Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft
File:                     erugrZ7I7WVe_HmVfQMV6veF-uw.mft (raw, json)
Hash identifier:          bydmZtbhOlcOe2myMkwsBKB2aKb8JHhtLlnLTViiKTA=
Subject key identifier:   D2:17:18:6D:C7:34:B7:01:29:04:F9:FB:2F:B1:54:FA:0A:76:5A:57
Authority key identifier: 7A:BB:A0:AD:9E:C8:ED:65:5E:FC:79:95:7D:03:15:EA:F7:85:FA:EC
Certificate issuer:       /CN=A9147244/serialNumber=7ABBA0AD9EC8ED655EFC79957D0315EAF785FAEC
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erugrZ7I7WVe_HmVfQMV6veF-uw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft
Manifest number:          55
Signing time:             Sat 23 Aug 2025 07:30:28 +0000
Manifest this update:     Sat 23 Aug 2025 07:30:28 +0000
Manifest next update:     Sat 30 Aug 2025 07:30:28 +0000
Files and hashes:         1: erugrZ7I7WVe_HmVfQMV6veF-uw.crl (hash: ch9BskLdLxnM6d5G9zvQuuEbpwhOKQDFcE5+IXCvFbo=)
                          2: A85CC65C057211F090CABA0FC4F9AE02.roa (hash: eiqihH3alG4cpxSKP/Yj1LxkWhK+ibmojtLolUx4Bhs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.crl
                          rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erugrZ7I7WVe_HmVfQMV6veF-uw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 07:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147244, serialNumber=7ABBA0AD9EC8ED655EFC79957D0315EAF785FAEC
        Validity
            Not Before: Aug 23 07:30:28 2025 GMT
            Not After : Aug 30 07:30:28 2025 GMT
        Subject: CN=68a96e14-d973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:58:44:d9:a9:8f:7e:f9:ba:b3:a2:6f:ac:ed:
                    59:b8:82:ee:76:79:a1:33:ac:68:24:ac:cb:ec:7b:
                    25:34:9b:96:d6:47:ff:bf:1c:c7:64:a8:9a:c5:54:
                    7b:31:0d:c9:6c:7d:56:30:c8:44:4b:2e:76:b4:18:
                    c8:e5:dc:e3:f2:6e:dd:a2:93:f9:8d:cb:30:dc:92:
                    c4:e4:9f:06:08:25:00:31:b9:ed:ae:09:af:80:56:
                    d2:a1:78:9d:02:a8:76:3e:af:43:59:3e:8c:d8:1a:
                    63:ad:7b:14:7f:e0:4a:b6:b6:38:c3:74:bd:1d:36:
                    fc:d1:fc:d5:e6:55:c9:ef:38:f5:05:89:72:18:1a:
                    0c:57:30:38:68:af:2a:5f:c0:a6:0e:60:6b:c6:b4:
                    59:34:a2:1e:f8:44:31:63:42:1a:ad:44:de:f6:ae:
                    f3:24:f1:18:77:f7:45:7e:9e:24:5e:f9:97:05:a4:
                    41:1e:79:2a:db:e6:fc:8f:a3:06:86:f6:37:b3:0e:
                    d0:54:30:1f:ea:cf:5a:67:68:75:b8:fe:41:64:01:
                    47:fc:99:0a:ba:b8:25:38:43:07:3b:d5:ec:50:69:
                    15:3a:d2:c2:cd:fc:eb:e5:2c:24:ea:08:2a:b8:2f:
                    3e:62:85:db:47:d7:ef:17:50:2f:82:b3:48:18:de:
                    52:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:17:18:6D:C7:34:B7:01:29:04:F9:FB:2F:B1:54:FA:0A:76:5A:57
            X509v3 Authority Key Identifier:
                keyid:7A:BB:A0:AD:9E:C8:ED:65:5E:FC:79:95:7D:03:15:EA:F7:85:FA:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erugrZ7I7WVe_HmVfQMV6veF-uw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147244/F2F123F803C311F088F46D1EC4F9AE02/erugrZ7I7WVe_HmVfQMV6veF-uw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:8c:ed:52:ae:ec:72:2c:fe:50:38:11:34:4a:a7:9d:fc:b8:
         57:2a:76:6d:1d:11:dc:25:05:fa:13:8c:62:c4:2b:3a:ff:79:
         ac:c4:1b:4f:26:e2:f9:b6:df:8c:04:7c:28:53:0f:e2:e2:07:
         0b:df:a1:12:1d:e7:e2:4a:07:0d:bb:f4:b8:40:06:a6:d3:78:
         d4:f3:09:e5:fc:e8:98:94:2a:ab:06:e0:07:13:c7:3b:38:01:
         02:ce:33:20:cb:c0:a2:7e:18:d2:0e:1b:39:59:c2:de:83:ee:
         20:cc:ee:e7:29:09:7f:17:67:b0:b8:cb:d1:2a:35:24:49:0d:
         2c:d5:8d:81:da:fa:a8:3e:9b:d9:a7:23:34:b5:fa:cc:18:22:
         88:0a:a1:57:c8:40:4d:27:a0:fc:40:56:6d:ec:56:b3:96:9e:
         f9:9b:c3:d2:41:41:8a:d2:6f:d3:a1:ff:d6:80:fc:45:91:2d:
         51:33:72:b2:94:a1:de:59:6a:c7:fb:7e:3a:f4:54:e7:9e:fd:
         cd:2a:8e:00:ae:18:13:c5:39:b4:61:9f:20:bf:4a:e1:ba:56:
         40:90:4c:4f:88:26:ce:3f:57:6d:bc:fb:61:ea:80:c4:c8:10:
         2a:fb:03:16:5d:a1:29:3c:7f:c0:32:14:eb:62:05:59:ec:8c:
         3d:36:27:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:39:23 2025 by rpki-client