Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
File:                     -Y3cNC9-J7aMoI09R8emmyaVXqE.mft (raw, json)
Hash identifier:          vid7UGDF+WEflrT05wW7naWFYgBsvxZQP5rwVLGDKxY=
Subject key identifier:   2D:23:3C:CF:1E:1E:3E:99:0F:43:34:38:D8:01:EB:74:DB:2E:41:B0
Authority key identifier: F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1
Certificate issuer:       /CN=A913C68B/serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1
Certificate serial:       0168
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
Manifest number:          0163
Signing time:             Sat 23 Aug 2025 04:07:18 +0000
Manifest this update:     Sat 23 Aug 2025 04:07:17 +0000
Manifest next update:     Sat 30 Aug 2025 04:07:17 +0000
Files and hashes:         1: -Y3cNC9-J7aMoI09R8emmyaVXqE.crl (hash: W1ikr/5UwprnKWNmKtQIwvoWwjbnZeKb8tC4U4pzP6Q=)
                          2: 98647190660511EE9F741151C4F9AE02.roa (hash: e+txXDDxOVgsnDumxQz73KTXT5VsRCiU70K17gULEyo=)
                          3: B0EBC1C862D111EEB797E270C4F9AE02.roa (hash: uhWuVXhTDAjPShdJrXnZxr0ARCm+SFwovWX+zDp8Oy0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl
                          rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 04:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C68B, serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1
        Validity
            Not Before: Aug 23 04:07:17 2025 GMT
            Not After : Aug 30 04:07:17 2025 GMT
        Subject: CN=68a93e75-d2f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b0:33:42:bb:96:d3:08:45:a1:8e:7f:23:27:
                    e4:1f:05:ac:5a:34:9e:3c:7f:10:ad:89:35:ce:e3:
                    04:f4:73:a8:ba:52:4b:bd:e9:0f:7b:30:c0:b6:ff:
                    cb:fa:fa:c0:04:5c:1c:01:15:8b:7f:51:df:10:62:
                    34:8f:27:36:49:45:84:f3:03:ca:62:dc:b7:c9:5c:
                    95:f4:fa:89:07:0d:35:86:9a:5b:41:67:d4:9f:d5:
                    c1:3c:57:35:0f:91:bc:5c:72:c9:55:41:a2:ec:f0:
                    19:c8:9f:76:3d:c8:5e:6b:b8:72:6f:3b:74:7c:0a:
                    4d:fe:c5:f4:9d:6d:8a:db:98:84:52:10:b9:a4:e9:
                    2d:bb:56:2c:11:69:21:cd:62:1a:af:e5:7d:69:03:
                    49:88:be:41:46:f1:5b:3f:4a:27:ed:3d:bf:80:15:
                    42:80:02:05:42:72:c4:7f:ea:12:9d:cb:41:50:2e:
                    80:cd:52:f8:b3:f2:ec:d2:a6:63:f6:74:ff:e7:b2:
                    d5:3d:5e:8a:f9:e5:dc:82:ee:97:73:a3:e0:e1:78:
                    51:81:05:af:3b:4e:3d:de:f5:17:52:6c:07:1a:f2:
                    08:b6:ec:a6:a5:54:47:df:2b:27:d6:39:2f:6f:21:
                    91:1e:21:6f:bd:35:8c:4a:ba:c9:0c:01:4a:95:eb:
                    e9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:23:3C:CF:1E:1E:3E:99:0F:43:34:38:D8:01:EB:74:DB:2E:41:B0
            X509v3 Authority Key Identifier:
                keyid:F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:37:6c:3a:f8:96:f3:ba:f1:6a:dd:d0:0c:d5:1e:a7:a2:a5:
         b2:b1:5b:10:29:7b:6a:2e:24:5d:ac:3c:e4:80:47:a5:9a:5e:
         40:f1:23:5b:1a:96:b0:c2:0c:2b:1c:8d:79:d6:26:7b:33:d9:
         60:0f:fe:f9:0c:e9:b1:87:90:3c:16:ac:73:23:8c:f1:be:9a:
         2f:e4:24:e3:3b:f8:15:b7:c1:04:bd:b6:03:5e:78:de:b1:15:
         f9:d9:e2:9c:c7:f6:c2:69:f8:33:0e:98:60:73:e4:68:84:85:
         46:9e:79:16:e8:22:aa:1c:8a:3b:8b:3d:8c:1f:37:66:f6:64:
         fa:88:30:0f:9f:1b:19:28:d5:a4:a5:8c:d1:e7:1d:f5:87:ea:
         79:4c:50:39:9a:c9:2d:f7:3e:d3:2b:11:01:f3:95:35:4e:1e:
         01:c3:5e:1a:d7:d9:16:84:00:a7:a8:7d:92:5f:91:85:c9:3c:
         98:b3:87:51:19:22:96:3c:64:81:0b:b8:47:e6:e9:ca:d2:89:
         d5:a7:24:15:7e:3f:de:a2:92:20:0a:03:4f:07:4a:ea:76:41:
         ab:68:5b:d3:1e:02:4e:47:a4:3b:c2:e3:ed:57:9c:a8:3a:1a:
         06:e1:30:77:4c:1b:32:a6:53:ed:40:d1:a9:6d:e8:fc:20:0d:
         09:9a:49:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:23:44 2025 by rpki-client