Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
File:                     pWEUadKee9PIXTGAtycy6qt6-5Y.mft (raw, json)
Hash identifier:          pJcvH8SCC9cPM2xdxkU6lhJ/OHR4wry/0R6GB7+TWBk=
Subject key identifier:   6F:F3:29:97:37:F7:FE:84:A9:9D:9C:10:F5:39:67:05:3B:B4:48:58
Authority key identifier: A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96
Certificate issuer:       /CN=A9146BA1/serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96
Certificate serial:       03EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
Manifest number:          03E4
Signing time:             Sat 23 Aug 2025 00:47:54 +0000
Manifest this update:     Sat 23 Aug 2025 00:47:54 +0000
Manifest next update:     Sat 30 Aug 2025 00:47:54 +0000
Files and hashes:         1: pWEUadKee9PIXTGAtycy6qt6-5Y.crl (hash: FekkICp8ytWPUrSv/A/F6zsT4nmqM277bqOdkSwxGIE=)
                          2: F67BB6E890AB11ECAB81252FC4F9AE02.roa (hash: 2seh0qxAc2BF9PqaOJpWiLsBwQeqToRGwKWIaD/PtHs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl
                          rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 00:47:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1002 (0x3ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146BA1, serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96
        Validity
            Not Before: Aug 23 00:47:54 2025 GMT
            Not After : Aug 30 00:47:54 2025 GMT
        Subject: CN=68a90fba-ccbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0c:3d:cb:42:04:b8:47:37:6b:e5:26:84:26:
                    bd:a6:b2:66:02:35:1f:d3:5d:3a:76:dc:26:43:b7:
                    13:ae:1e:9f:e3:8d:4f:89:29:95:3d:40:2d:2c:bc:
                    76:a5:aa:6a:c8:ec:84:c9:86:81:d7:e4:07:bb:79:
                    51:eb:60:44:26:34:5b:53:b7:c3:83:6a:c5:01:63:
                    ee:0b:2e:07:5c:91:51:a8:de:23:e9:7a:82:07:c4:
                    b0:81:ed:c4:54:b0:48:98:6e:45:8d:94:79:7f:36:
                    59:7c:ad:4e:38:a6:72:af:5a:d1:bd:6d:14:ef:69:
                    38:ff:4e:b7:a7:43:b6:42:ec:9b:69:cb:dd:1f:7f:
                    71:ab:8f:7b:67:52:5e:d6:2c:26:09:33:10:9a:1c:
                    b9:78:3a:9f:a2:d5:0d:df:01:3e:ab:bc:41:16:f6:
                    4e:84:a5:48:61:ff:7b:6d:3b:1d:54:f3:c8:e5:84:
                    1d:f9:87:b3:53:a8:ef:03:16:a4:39:3f:b7:cb:30:
                    7f:47:f8:05:11:52:33:57:85:04:b6:13:23:7f:64:
                    8a:cb:8e:37:0a:9b:cd:5b:32:3f:5d:a0:dc:44:e3:
                    f9:45:a8:16:9c:d1:80:67:11:9f:65:56:58:29:ca:
                    c0:4b:18:85:5b:40:ad:5c:77:eb:db:4c:fa:44:02:
                    54:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F3:29:97:37:F7:FE:84:A9:9D:9C:10:F5:39:67:05:3B:B4:48:58
            X509v3 Authority Key Identifier:
                keyid:A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:83:23:ad:cf:d5:5d:e4:5e:d4:35:ed:de:5e:aa:4d:57:10:
         57:b0:ef:2f:c5:1a:fa:fd:66:46:95:d7:60:82:af:74:88:08:
         48:0c:74:56:0b:47:b0:88:06:4c:d1:07:0b:3e:5e:3f:f7:57:
         56:ad:28:1e:00:62:3c:dd:37:2f:f5:6c:63:1b:4b:96:61:cc:
         4a:20:ad:ec:66:12:1b:c4:c6:84:b0:49:d9:ff:33:26:cc:4e:
         cb:ea:60:c0:6f:92:12:4a:3e:a7:d3:67:e1:38:50:be:9a:01:
         96:3d:09:66:70:19:95:e0:bc:63:3f:50:78:7c:57:8c:f9:43:
         ec:a9:3f:d9:29:d0:89:2e:fc:33:f7:92:af:73:e6:80:f1:66:
         fc:9c:95:2a:9a:51:fb:db:84:93:6d:f0:e8:e3:eb:1b:da:13:
         8a:ba:80:21:4b:31:d5:f3:ee:11:fe:df:a0:fd:1a:59:21:59:
         b7:9d:c3:b8:fe:a8:f8:eb:36:e8:a1:2d:e7:26:d0:df:09:8b:
         a4:72:e8:3d:d4:09:51:a5:b1:76:75:e4:dc:ee:8f:d9:1f:3a:
         8c:d0:1b:16:b8:5c:fd:98:92:c6:86:cd:90:c5:fb:b0:8a:b9:
         1e:5a:1d:39:b3:11:60:eb:f7:80:47:08:7c:2d:cb:4f:89:b6:
         5c:f2:0e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:10:10 2025 by rpki-client