Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
File:                     4JyfckW5hJiukjOxmA17T0xzjQ8.mft (raw, json)
Hash identifier:          b/qon3a+0CwruGwkzozjnb+VFyeY6gGPLhXp8KcXxsw=
Subject key identifier:   18:E7:8C:B2:96:5A:5F:CA:67:94:7A:27:37:F6:27:3E:CF:C2:66:61
Authority key identifier: E0:9C:9F:72:45:B9:84:98:AE:92:33:B1:98:0D:7B:4F:4C:73:8D:0F
Certificate issuer:       /CN=A914287F/serialNumber=E09C9F7245B98498AE9233B1980D7B4F4C738D0F
Certificate serial:       0759
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
Manifest number:          0753
Signing time:             Wed 02 Jul 2025 21:56:59 +0000
Manifest this update:     Wed 02 Jul 2025 21:56:59 +0000
Manifest next update:     Wed 09 Jul 2025 21:56:59 +0000
Files and hashes:         1: 4JyfckW5hJiukjOxmA17T0xzjQ8.crl (hash: QjeW2qQR0bmER7NIrnL1KVtz6i3w6kI0lt4LNaiZNJQ=)
                          2: 45CED05E2D2511EBAA63DE82C4F9AE02.roa (hash: MMDW5GKNwb6UBpTQg+bN7/Wer/8y34uE+hwA4JCHhWg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.crl
                          rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 21:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1881 (0x759)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914287F, serialNumber=E09C9F7245B98498AE9233B1980D7B4F4C738D0F
        Validity
            Not Before: Jul  2 21:56:59 2025 GMT
            Not After : Jul  9 21:56:59 2025 GMT
        Subject: CN=6865ab2b-2932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:34:b8:5e:53:bc:b4:53:58:4c:ef:c5:92:10:
                    83:64:81:8a:3c:60:7d:7f:a6:cc:b1:0d:b8:c3:cb:
                    f1:4d:53:69:c9:db:f4:c4:e1:c4:e5:c7:b7:69:5e:
                    61:31:e3:1a:8d:32:98:64:10:42:01:67:86:5e:97:
                    31:ec:6e:2a:ae:13:6e:9c:6d:ce:8a:2b:75:12:bd:
                    12:09:c3:92:fd:fb:0b:43:f0:e8:b8:9a:b5:9b:14:
                    2a:ec:fe:45:c5:c9:5e:1b:74:78:a5:75:68:3c:14:
                    e7:ee:07:6a:37:fd:d7:d8:57:42:26:cd:b9:88:14:
                    42:ec:6f:58:9c:77:d3:cf:a9:7f:03:74:ea:97:e0:
                    e1:53:0a:95:55:1e:68:15:e7:63:c4:52:7b:d2:12:
                    e1:a0:b1:bb:27:e4:d4:3b:7f:91:ed:12:a1:ec:99:
                    53:70:52:bb:18:b8:d4:46:72:6a:d4:89:6a:54:c8:
                    fa:de:cf:aa:a6:fe:ad:bc:1e:6f:80:f0:44:92:b4:
                    e5:ae:b5:3c:3f:f3:30:2f:49:51:a9:37:51:f9:90:
                    d1:e0:30:44:c2:56:32:75:3d:9b:7d:54:f3:81:70:
                    90:6b:7f:b2:17:81:73:a1:a9:ff:5b:b2:71:bc:8a:
                    4d:b0:b9:8a:89:29:d6:68:5d:d7:4c:30:5c:82:94:
                    7a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E7:8C:B2:96:5A:5F:CA:67:94:7A:27:37:F6:27:3E:CF:C2:66:61
            X509v3 Authority Key Identifier:
                keyid:E0:9C:9F:72:45:B9:84:98:AE:92:33:B1:98:0D:7B:4F:4C:73:8D:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:c0:40:6e:15:78:1e:93:9a:07:a8:17:eb:13:bd:7a:49:ce:
         79:be:e5:33:23:bc:f9:b5:65:d6:c9:a9:06:11:3b:2e:35:ef:
         26:4b:a1:31:f1:2d:61:f9:7d:3a:9f:51:6e:03:11:c8:02:5d:
         7d:6e:a5:01:11:26:e1:4f:a9:46:e9:e4:5e:68:ff:d1:91:34:
         c5:54:c6:34:ea:d3:10:6d:9e:48:b2:a4:0e:72:95:4e:1a:e7:
         77:db:bc:3b:93:6e:05:58:0f:93:cb:86:a4:df:06:29:18:2b:
         0f:8b:bf:f3:2e:02:db:16:b8:e5:fe:73:ae:68:da:33:75:38:
         20:b5:97:7a:3f:57:44:c0:c8:39:5e:46:3c:b9:31:92:84:38:
         f4:72:26:0d:d4:5d:02:46:f9:67:4a:c2:a7:8d:88:a2:71:b5:
         a8:1c:e3:3a:c8:47:18:3f:e6:6f:de:8d:1d:85:ed:86:be:a5:
         f2:26:97:ae:d2:f8:36:5b:7d:f3:f9:65:8e:87:86:a5:d8:cf:
         cd:46:be:ff:e6:a3:dc:a9:ed:e2:ce:09:2a:71:a8:eb:6c:b9:
         c9:ee:4f:39:8c:1e:8e:14:74:d4:5e:9f:19:fd:55:a2:ae:02:
         23:4f:a0:4a:29:26:a8:74:41:45:d4:3a:0c:3c:0d:e0:8d:4d:
         fd:e2:aa:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:17:20 2025 by rpki-client