Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
File:                     sY6ktIaEpn3qATi6uiMwbQADzcw.mft (raw, json)
Hash identifier:          BLs04aYq7VsA5pybGl8bGI62+AaXV3yGxg0OtPRW8tM=
Subject key identifier:   56:25:F0:37:0F:16:6C:DE:9B:45:83:29:B7:AD:F9:5B:F0:5C:22:CB
Authority key identifier: B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC
Certificate issuer:       /CN=A913EE77/serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC
Certificate serial:       072A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
Manifest number:          0ABF
Signing time:             Fri 22 Aug 2025 19:35:53 +0000
Manifest this update:     Fri 22 Aug 2025 19:35:52 +0000
Manifest next update:     Fri 29 Aug 2025 19:35:52 +0000
Files and hashes:         1: sY6ktIaEpn3qATi6uiMwbQADzcw.crl (hash: HBHvNyYknPsdBNvyxg9RpOqcw2+qLb1LklFrH2chIBc=)
                          2: A8D10944DEA511EEB7B9DC35C4F9AE02.roa (hash: F5nZUR683r0GHaN7PIQS7ScZ+hYmoRww/yUwHk4aoNk=)
                          3: A0A9FE74DEA511EE8F515632C4F9AE02.roa (hash: SjnLXmN7OQs2QJo93KJDaMm8uwo9AE2p0tGK7wMyelo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl
                          rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 19:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1834 (0x72a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EE77, serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC
        Validity
            Not Before: Aug 22 19:35:52 2025 GMT
            Not After : Aug 29 19:35:52 2025 GMT
        Subject: CN=68a8c699-b8b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ce:26:ea:2e:8c:25:40:c9:be:94:6e:95:c1:
                    25:2e:95:59:83:50:d8:27:d6:74:ed:0c:35:59:83:
                    be:98:9a:b8:73:f5:63:56:13:1a:93:bf:48:59:7a:
                    44:be:43:b5:03:ec:23:a4:a9:da:ad:a1:03:e5:55:
                    64:ce:c8:dc:11:6d:e9:d7:35:00:ff:8b:a4:56:66:
                    71:27:6c:2e:f7:5d:ed:83:2a:17:89:0c:e4:4d:e0:
                    b6:38:5d:0c:d9:da:4f:ce:44:93:a2:94:6d:9d:ee:
                    04:48:73:8a:3a:94:53:97:fc:99:fb:c4:b3:f8:fe:
                    8c:13:8f:3d:84:52:48:ec:e3:0b:f8:78:50:70:7a:
                    ee:28:b0:cb:e7:83:0b:2f:81:14:fb:86:f9:6b:6f:
                    f1:f7:e4:9d:0a:de:0f:c3:a8:02:9a:44:34:bb:65:
                    54:1b:3c:64:c0:f9:07:1e:9f:d7:f7:5b:0f:d6:99:
                    1d:a5:bf:65:3c:c6:2f:03:d6:d3:bd:24:00:a3:79:
                    bb:c6:3b:d9:1b:2a:4b:7d:04:ec:aa:f1:e4:43:30:
                    0d:2a:c1:06:19:2c:d0:23:50:14:3e:db:d8:bb:0c:
                    95:56:41:ad:df:15:2e:37:8c:25:29:e4:9b:d1:03:
                    3e:b2:61:80:69:d8:97:08:1d:13:21:ad:1d:80:bf:
                    03:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:25:F0:37:0F:16:6C:DE:9B:45:83:29:B7:AD:F9:5B:F0:5C:22:CB
            X509v3 Authority Key Identifier:
                keyid:B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:95:49:7a:4e:28:24:63:35:3f:4a:f4:1f:2c:9a:97:e8:6c:
         03:7b:12:a3:c3:4d:76:b7:9a:1a:29:7a:e2:5f:4f:50:fc:ef:
         ed:be:92:3e:ca:fc:05:01:3d:45:29:7a:e7:e3:49:5c:92:7b:
         45:ba:e4:20:97:68:04:7e:71:bc:5e:15:1d:5d:37:d4:52:64:
         e2:53:9f:13:1c:ac:5c:f4:dc:06:87:44:fd:9e:ac:54:74:dd:
         ee:1f:37:ec:98:14:50:b5:91:b6:78:1f:36:ac:4b:c8:8b:37:
         37:fa:3b:20:38:86:ac:33:61:6d:11:bf:1b:34:22:c1:d8:d7:
         4f:55:ee:f7:ba:3a:80:5a:02:78:aa:99:53:8f:12:c1:1a:33:
         7b:40:17:24:47:b9:55:ee:6f:00:60:a3:19:5b:18:11:b8:e5:
         f2:e8:ea:89:c2:c8:5a:57:e9:7e:62:42:77:b1:1c:70:ad:45:
         73:a7:1c:0c:90:13:09:f4:76:45:ea:8c:2a:77:8a:a7:38:b9:
         80:4c:31:c0:83:f6:28:df:3c:7f:be:48:a5:ce:11:77:0d:f5:
         bd:fc:d7:50:41:70:88:73:08:fa:41:ae:cd:11:c5:52:3d:df:
         37:6d:9d:61:80:42:44:71:44:42:3c:88:07:ae:0c:78:42:34:
         cd:d3:66:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:22:22 2025 by rpki-client