Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
File:                     SYklN9iywDJbe-CB_ZKGx5vqaoU.mft (raw, json)
Hash identifier:          h+OJgifbxoi/PlpSoBs4bRAN0/1kzFEOlA6UN5ZHieM=
Subject key identifier:   49:8C:36:17:27:6F:2D:20:93:94:FF:37:94:73:92:33:68:B1:4F:F0
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Certificate issuer:       /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial:       3247
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
Manifest number:          313A
Signing time:             Fri 22 Aug 2025 15:30:08 +0000
Manifest this update:     Fri 22 Aug 2025 15:30:07 +0000
Manifest next update:     Fri 29 Aug 2025 15:30:07 +0000
Files and hashes:         1: SYklN9iywDJbe-CB_ZKGx5vqaoU.crl (hash: frnO7TaU57UBn1oyKklEUveQzQjdsJFnSy+PDvC5uDg=)
                          2: 4B7DDB34F78E11EAB64C8E81C4F9AE02.roa (hash: EeYrA0oUiX5ob1GCl360Jl12TI+VaTOiyuJgYZMlYyQ=)
                          3: 9C58363E8F2811ECA311FF19C4F9AE02.roa (hash: 2SMCn/npWqcmfZg6nAHuysuldQhi1wmuZFYT9k6JumE=)
                          4: B4D9927A014E11EB9E13483FC4F9AE02.roa (hash: aNflNpZRFbV1iEzwZkerSjooL3ZbHNTo9sqEEuW0z5E=)
                          5: B059C44831AB11ECAB908E42C4F9AE02.roa (hash: mvXnOqucNgAYFkGlwRCZn28/IzHeZDABYgBedIIjNdo=)
                          6: 9CE444808F2811ECA311FF19C4F9AE02.roa (hash: Za7CTLhf4UasBzGSp7I8a3g4a+j+NWEqF/KL56/2vS8=)
                          7: 3E745A08803611ECB2187650C4F9AE02.roa (hash: jeZ1quXhohHcENScdWfxhX0SEjFUrsOnsK/TOw/jZjs=)
                          8: FBD80F88F92111EAABA5882BC4F9AE02.roa (hash: dgpVoO6weS/ndsZQWujNDS9YR9/GTcgU2Ntn/TREgTo=)
                          9: 200B2C4804AB11EB8AAF5923C4F9AE02.roa (hash: lEnvEsVQKg7+MGcOwWT2W3WslnVR/yrmJySbJOft9Z8=)
                          10: 0E95C2D8F14211EAA4333775C4F9AE02.roa (hash: Ahn6ZDXaFlyG3ps/K1qhqsraiLwDj6j+LNP8Jh18fxI=)
                          11: BE430FFA699011EE96387F19C4F9AE02.roa (hash: eghTnl4+9Hou7Dvhi8Y2Dc5HYMDvdB3RFP+Hf9xhTd4=)
                          12: D26B4EE8070A11EB90C85C2BC4F9AE02.roa (hash: THe1NI3B1xx7kSh8zVoF92Sy5zfPL4BkUSLTuhQWgWA=)
                          13: 6A721236977E11EBB7908378C4F9AE02.roa (hash: /e6KrWMRhzwLnS1sGFyJnoQWuznldP9kkNXk2FwS2m8=)
                          14: D1AEBE18070A11EB90C85C2BC4F9AE02.roa (hash: 6qeUbqQDZAs4XxUg3gjiDgNNwxCSJtTUmRGvfOUM8Jg=)
                          15: 4BBB7E087DAD11F0BE453F16C4F9AE02.roa (hash: 6hTtUXaZ8CrWQl/8AiivlYdIr/Lv0cbBPGA709hfGyo=)
                          16: D4002378F15211EAA1BAB944C4F9AE02.roa (hash: Wyi5/LddF842JO/Qup+T+TtnSVCZWmXJ6KXLaRipY9A=)
                          17: F311F68E01C311EB898F2D52C4F9AE02.roa (hash: 85Xzc4sUFq6DeQmrj7B+GSXoAlkSVZuZhM/htcARgis=)
                          18: 997B7CFADEA011ED84E5D17BC4F9AE02.roa (hash: YpHnGald+tUXWOHiLdrxtwMGKIMtsU2LryOXgoLOgKw=)
                          19: 2687563AFA8E11EB8B0FCD39C4F9AE02.roa (hash: BHyc8gJj1zrzdD7tccu9ah8CwFB8JYItzsH3eX+N0N0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
                          rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 15:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12871 (0x3247)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
        Validity
            Not Before: Aug 22 15:30:07 2025 GMT
            Not After : Aug 29 15:30:07 2025 GMT
        Subject: CN=68a88d00-082d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:61:ad:94:54:38:aa:22:71:df:d3:d8:0c:dd:
                    df:42:c5:f0:cc:86:7b:d4:a1:5b:fa:18:1b:8b:37:
                    a3:25:18:32:6d:2b:b6:a3:58:a1:f5:d0:ad:bd:54:
                    41:0b:7a:7d:cc:14:ed:71:eb:db:37:35:18:8a:d7:
                    b8:23:e9:c3:98:1e:d9:0d:a2:1d:5c:3b:5d:0d:81:
                    d7:51:3d:4c:ba:62:ed:cc:d7:88:ab:42:17:86:3d:
                    09:8d:df:bd:c6:da:37:42:6b:84:a8:2b:1a:7e:3c:
                    4e:91:9b:d0:dc:0c:1d:fc:2c:64:10:ba:19:96:0a:
                    ee:0a:7f:d3:27:80:fd:0b:6f:58:56:ad:ed:b2:f6:
                    6e:3f:a0:1f:72:cb:b5:45:67:e4:1c:2f:8c:47:ef:
                    20:38:6f:89:91:c5:14:de:e5:0f:d2:24:02:7a:eb:
                    ae:36:ed:7a:4c:2f:64:55:26:45:1f:ba:47:7e:e0:
                    95:04:8d:b9:fd:10:01:90:5d:31:9a:b4:6b:48:ed:
                    2a:cb:bb:39:36:cf:48:e3:a0:4f:f6:5b:69:70:cd:
                    29:32:0d:24:80:6c:7c:1b:5d:aa:07:dc:ea:44:35:
                    2a:5a:ae:c7:59:da:54:f4:13:89:73:2f:42:70:17:
                    df:cc:c4:57:6a:62:5a:c5:f1:b8:f2:27:0b:7a:92:
                    42:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8C:36:17:27:6F:2D:20:93:94:FF:37:94:73:92:33:68:B1:4F:F0
            X509v3 Authority Key Identifier:
                keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:e4:93:9e:2c:8b:ec:e9:2f:a8:5f:3a:e1:40:78:a0:1b:56:
         94:9a:67:eb:2f:96:19:22:7c:d7:3d:b8:d0:44:39:09:de:de:
         bd:4f:ff:56:5c:07:42:56:07:8e:ff:fc:1d:2e:ef:af:7b:68:
         0c:4d:37:a2:cd:34:3b:34:57:c4:3d:81:c8:d2:bc:da:e3:71:
         a8:18:25:3c:30:02:95:3f:e1:69:38:18:a4:19:28:aa:b6:9f:
         cd:1d:1f:76:78:95:3a:55:c4:41:e5:48:bc:58:82:0f:53:57:
         4d:0c:25:82:b3:30:ae:49:32:da:00:6a:bb:17:dd:43:ff:6f:
         66:08:b3:89:0d:ca:a8:f0:61:6e:05:84:7f:30:a6:65:e3:9b:
         ee:49:cb:56:b7:d9:68:09:9d:32:4c:43:80:d7:20:58:8c:c1:
         94:c9:93:ae:21:02:d9:9a:97:00:a7:7c:62:36:48:f7:7a:68:
         06:f1:cd:03:18:70:33:e6:ab:2c:3d:23:67:5f:fe:0c:8b:5b:
         73:c4:13:08:af:f4:92:17:ba:c1:1d:35:02:46:d7:c1:6b:b9:
         4f:a2:4a:39:1b:f0:fd:ed:b9:38:74:7a:e2:2b:86:63:98:ae:
         2a:f6:94:45:f3:fd:06:4b:a9:53:7c:8c:e7:3a:45:81:d3:61:
         39:ca:13:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:08:24 2025 by rpki-client