55:0c:bc:b6:22:46:49:36:1c:72:32:ae:c9:c3:
                    af:31:f8:0c:6d:a1:bd:e4:25:1f:43:a0:02:f2:a4:
                    1b:11:cc:c3:89:27:56:66:45:05:64:ed:5e:65:69:
                    3f:24:e0:40:14:dd:81:3e:70:27:5e:f5:9b:18:c4:
                    fa:f7:9b:b7:0e:2a:84:6d:25:02:c4:3d:3d:f9:99:
                    a3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:39:2F:17:30:1D:48:77:97:C7:A3:2A:A2:EE:F7:36:4F:7B:38:B6
            X509v3 Authority Key Identifier:
                keyid:00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:cf:fa:70:68:79:76:ff:96:6a:89:2e:2c:09:04:96:73:ae:
         fd:06:6a:a8:65:0d:f7:df:ef:55:75:a8:13:20:78:66:01:fe:
         ee:44:fb:e3:b1:c6:59:73:98:41:aa:0a:1e:d0:9b:10:2e:36:
         c5:ab:8f:26:5a:4e:cf:a3:8b:a7:97:43:37:91:b3:d9:1c:ff:
         e9:de:51:7e:83:e3:cd:82:9c:b2:2f:f5:a6:5f:76:bb:a5:2b:
         60:16:3d:6c:8e:2a:90:7e:2c:f0:85:9e:6e:98:4f:ee:c4:e6:
         7a:b0:44:3e:d7:b2:f5:37:00:46:12:27:38:88:03:11:de:34:
         df:7b:c1:c7:c3:bf:e7:66:4a:09:c3:65:fa:6f:8a:10:78:6c:
         7a:80:ac:b7:cf:0d:fe:65:f9:c3:9e:73:b3:91:9f:bc:43:50:
         31:eb:42:69:0c:ec:24:02:92:24:fa:2f:1a:1e:85:49:9c:5c:
         41:a4:66:68:ea:15:d0:7e:a1:fa:19:3d:79:4d:c9:82:4a:bf:
         d3:79:01:0e:ae:df:f2:93:05:2b:75:13:36:f2:8f:dd:00:1e:
         83:33:9d:3e:b2:15:d8:bf:5f:56:37:66:d2:94:29:4a:0c:5c:
         35:3e:16:71:8d:f6:5b:55:7b:fc:3c:f8:27:39:1a:3c:b9:77:
         60:44:08:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:55:51 2025 by rpki-client