Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
File:                     39w62zPKqFke-vJ3bDsMVWwIorY.mft (raw, json)
Hash identifier:          bvAJ9OY5gOfQgl1D3me7jNx+z3qKcvFuaOUz78cvxSk=
Subject key identifier:   40:BA:45:89:DA:A4:8C:82:71:E3:25:F9:58:AE:10:53:69:5C:F0:43
Authority key identifier: DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
Certificate issuer:       /CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Certificate serial:       0379
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
Manifest number:          0353
Signing time:             Sat 23 Aug 2025 01:21:51 +0000
Manifest this update:     Sat 23 Aug 2025 01:21:50 +0000
Manifest next update:     Sat 30 Aug 2025 01:21:50 +0000
Files and hashes:         1: 39w62zPKqFke-vJ3bDsMVWwIorY.crl (hash: 8LTJwR1aLinu7v6C4AdIOqnfgEhUEmLAP6aQVPysbqE=)
                          2: C05125CC678F11EFA63C404CC4F9AE02.roa (hash: ZYAh/gwuXCu7E/Q2FaIlQuRJqUbt0BTDxqZaA+sc86E=)
                          3: EEE3A97AC21E11EF909FFF3AC4F9AE02.roa (hash: /MfCrt6/jA1ZbMDAzt6eDA2A3MF3tPOIgWCPnCZuvrI=)
                          4: 748FD068C11011EFB6161F67C4F9AE02.roa (hash: kNrHILbGlKEl0e6X3meuW2JyQCzSzvppG78DH9tkhNA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl
                          rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889 (0x379)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B5B1, serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
        Validity
            Not Before: Aug 23 01:21:50 2025 GMT
            Not After : Aug 30 01:21:50 2025 GMT
        Subject: CN=68a917ae-8256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7d:81:c2:59:c3:12:93:d9:30:43:28:b0:d6:
                    7e:bc:f6:31:1f:fe:4f:d9:87:c6:5b:68:f3:fd:8d:
                    a2:5b:bb:e2:cd:a3:15:ab:db:96:30:66:a4:70:d5:
                    4b:d5:7a:94:2c:d6:3f:9a:37:99:b6:47:f1:75:1f:
                    2c:70:fe:f6:fc:9d:76:1a:53:f8:0f:f4:64:92:77:
                    43:12:b8:49:cb:b5:32:f4:39:7a:21:0f:70:ba:aa:
                    c0:55:8a:a8:8b:41:52:47:c0:ab:4f:b5:cb:66:63:
                    6a:ac:71:67:d6:f9:65:8c:79:3e:98:68:c5:ef:e0:
                    eb:af:fe:1d:30:a7:a0:64:49:0a:62:d4:04:37:cc:
                    00:39:6b:31:6c:fe:03:5d:4f:d9:c0:fc:54:b2:43:
                    d2:07:fc:04:52:39:9b:5f:9c:ea:b8:fe:f9:33:6f:
                    c2:84:2f:67:76:c6:62:9d:23:f9:e5:1b:81:8a:67:
                    8f:8a:c2:f0:20:59:2c:0e:6b:97:63:ec:ba:43:31:
                    c9:56:4d:1d:4b:3e:61:16:8a:ab:16:2c:c0:63:bc:
                    14:f6:57:ac:31:45:d7:56:dc:ea:2b:30:24:c6:c5:
                    37:fe:24:ab:c1:e7:ae:e0:da:04:e6:b4:c1:a3:8c:
                    8a:cd:00:18:df:5a:14:2b:3e:d4:af:e5:f8:20:60:
                    0a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BA:45:89:DA:A4:8C:82:71:E3:25:F9:58:AE:10:53:69:5C:F0:43
            X509v3 Authority Key Identifier:
                keyid:DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:d1:2b:2a:76:cc:54:93:8e:5d:b7:31:e7:bf:cf:16:09:08:
         5f:9e:0a:fa:6d:99:c1:be:48:a6:4c:3e:b2:f1:bb:c1:60:01:
         c7:e5:52:48:c4:e6:ef:69:5e:bb:ff:2c:46:eb:bb:3d:0d:55:
         60:c7:1d:0e:e2:2d:38:11:bd:35:34:80:87:90:98:ca:af:0f:
         c4:a6:d9:c4:fb:e6:8a:f4:b0:b0:8a:7a:a9:53:fc:e6:ec:f9:
         36:21:76:50:35:ba:99:5b:0c:22:b8:2a:0b:6e:ed:1f:b5:47:
         f0:ab:84:2a:87:3c:c5:ee:45:41:b0:ab:4c:b0:f5:36:be:cd:
         d3:0b:c8:22:df:e7:2a:25:f4:db:28:c2:06:95:0d:c9:9f:8d:
         2f:44:0a:84:22:2b:0b:ee:9e:b2:3c:c2:6d:ed:42:77:d3:e4:
         78:ae:80:cb:ae:dc:5e:0f:61:f7:5f:91:02:ee:9b:47:35:ef:
         84:b3:38:7a:6b:ba:34:5d:41:d4:b2:1f:33:42:8b:46:68:60:
         fc:7d:d2:2c:0c:f7:90:59:97:78:52:fb:b7:bd:cf:d0:5e:81:
         89:4a:83:fa:e1:d1:78:5d:1e:f5:0c:c4:1c:59:61:e5:96:9e:
         f4:91:88:50:60:09:06:4a:c4:78:df:a0:93:c5:d9:63:08:8e:
         1e:fb:ab:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:10:58 2025 by rpki-client