Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft
File:                     f30yDyoH5DPdvf4oV_XTGTVFF7k.mft (raw, json)
Hash identifier:          Dl9Jmj66tB+SiPFGuxjzzPhWSbv3IsLhW9CI8vpACk4=
Subject key identifier:   71:DF:44:64:5C:0F:F6:C2:8F:9C:B2:61:52:67:4E:38:97:69:34:87
Authority key identifier: 7F:7D:32:0F:2A:07:E4:33:DD:BD:FE:28:57:F5:D3:19:35:45:17:B9
Certificate issuer:       /CN=A914877B/serialNumber=7F7D320F2A07E433DDBDFE2857F5D319354517B9
Certificate serial:       0BFD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft
Manifest number:          0BF6
Signing time:             Fri 22 Aug 2025 18:54:24 +0000
Manifest this update:     Fri 22 Aug 2025 18:54:23 +0000
Manifest next update:     Fri 29 Aug 2025 18:54:23 +0000
Files and hashes:         1: f30yDyoH5DPdvf4oV_XTGTVFF7k.crl (hash: WlHE6daLDVrPT0sg0lXtQWtkAC6OXBE/6CfaeEwOCIk=)
                          2: 800676321BD311EAA341A62DC4F9AE02.roa (hash: RHZCYYPvQQbME4QEcXK5NVornLFSgAMnD5MRoiwlBuM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.crl
                          rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 18:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3069 (0xbfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914877B, serialNumber=7F7D320F2A07E433DDBDFE2857F5D319354517B9
        Validity
            Not Before: Aug 22 18:54:23 2025 GMT
            Not After : Aug 29 18:54:23 2025 GMT
        Subject: CN=68a8bce0-3aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:54:0a:22:af:b6:dd:99:1a:13:8a:7a:d7:09:
                    f7:c5:40:7a:74:93:a1:22:e4:fe:b7:d5:bc:21:25:
                    3b:d6:93:f4:c0:1f:7e:18:1f:cb:b0:e5:b0:b8:8e:
                    e5:f5:66:41:bc:de:59:01:2c:04:18:1f:2d:ed:5d:
                    8c:2a:6b:e4:14:be:34:e3:f1:17:dd:8e:bd:bc:a6:
                    e6:0f:d4:3e:94:e3:5a:07:eb:86:01:de:de:4d:0f:
                    a6:19:77:67:61:6c:55:35:0d:17:c3:94:9f:bc:02:
                    7a:47:84:50:9f:db:dd:c0:b2:a7:0e:9a:e5:f8:de:
                    a8:0f:e5:2d:dc:45:fd:9f:ff:cf:c0:71:0f:b6:5c:
                    9b:9e:da:30:c0:a6:50:6b:ee:68:0d:d3:d2:d5:3e:
                    f2:6c:6e:5b:3e:06:b8:02:06:d8:04:0b:38:93:49:
                    58:4e:12:d0:30:0c:64:6b:f4:51:e3:cb:1e:76:e7:
                    70:d6:d5:a7:1b:28:26:d0:5e:4b:31:45:ca:66:a4:
                    96:fb:d1:a3:5d:0f:d8:a0:ab:25:03:19:99:51:87:
                    1e:64:eb:d2:cb:0c:b4:c6:bd:0b:03:d2:d1:91:55:
                    0e:b0:09:ea:31:83:32:5c:2c:49:e3:e6:2b:91:16:
                    e2:3b:bd:f5:e0:d7:24:0b:19:43:bf:47:66:df:a6:
                    5b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DF:44:64:5C:0F:F6:C2:8F:9C:B2:61:52:67:4E:38:97:69:34:87
            X509v3 Authority Key Identifier:
                keyid:7F:7D:32:0F:2A:07:E4:33:DD:BD:FE:28:57:F5:D3:19:35:45:17:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:67:d5:47:b6:7c:5c:7e:fa:0f:21:30:ae:5d:65:0e:3a:7d:
         94:d8:12:90:9c:50:c8:30:04:23:e0:4a:d5:26:e7:04:90:6d:
         a0:1e:af:29:22:60:f3:b5:2b:c2:8c:23:56:83:a9:ae:c0:c7:
         da:b9:7a:c7:52:f0:d4:ba:5b:a8:44:ac:5b:e2:9f:38:71:81:
         63:57:ee:f6:6a:74:11:fb:44:f7:2e:51:e6:9c:93:01:8c:53:
         8f:4b:d2:0a:a5:97:9b:78:5f:fa:77:d9:ed:14:56:e8:43:d3:
         c8:55:c2:15:0d:22:3e:5d:09:89:87:db:54:55:24:00:7a:da:
         69:bb:cf:c4:0e:38:28:67:5e:12:72:9b:6b:ce:9d:fb:04:42:
         12:aa:ae:ff:5c:fa:bc:7a:17:16:d1:83:40:2f:78:1c:ba:5a:
         a7:e9:90:41:85:fe:17:47:47:18:71:1a:33:bb:61:65:99:67:
         08:4e:fc:1e:6a:ae:4c:92:15:0c:c4:57:07:be:55:00:56:60:
         41:49:e9:73:26:1b:cd:fb:ab:52:95:37:37:35:f8:a8:64:a1:
         05:e0:c1:4e:88:89:a2:67:45:30:dd:c6:a5:4b:ca:bb:18:53:
         73:6d:fb:f0:af:b6:dc:b1:dd:f6:95:5e:ef:4d:6b:68:60:e1:
         d1:ec:5c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:33:50 2025 by rpki-client