Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
File:                     w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft (raw, json)
Hash identifier:          EBzQ0bjH8Aqefjit0ol5GcCWKsWE3KZStGGNoDfos18=
Subject key identifier:   36:68:B1:0D:61:0F:B3:E1:17:8C:9C:54:65:77:D3:DC:3A:43:F6:D4
Authority key identifier: C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43
Certificate issuer:       /CN=A9150080/serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643
Certificate serial:       040D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
Manifest number:          0407
Signing time:             Sat 23 Aug 2025 00:11:05 +0000
Manifest this update:     Sat 23 Aug 2025 00:11:04 +0000
Manifest next update:     Sat 30 Aug 2025 00:11:04 +0000
Files and hashes:         1: w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl (hash: xtyBKjkPiv0CLw4Rne+N28ORHQ2ttwdphF5JROcqcCo=)
                          2: 9904EDFA857E11ECA6A4FB59C4F9AE02.roa (hash: uXNN93KPpMh1sC/GxXfk7rupN3sWo7udXfCSk3ZQb8M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl
                          rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 00:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1037 (0x40d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150080, serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643
        Validity
            Not Before: Aug 23 00:11:04 2025 GMT
            Not After : Aug 30 00:11:04 2025 GMT
        Subject: CN=68a90719-d5ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8b:32:bf:6e:c1:a4:ef:c0:e6:f4:e9:72:65:
                    a0:46:94:2f:00:f6:dd:64:2d:05:5c:88:7f:0f:b1:
                    c8:b3:9e:ae:bc:00:72:68:ab:24:70:15:b9:56:6b:
                    44:86:0f:75:4d:e4:ff:7a:18:46:2f:c6:f7:50:e5:
                    43:78:29:1d:89:37:b8:81:37:f2:2d:54:87:d5:de:
                    27:14:4e:e7:94:3f:9c:a9:20:3e:ea:19:f4:9a:22:
                    86:48:6b:ed:b7:71:42:5f:ad:32:c0:45:da:f1:b1:
                    f6:f1:ec:53:48:5f:64:40:22:45:1d:5e:09:01:3f:
                    13:da:42:79:e8:a3:b6:ca:2a:79:c1:f8:eb:d1:e2:
                    61:37:66:78:fa:dd:29:3e:95:df:13:87:78:4c:80:
                    3a:39:d6:56:a4:b0:83:3f:ba:e5:d3:61:43:5b:b7:
                    5b:a1:16:96:60:48:a1:56:7d:86:3b:04:d2:e0:5f:
                    e3:c3:5c:70:38:ee:b1:98:ff:41:d3:19:fc:b0:5a:
                    40:52:7a:63:73:c4:13:36:21:83:9d:fe:0e:3e:ff:
                    2a:ac:96:9b:22:66:b2:af:2c:8c:ee:79:77:c2:d9:
                    34:d8:11:83:38:76:70:b7:0c:2e:27:cd:5d:76:ca:
                    84:e9:b6:df:6a:62:25:79:de:db:5c:a5:79:d5:63:
                    3c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:68:B1:0D:61:0F:B3:E1:17:8C:9C:54:65:77:D3:DC:3A:43:F6:D4
            X509v3 Authority Key Identifier:
                keyid:C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:91:69:cd:40:4e:02:24:bc:b6:bb:f0:48:63:d8:4c:b1:49:
         c4:f6:92:f9:b7:85:5d:12:68:34:f6:07:1a:f1:f6:b1:d9:14:
         93:07:28:42:29:d5:8c:35:1b:f7:01:36:9a:32:23:4e:81:ec:
         93:39:f7:df:2a:4d:71:5d:ad:4b:05:be:cb:9d:11:b2:93:e2:
         c9:cc:39:3e:68:be:fa:69:0a:2d:6d:1c:2b:82:22:36:68:79:
         5f:fb:2b:1f:10:2a:77:ab:3a:7c:f3:58:81:a5:c9:9f:e1:46:
         ef:0c:7c:2c:39:8b:41:08:ca:c2:61:cc:d8:ac:f1:c9:26:18:
         91:4b:53:a9:8c:d3:5d:18:25:76:9c:84:b7:e9:0a:9d:0b:7a:
         09:a8:de:ce:d2:51:43:76:ee:06:35:5d:5a:ca:93:b8:b0:01:
         8f:35:55:80:5f:45:41:38:cc:dc:78:3a:4f:86:20:79:71:be:
         d2:b0:73:49:6d:f9:a8:21:bc:bb:92:da:d9:40:fd:40:c6:1a:
         df:3e:12:d2:6a:8e:72:02:91:75:a4:bf:a0:2e:1b:93:39:7e:
         9a:51:dc:63:8d:fd:e6:7e:35:d3:56:4d:85:1e:9f:66:ae:ce:
         cf:61:f6:69:4e:cb:cc:91:9e:6e:8d:51:78:35:ed:01:09:9d:
         1e:0d:47:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:58:39 2025 by rpki-client