Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
File:                     909zX9xaW5M28yTDLLpVjrvSjZc.mft (raw, json)
Hash identifier:          DcX3bjQOLy+evrxKHdjtrj74SzUKq73pWFoFYEWUDA0=
Subject key identifier:   27:C8:25:A8:AE:D2:93:4A:18:2D:25:45:AC:58:36:07:20:95:4E:74
Authority key identifier: F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97
Certificate issuer:       /CN=A915123C/serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97
Certificate serial:       12A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
Manifest number:          12A0
Signing time:             Fri 22 Aug 2025 17:12:31 +0000
Manifest this update:     Fri 22 Aug 2025 17:12:31 +0000
Manifest next update:     Fri 29 Aug 2025 17:12:31 +0000
Files and hashes:         1: 909zX9xaW5M28yTDLLpVjrvSjZc.crl (hash: Me+xqBW+K8AqqmSEppWa4Q1RVm8qpAVYAWYYONw3UFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.crl
                          rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:12:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4768 (0x12a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915123C, serialNumber=F74F735FDC5A5B9336F324C32CBA558EBBD28D97
        Validity
            Not Before: Aug 22 17:12:31 2025 GMT
            Not After : Aug 29 17:12:31 2025 GMT
        Subject: CN=68a8a4ff-2928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ce:6e:9d:af:7d:a8:70:fc:3f:ce:9c:b1:a2:
                    dd:25:23:90:2b:39:47:0d:f7:cd:26:9d:d8:f0:8a:
                    66:fc:c0:4a:f3:8a:61:25:ed:84:4a:4e:a4:76:58:
                    43:c3:dc:37:f5:c8:4a:c5:ed:9d:3f:d8:6d:b2:2e:
                    05:38:e0:0d:df:7a:70:5c:19:9f:e6:6c:47:58:b6:
                    f1:a9:f6:8b:9c:83:b8:fe:d7:75:17:2f:0d:0d:55:
                    07:b7:16:fd:b0:fe:97:7a:18:fa:dc:4c:63:d2:07:
                    ce:b9:ae:40:ae:fb:a4:63:67:e4:10:e5:2f:cd:d5:
                    dc:30:51:79:e5:a4:c9:98:66:18:77:42:74:50:52:
                    c0:6e:7b:1b:c0:6f:fb:56:ac:16:58:0b:6b:59:7a:
                    25:0e:e8:d2:b9:5b:72:39:62:81:3f:fa:9c:67:f5:
                    35:66:14:98:c8:69:36:07:d4:f2:ee:2a:c4:24:d3:
                    cc:3c:20:a4:c1:6c:5e:19:d9:5f:e5:e5:bd:a5:52:
                    3b:4b:9a:7d:cf:0b:9a:a5:34:4b:7a:50:fb:26:60:
                    57:9f:76:32:d4:24:75:f4:b5:eb:e3:11:2f:d7:59:
                    03:d5:aa:c2:19:1e:06:86:37:12:e4:e8:ce:71:b0:
                    f7:d4:bd:07:6d:b2:ec:75:08:1d:48:ff:cd:21:31:
                    48:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C8:25:A8:AE:D2:93:4A:18:2D:25:45:AC:58:36:07:20:95:4E:74
            X509v3 Authority Key Identifier:
                keyid:F7:4F:73:5F:DC:5A:5B:93:36:F3:24:C3:2C:BA:55:8E:BB:D2:8D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/909zX9xaW5M28yTDLLpVjrvSjZc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915123C/68F53F32CB3E11E8882CDA3AC4F9AE02/909zX9xaW5M28yTDLLpVjrvSjZc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:cf:12:54:25:9a:7c:dd:14:85:18:fe:56:e8:a8:6c:4e:21:
         b9:9d:7c:99:d4:fe:47:b1:2b:56:2d:b9:a0:13:bc:0f:3e:2d:
         13:90:cf:97:d8:9f:17:04:c8:1b:9b:86:8d:2a:af:d0:4a:c8:
         aa:34:25:1a:03:7d:e5:95:52:e5:88:ef:2d:17:b4:26:65:1f:
         ee:37:f3:0e:cf:1e:3c:c6:c1:68:a2:c7:e4:2f:aa:74:29:77:
         df:a3:be:e7:e4:a9:0f:f5:a6:d0:a9:b4:35:97:64:5d:4e:24:
         8e:7d:40:7f:53:b2:2b:a3:3d:88:0c:ac:71:3f:ba:e8:8d:bd:
         5d:39:1f:1b:52:c1:03:15:9e:ca:88:be:52:33:56:4e:b0:ec:
         cd:f1:49:6c:3d:de:95:be:05:a1:60:5f:b4:9d:cb:0a:e4:7c:
         46:50:40:d9:73:4e:8a:05:d1:09:fa:e4:01:41:fe:35:23:4a:
         a8:bc:eb:b9:4e:96:69:52:d8:2f:e1:49:35:f1:f1:10:a1:12:
         bd:4c:30:20:ca:14:4a:49:57:10:38:65:b9:96:56:8f:49:a5:
         d9:cc:0d:e0:8f:85:99:7a:c1:cc:59:19:41:7b:20:c9:95:f5:
         a3:56:dd:99:fc:4b:7b:68:db:1a:04:64:41:19:14:f3:7a:87:
         0f:65:a5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:05:26 2025 by rpki-client