Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
File:                     08ZsJqn9G558RVvds1FZaI0BQP4.mft (raw, json)
Hash identifier:          8z6vZMibcKxwmX//CxyM4AMxD2XcDalPChRGg0HigHY=
Subject key identifier:   76:84:40:0A:71:1A:9D:62:64:E0:04:B1:C6:A5:F6:EF:D6:36:F8:A8
Authority key identifier: D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE
Certificate issuer:       /CN=A914DD78/serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE
Certificate serial:       0B64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
Manifest number:          0B40
Signing time:             Fri 22 Aug 2025 19:22:12 +0000
Manifest this update:     Fri 22 Aug 2025 19:22:11 +0000
Manifest next update:     Fri 29 Aug 2025 19:22:11 +0000
Files and hashes:         1: 08ZsJqn9G558RVvds1FZaI0BQP4.crl (hash: 6bTpqZVZDGmWDzYrIkBev2eQr6PXdyJ2EPWcX6Z2PxA=)
                          2: 2CAD3A66595911EA80344709C4F9AE02.roa (hash: H9hbPUbdv0cUQiC5whOpkC+JQu6c3qm0FHMfkH/xI3Y=)
                          3: DE437646F8A911EB98242219C4F9AE02.roa (hash: qO/L9iOGcVT7Zy5+lQ1QEnr1iK0Ar+vJn8jp9AXsGQU=)
                          4: 9F0D6574BFF011EAA38D3B64C4F9AE02.roa (hash: BML327IqAumg1Qf2fd2jwUkaILEe0UriC88ZGk+s8xU=)
                          5: A04B3184595A11EA8C79B30FC4F9AE02.roa (hash: dSI3Emdz4l81LDdf6Ly+xEHJKZsAFGwWrqPYXFTwQHk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl
                          rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 19:22:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2916 (0xb64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DD78, serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE
        Validity
            Not Before: Aug 22 19:22:11 2025 GMT
            Not After : Aug 29 19:22:11 2025 GMT
        Subject: CN=68a8c364-c180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:26:34:2c:8e:57:bf:e6:17:80:8a:28:c7:33:
                    39:db:76:f6:da:37:ab:4c:f5:5c:7d:e3:d1:b9:73:
                    07:cd:10:d4:58:ae:7f:d1:78:35:a2:e5:07:35:6e:
                    21:87:12:a1:b9:47:15:e2:93:2e:ee:6e:d6:04:d7:
                    c9:6b:c4:6a:c7:5f:07:61:73:32:6d:81:b2:52:e7:
                    41:e3:38:da:6c:e2:0b:d5:e1:af:07:78:49:c1:c5:
                    53:f6:8e:bc:73:bd:58:10:8c:f4:03:75:f9:c4:df:
                    af:f1:8d:5a:a9:ad:9d:e4:7e:ee:36:96:4f:8d:1c:
                    34:5b:0a:de:88:32:ae:94:80:b3:88:41:b3:d7:26:
                    cf:54:0f:b3:e1:26:0f:07:12:6d:78:93:4c:61:17:
                    9d:91:92:09:0b:6f:ba:f4:03:94:62:e0:f1:07:15:
                    e4:47:48:ca:12:ee:a5:07:31:c6:a6:47:59:09:35:
                    e7:10:ab:63:a0:d3:9e:7d:02:72:c2:1e:34:2f:6c:
                    17:a4:4e:cb:11:20:48:57:e5:2f:ac:4a:cc:c0:2a:
                    b7:d1:10:44:ce:c2:a5:1f:5d:4d:67:71:40:cf:c9:
                    35:1b:49:10:c3:a3:15:61:fe:ed:13:17:a0:02:38:
                    04:90:1e:2e:fb:e3:09:50:20:c1:3c:5c:8d:a1:81:
                    f4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:84:40:0A:71:1A:9D:62:64:E0:04:B1:C6:A5:F6:EF:D6:36:F8:A8
            X509v3 Authority Key Identifier:
                keyid:D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:2e:3b:ad:db:6f:74:76:50:c6:9d:db:7e:5d:af:f4:54:5b:
         75:da:93:a0:7e:c9:8f:53:d4:1a:a9:7e:28:81:e7:ea:33:f4:
         58:2d:a0:d2:0f:32:18:41:f7:59:60:02:97:8c:c7:11:8e:84:
         f8:a2:e5:98:4b:d9:1b:49:c1:44:44:1c:c8:4d:73:ff:79:9c:
         77:94:4a:a9:d9:f9:43:b3:2a:a3:1d:d8:4d:98:90:96:b9:82:
         ea:19:d7:29:80:6b:6d:d8:6a:dd:c9:77:10:99:8e:77:4e:42:
         e6:62:0e:cb:f0:9c:d7:8a:4a:f5:00:d3:17:92:fc:06:ba:fc:
         b1:2b:0a:93:b4:21:ac:db:6e:29:81:66:21:cc:2c:6e:ca:ca:
         0a:b2:48:f0:97:48:f8:ee:b9:9e:26:8b:37:2a:42:44:b3:4f:
         f4:35:67:46:d5:ba:2b:1e:04:50:70:e0:8a:64:83:87:e7:f0:
         b6:7b:a4:c8:37:69:5a:7f:15:cb:87:47:c9:97:a4:b8:16:99:
         e1:43:1f:bb:48:57:fb:ef:e8:15:7d:32:b3:99:4c:49:85:93:
         25:66:c3:fb:84:ab:57:4a:d6:fe:4e:55:a7:af:ff:5c:19:db:
         96:9a:22:ee:e3:fe:fb:ca:b8:ac:70:e4:72:14:ec:ea:1a:72:
         d3:1c:37:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:02:48 2025 by rpki-client