Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft
File:                     j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft (raw, json)
Hash identifier:          +YMpTz7AqXZuu8l3Miy0XTs81rjkkwgRku7Q6s2mheY=
Subject key identifier:   4B:D8:9B:AE:1A:8C:47:46:A7:67:F8:5D:86:58:4C:65:BD:7A:0D:10
Authority key identifier: 8F:E5:A7:C9:98:FB:8B:78:AC:33:1E:AE:83:BC:17:86:23:EE:3C:9E
Certificate issuer:       /CN=A913EF1D/serialNumber=8FE5A7C998FB8B78AC331EAE83BC178623EE3C9E
Certificate serial:       010B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft
Manifest number:          0108
Signing time:             Sat 23 Aug 2025 05:11:39 +0000
Manifest this update:     Sat 23 Aug 2025 05:11:38 +0000
Manifest next update:     Sat 30 Aug 2025 05:11:38 +0000
Files and hashes:         1: j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl (hash: T+vWeT7DGvAN9/shZQqnUC9PMT+JA5A7TNBEkAA/mgk=)
                          2: 1AE7ED46ECE711EEB12F9A1FC4F9AE02.roa (hash: Ux7MrDkQdEj+Gtfnp0Wmpu2t6Z1MtA7yxD7lmndlZrU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl
                          rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:11:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EF1D, serialNumber=8FE5A7C998FB8B78AC331EAE83BC178623EE3C9E
        Validity
            Not Before: Aug 23 05:11:38 2025 GMT
            Not After : Aug 30 05:11:38 2025 GMT
        Subject: CN=68a94d8a-1dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:22:44:81:92:dc:a8:ac:15:64:38:5d:06:54:
                    7c:46:36:a8:8f:c5:2d:fe:c1:9c:d3:2d:45:16:48:
                    ab:33:52:d1:2b:82:11:62:95:d5:af:08:a9:50:f5:
                    50:ef:ae:42:ec:2d:5b:20:85:cd:7e:29:55:1d:aa:
                    d9:bb:e3:73:67:23:08:42:17:5d:89:ce:c3:88:62:
                    97:d3:08:36:30:9c:e1:a6:4a:20:31:34:5c:b3:e3:
                    f4:40:78:7a:ef:47:a4:31:8c:27:ae:33:52:76:44:
                    e1:7d:5c:ab:64:0a:9f:c2:7b:f1:91:de:2f:e1:28:
                    54:8a:35:08:16:18:8d:26:38:e2:3b:78:d2:e1:c8:
                    24:89:32:45:66:eb:d3:f8:51:49:03:3a:96:a2:b0:
                    ab:72:3c:4f:d4:3c:77:f6:bb:7b:2c:a7:54:b9:39:
                    3f:6d:4b:95:a7:04:a9:98:cd:24:a5:a1:fb:5b:37:
                    ad:12:55:35:84:24:ac:37:ea:d9:e8:dc:e8:f1:a3:
                    ec:e3:5c:3a:ea:9a:12:d7:f6:a3:ba:12:7a:5f:99:
                    94:fe:1d:7d:0b:a3:6a:4f:05:dd:be:1b:b8:ff:a2:
                    f6:b4:4d:16:b7:35:91:65:a0:73:09:48:b0:cb:2b:
                    ce:0e:79:41:39:6a:6f:30:16:3d:d2:a0:92:c6:02:
                    20:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D8:9B:AE:1A:8C:47:46:A7:67:F8:5D:86:58:4C:65:BD:7A:0D:10
            X509v3 Authority Key Identifier:
                keyid:8F:E5:A7:C9:98:FB:8B:78:AC:33:1E:AE:83:BC:17:86:23:EE:3C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ac:a4:64:8a:80:80:8f:61:e4:48:42:08:99:59:de:01:fd:
         06:86:b3:a7:c6:03:aa:ea:bb:59:63:59:ab:83:c8:71:b2:78:
         1c:f7:72:0e:0e:fd:29:7d:ef:d1:7c:cb:3d:e8:bd:a5:01:bc:
         6e:d1:78:ed:90:d2:93:5c:41:b3:a0:38:fe:17:52:76:08:33:
         61:e8:69:09:36:41:58:77:4e:32:77:69:23:b9:d9:1a:7a:77:
         24:1d:b5:f6:25:37:4c:d7:6c:98:c9:ea:cf:43:4d:d3:2a:8f:
         93:8c:f7:4d:72:20:8a:bf:13:ba:02:79:95:9b:5b:08:22:ae:
         9f:a0:97:b6:ce:8d:98:3f:a4:a7:c3:ef:76:5d:48:4a:c4:1c:
         14:ac:8c:3e:0b:b0:c3:38:42:18:9b:24:36:b6:5e:c1:ed:ea:
         d6:bd:ab:ef:fb:13:6c:1a:e2:8b:c5:2b:d6:2f:eb:04:98:80:
         79:3d:f6:81:bf:9b:5b:40:96:50:4d:76:23:36:c6:e4:9b:a4:
         9e:09:0e:76:d5:e2:a2:3a:2e:82:71:6e:97:ad:98:1b:c2:68:
         db:57:cd:23:c0:fa:89:ca:87:ec:fc:9d:94:ba:bf:d3:dd:89:
         08:9b:e7:c1:ba:2c:ea:ac:8e:0b:9f:da:5f:64:7c:da:d5:3f:
         7f:14:08:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:20:37 2025 by rpki-client