Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft
File:                     L1yb73Dl0CO3HEbLZs_iof20g1s.mft (raw, json)
Hash identifier:          pICmhqoGYez3oFtcKMnTkamvJsCVLeb2UmukpunkQuc=
Subject key identifier:   76:FB:08:03:BB:48:19:70:DD:C4:3A:E9:C1:7B:FB:C7:16:76:96:F6
Authority key identifier: 2F:5C:9B:EF:70:E5:D0:23:B7:1C:46:CB:66:CF:E2:A1:FD:B4:83:5B
Certificate issuer:       /CN=A915D55E/serialNumber=2F5C9BEF70E5D023B71C46CB66CFE2A1FDB4835B
Certificate serial:       0791
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1yb73Dl0CO3HEbLZs_iof20g1s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft
Manifest number:          078C
Signing time:             Fri 22 Aug 2025 21:36:20 +0000
Manifest this update:     Fri 22 Aug 2025 21:36:20 +0000
Manifest next update:     Fri 29 Aug 2025 21:36:20 +0000
Files and hashes:         1: L1yb73Dl0CO3HEbLZs_iof20g1s.crl (hash: xlFamDhaRBc1CtSK34af/xn7spq/X+dmKfFpu0q8N1A=)
                          2: 2323F9621D5D11EBA3A7E71CC4F9AE02.roa (hash: 7aqFTC0pvymz2qNJgMgOiSvmjJnWEvFpbf7HqEGVxms=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.crl
                          rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1yb73Dl0CO3HEbLZs_iof20g1s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1937 (0x791)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D55E, serialNumber=2F5C9BEF70E5D023B71C46CB66CFE2A1FDB4835B
        Validity
            Not Before: Aug 22 21:36:20 2025 GMT
            Not After : Aug 29 21:36:20 2025 GMT
        Subject: CN=68a8e2d4-9a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f2:68:38:dd:60:56:6f:ad:34:4f:b8:2e:f6:
                    13:93:57:7d:a8:56:2d:32:e6:28:de:1c:d5:32:1d:
                    ee:1d:4e:67:78:f6:6e:f9:e2:06:ea:ee:27:5c:85:
                    e2:90:1f:b7:0c:1e:70:60:cc:6f:0f:b2:39:0f:82:
                    8a:04:30:ef:e5:fe:d7:f5:35:55:82:5c:08:1c:87:
                    15:b8:6d:05:4d:4b:74:53:91:16:9b:ea:4c:8c:bc:
                    32:b1:71:a9:de:bb:13:3d:1e:4d:78:64:c2:bb:d1:
                    1a:63:64:4b:eb:20:de:e6:f3:17:aa:22:4d:fa:00:
                    27:8c:39:18:9f:5a:9f:54:f7:63:6b:39:ee:71:94:
                    ac:8f:d7:70:b5:33:20:c0:15:f6:6c:95:71:88:83:
                    1b:b6:de:2a:a1:2b:39:e1:b3:13:f3:80:0d:92:1e:
                    76:6d:84:24:6f:98:09:e7:34:77:33:06:70:5e:3d:
                    6f:5b:72:63:8b:2e:39:3a:c3:95:41:bc:fb:e3:8b:
                    f0:9f:ab:b9:4b:58:52:4b:a2:81:37:e4:d8:b3:4b:
                    6c:02:4a:43:f6:d8:60:0a:65:57:1e:ab:39:26:3c:
                    ec:16:d4:52:f4:40:8c:b3:1a:bd:cb:3e:d5:f0:bf:
                    61:4e:de:f4:a1:54:cc:2d:39:7e:d8:7c:c3:a0:f4:
                    55:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FB:08:03:BB:48:19:70:DD:C4:3A:E9:C1:7B:FB:C7:16:76:96:F6
            X509v3 Authority Key Identifier:
                keyid:2F:5C:9B:EF:70:E5:D0:23:B7:1C:46:CB:66:CF:E2:A1:FD:B4:83:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1yb73Dl0CO3HEbLZs_iof20g1s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D55E/62A5EB6A1D5B11EB83AC871AC4F9AE02/L1yb73Dl0CO3HEbLZs_iof20g1s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:e5:07:85:85:1a:9a:05:f7:27:9d:11:a1:a9:37:67:23:dc:
         81:ef:94:ed:13:b1:b9:6b:7f:95:f7:f2:37:f5:71:15:21:ad:
         bf:28:f2:af:25:12:e3:45:16:b7:e2:5d:23:70:cc:d3:1a:af:
         99:a9:60:3d:04:30:94:c1:b0:97:62:1f:fd:1c:9e:9c:3b:2e:
         8f:af:91:3d:ea:f2:cb:43:80:78:19:e0:87:f3:6a:01:0d:48:
         f1:30:a3:c8:ed:07:c4:c1:65:1e:42:a3:bf:a2:80:c7:51:38:
         bc:43:01:ab:60:62:73:5b:71:a5:2e:a2:0c:d0:fe:af:c3:fb:
         aa:28:dc:f9:6a:af:6c:64:5e:ce:f1:f1:dc:20:6f:85:a2:4c:
         6f:4c:72:3f:b6:a7:f6:3a:1b:f5:29:15:6c:13:1e:a1:47:53:
         99:ef:9c:d3:b6:8d:99:22:79:b1:a0:46:09:ef:70:b0:6b:da:
         8b:cd:83:33:b2:67:99:fe:64:96:a4:bc:d1:46:63:1a:aa:43:
         46:1d:d0:e7:e1:cd:59:2c:8b:f0:c0:d6:1e:34:ef:39:14:f0:
         84:c8:64:06:9b:56:70:f4:ed:d5:59:32:1f:6d:f1:d9:96:93:
         d1:30:64:9a:cc:dc:41:36:b7:b6:52:53:13:78:72:d0:63:56:
         66:b3:db:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:36 2025 by rpki-client