Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.mft
File:                     08nS13n2aEMJcSuzDPoZkpDhuNY.mft (raw, json)
Hash identifier:          EyhAseQlgFgpj768BZBPc7tP7M9RPggtT7vnIOnJYa0=
Subject key identifier:   B3:13:9F:03:8C:6C:0A:C2:AC:C1:87:AC:D6:D9:9D:7A:F8:16:ED:C6
Authority key identifier: D3:C9:D2:D7:79:F6:68:43:09:71:2B:B3:0C:FA:19:92:90:E1:B8:D6
Certificate issuer:       /CN=A915DE8F/serialNumber=D3C9D2D779F6684309712BB30CFA199290E1B8D6
Certificate serial:       7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08nS13n2aEMJcSuzDPoZkpDhuNY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.mft
Manifest number:          79
Signing time:             Thu 03 Jul 2025 06:59:05 +0000
Manifest this update:     Thu 03 Jul 2025 06:59:04 +0000
Manifest next update:     Thu 10 Jul 2025 06:59:04 +0000
Files and hashes:         1: 08nS13n2aEMJcSuzDPoZkpDhuNY.crl (hash: flxhkT2LqBEf178JqpEEEUDyr2znnvQspUrAm6cR7SU=)
                          2: 6DEFE6D8A14611EF93AB8E21C4F9AE02.roa (hash: rRMGtINr2UhdhF+qj8NjJEBcNErv93/+Ql2sANUuRRs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.crl
                          rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08nS13n2aEMJcSuzDPoZkpDhuNY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915DE8F, serialNumber=D3C9D2D779F6684309712BB30CFA199290E1B8D6
        Validity
            Not Before: Jul  3 06:59:04 2025 GMT
            Not After : Jul 10 06:59:04 2025 GMT
        Subject: CN=68662a39-24f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:db:da:f2:fe:87:7d:90:fc:4f:f7:be:a9:f5:
                    96:41:fd:2a:89:60:7b:b9:a6:2d:e0:33:c0:42:24:
                    1a:60:1a:03:b3:21:b2:7c:d9:6b:ba:2b:dd:20:58:
                    01:09:c3:42:2c:34:e5:cb:99:79:33:4c:c5:5d:2a:
                    ff:07:0a:83:ee:60:ce:f7:57:0a:c4:8d:13:a1:47:
                    32:c4:3d:f8:4f:58:e7:4b:28:20:65:c4:e6:38:2c:
                    c4:23:d9:70:3c:79:25:a1:65:8d:e7:89:21:bf:bb:
                    ae:56:16:ec:87:67:33:3e:41:57:f5:ac:73:b6:2f:
                    50:10:44:ca:09:70:2d:d4:23:75:64:89:6d:bb:db:
                    47:70:f1:75:b3:4c:19:cb:5c:fc:a7:26:45:7a:cf:
                    a7:ef:b5:23:f7:c8:af:07:df:af:11:7f:be:47:ee:
                    1d:8a:50:8f:73:2a:9c:cd:8c:93:ca:dd:7d:4f:e9:
                    36:72:62:cd:3b:df:fe:16:84:76:53:1b:12:4f:dd:
                    47:fb:49:2d:ae:e2:28:d6:8b:2b:0a:32:55:f8:03:
                    19:cb:e0:51:ca:69:ba:c1:8b:f8:a1:8f:95:d8:66:
                    e5:84:c8:36:da:75:4e:c2:bc:db:28:1b:81:01:88:
                    25:84:04:33:89:71:31:f6:5d:b5:3e:4c:6a:32:26:
                    0b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:13:9F:03:8C:6C:0A:C2:AC:C1:87:AC:D6:D9:9D:7A:F8:16:ED:C6
            X509v3 Authority Key Identifier:
                keyid:D3:C9:D2:D7:79:F6:68:43:09:71:2B:B3:0C:FA:19:92:90:E1:B8:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08nS13n2aEMJcSuzDPoZkpDhuNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DE8F/0B543B0AA14611EFA12A6E1FC4F9AE02/08nS13n2aEMJcSuzDPoZkpDhuNY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b6:57:1c:8a:55:6c:4f:4c:fe:f5:db:d5:1c:4e:f6:f7:c1:
         0c:0a:94:8b:aa:8e:40:79:77:db:60:df:7e:22:3b:ec:44:2b:
         a7:da:11:32:38:fd:18:76:0b:3c:8e:7e:73:e3:ab:6b:32:86:
         45:e7:b5:84:71:71:7e:ae:78:0b:2c:ce:c7:5e:ff:0d:72:9c:
         31:01:95:bb:1c:61:6d:31:32:68:0d:c2:a3:12:32:a2:88:a2:
         18:f3:34:78:16:3d:42:25:33:13:a7:ff:a7:f7:7d:51:31:6a:
         2e:b7:63:b8:89:b7:d9:d1:4e:dc:21:3a:c3:b0:16:df:60:ae:
         a3:d7:9e:fd:92:11:16:3b:56:78:c7:60:2c:c2:29:fb:7a:b8:
         8d:b4:28:aa:38:50:a0:a2:7a:2b:3e:35:4c:7d:41:15:aa:32:
         00:b6:3c:6e:46:81:d2:4f:f6:ef:73:8d:cd:7b:33:ac:60:91:
         08:26:cb:18:71:29:d1:4e:02:99:44:4b:19:50:15:b3:a7:69:
         75:c6:aa:60:45:f4:6b:ff:e7:2f:fa:46:96:c7:ab:e9:b0:6f:
         e3:a4:25:f7:60:f7:13:27:2a:9e:94:8f:96:0b:4c:fb:51:c0:
         3f:ef:92:63:bd:81:e9:65:88:69:12:5a:d9:36:df:c3:bb:c9:
         8e:d9:44:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 02:54:35 2025 by rpki-client