Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
File:                     8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft (raw, json)
Hash identifier:          vj7kRqqELNLL49Hm3CIKrlcDtF7kd6TbqaK5O3V9Kk0=
Subject key identifier:   86:63:7A:13:B4:63:B1:B6:12:19:EF:6C:43:BB:B5:24:19:2D:49:7A
Authority key identifier: F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3
Certificate issuer:       /CN=A914992A/serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3
Certificate serial:       01F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
Manifest number:          01F3
Signing time:             Sat 23 Aug 2025 02:37:41 +0000
Manifest this update:     Sat 23 Aug 2025 02:37:40 +0000
Manifest next update:     Sat 30 Aug 2025 02:37:40 +0000
Files and hashes:         1: 8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl (hash: Un6Y8HrqCUiISOEqO3zyj88xNM1oXrmAohsguiKBO1c=)
                          2: 2F43497CA16711EFBB0B733EC4F9AE02.roa (hash: ZYbaEoAWqyp/aPXD71n7sec2EkFfTfM2g3XustUPS1g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl
                          rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 02:37:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504 (0x1f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914992A, serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3
        Validity
            Not Before: Aug 23 02:37:40 2025 GMT
            Not After : Aug 30 02:37:40 2025 GMT
        Subject: CN=68a92975-67bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:52:93:6c:81:c9:89:49:74:0a:c3:cb:86:14:
                    87:69:5b:35:17:f5:3c:32:9a:4e:f9:ff:46:ed:9c:
                    93:4b:6f:2e:8d:90:a1:b5:5e:b4:e1:fb:80:84:03:
                    a7:2a:f2:33:9b:ba:cd:fb:c8:6d:4b:8c:f3:1d:cf:
                    bd:d5:c9:40:1b:32:97:f9:7d:99:7d:8e:1a:ed:ab:
                    12:fe:a4:6e:2c:6f:fc:06:9c:f7:f2:75:44:9c:ba:
                    31:38:36:d7:7f:e3:f4:e1:cf:d7:e8:3e:72:f0:97:
                    17:c7:76:eb:f9:59:88:d4:1b:57:24:16:36:ae:73:
                    45:c1:c4:77:88:65:d4:a9:5c:93:75:13:04:87:82:
                    5a:cf:6c:fb:87:33:2a:d2:f9:9c:c0:8b:6f:00:3f:
                    6d:4a:5e:52:29:e4:72:2f:7d:d3:2a:84:17:7d:1c:
                    c4:67:88:22:11:df:29:a9:8f:d3:df:42:a5:b7:03:
                    2b:da:7a:6c:d2:c9:92:25:88:1c:2a:a2:2e:a5:d8:
                    e6:3f:70:bd:91:0a:32:5f:b8:32:13:69:1a:e3:03:
                    75:58:f7:d9:a2:d5:4c:6a:b3:08:4f:5d:38:70:72:
                    ac:89:a4:cd:1f:3d:d1:7e:11:72:2b:b3:3c:c0:54:
                    2d:7b:b4:14:5a:7f:94:5b:8d:28:30:12:c8:b0:5e:
                    d6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:63:7A:13:B4:63:B1:B6:12:19:EF:6C:43:BB:B5:24:19:2D:49:7A
            X509v3 Authority Key Identifier:
                keyid:F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:19:48:45:41:f4:a8:3f:fd:35:9a:fc:84:84:61:d9:2d:c5:
         51:7e:79:2c:52:f8:a7:03:48:5d:70:9f:fd:21:1f:e0:26:fe:
         89:3b:b4:e5:39:c9:7d:ea:48:6c:55:d0:5e:34:45:e5:18:04:
         bf:32:aa:d1:f8:83:19:d5:3f:d6:d8:43:a5:87:ec:44:5a:6f:
         ae:c1:38:82:83:14:38:5c:c2:e5:3b:90:20:25:12:40:5b:ce:
         db:6b:42:57:69:cf:31:a2:54:81:e2:19:d1:00:e6:08:25:5e:
         58:ae:54:54:28:f1:36:ae:7c:23:ba:80:8c:fe:ec:26:56:88:
         49:9a:b1:40:04:36:93:24:e9:3d:0b:a9:a7:9b:10:1d:63:08:
         b8:6d:96:30:07:f8:f2:1b:9c:89:1f:6d:c8:4b:95:ae:57:18:
         96:88:63:c8:95:02:dc:7e:1f:55:9b:28:2b:be:ce:17:b2:bd:
         9c:eb:63:0a:6c:db:3a:74:e3:a1:d6:79:69:6a:dc:9c:64:36:
         85:f0:c3:f4:f7:dc:0d:b1:29:b2:2e:91:34:2f:d2:7d:fb:59:
         f0:ef:9a:d9:9f:17:b2:7b:69:20:73:c8:d6:a3:53:ff:b4:fe:
         1d:db:ef:48:9a:c9:51:75:63:49:63:78:39:61:13:a1:95:50:
         f8:c8:a1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:41:57 2025 by rpki-client