Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
File:                     -bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft (raw, json)
Hash identifier:          CTcUdzi9GraBFZ71GBBcOm8fAyB9/i8O/sbx6EPrFCI=
Subject key identifier:   B7:EF:12:86:E3:0E:3E:2C:13:3C:17:89:01:B2:B0:80:EB:E5:B8:85
Authority key identifier: F9:B4:02:2C:02:9E:7D:9E:5A:63:49:68:FD:BA:4A:0E:9C:D6:24:E4
Certificate issuer:       /CN=A915E012/serialNumber=F9B4022C029E7D9E5A634968FDBA4A0E9CD624E4
Certificate serial:       48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
Manifest number:          46
Signing time:             Sat 23 Aug 2025 07:38:30 +0000
Manifest this update:     Sat 23 Aug 2025 07:38:29 +0000
Manifest next update:     Sat 30 Aug 2025 07:38:29 +0000
Files and hashes:         1: -bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl (hash: asqkro8AlHM9TireiL5UPtsPnNEe51XZ/7boioUY7tY=)
                          2: 28BBA728141411F08D862A74C4F9AE02.roa (hash: bM0rHlFCkCxESty36KKICwvwa1HEG8pgqoXnhaZGbjI=)
                          3: 2857C712141411F08D862A74C4F9AE02.roa (hash: q/LJ7SPvTkUYwfSCfg1Hilqw1bbJVMWb831qXikLEmE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl
                          rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 07:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E012, serialNumber=F9B4022C029E7D9E5A634968FDBA4A0E9CD624E4
        Validity
            Not Before: Aug 23 07:38:29 2025 GMT
            Not After : Aug 30 07:38:29 2025 GMT
        Subject: CN=68a96ff5-7693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3f:39:27:2a:5d:8c:f0:25:69:b2:67:ad:4b:
                    85:67:50:c6:19:e2:d6:4a:cc:52:2c:a0:c0:11:60:
                    c0:5f:98:4a:cb:62:b7:f0:8f:de:b2:ea:cd:6e:c2:
                    7c:82:b6:66:ac:f0:43:83:f7:49:0f:74:c1:57:fa:
                    71:2a:89:ab:19:5b:ef:88:76:77:f9:03:c1:a1:81:
                    e4:44:a9:c3:8f:32:a6:41:11:c2:c4:41:3a:0c:8d:
                    20:c4:ce:62:f6:ea:a2:96:fd:7c:7b:d0:af:82:74:
                    be:eb:d7:b9:ef:bc:6b:24:2f:a7:d1:11:aa:79:92:
                    7f:50:3b:69:76:91:99:92:bd:3a:b5:3c:25:16:f8:
                    d7:e2:1b:52:56:3b:c6:5e:e4:af:d0:ef:06:55:3d:
                    e3:2b:8c:3c:56:24:96:a6:fb:aa:90:f0:c0:64:8d:
                    c8:e5:aa:f0:87:89:b7:d3:73:8c:fb:fc:9b:ce:18:
                    9b:2d:be:f2:b0:91:1a:81:9a:22:ce:be:92:38:84:
                    3c:8c:e4:29:fd:8a:62:a9:f6:5b:99:b4:4d:24:28:
                    b1:64:f3:1f:a7:54:aa:33:a3:39:36:0a:2c:b5:5a:
                    c1:14:c3:ff:35:18:1d:ae:f8:d4:b1:32:c7:b8:1d:
                    94:f8:59:ef:24:27:36:5e:d4:f9:3a:54:b4:29:17:
                    4e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EF:12:86:E3:0E:3E:2C:13:3C:17:89:01:B2:B0:80:EB:E5:B8:85
            X509v3 Authority Key Identifier:
                keyid:F9:B4:02:2C:02:9E:7D:9E:5A:63:49:68:FD:BA:4A:0E:9C:D6:24:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:b8:23:0e:9e:6b:ca:7b:06:aa:8f:09:34:5a:9f:7a:48:5e:
         e5:8b:03:9a:55:f1:6e:74:57:ae:3d:d6:f2:ec:63:78:3e:79:
         ea:64:20:18:4e:7c:8c:8c:2f:23:6d:b4:02:0b:bf:dc:8d:3b:
         a1:e3:43:e8:9d:6d:09:33:6b:88:bb:cb:fa:80:93:d2:98:7c:
         eb:a5:59:1b:c7:c0:a3:53:db:24:ff:83:ad:f1:77:42:26:ae:
         ea:6a:b9:96:48:d3:42:c4:8e:20:20:49:5e:ae:87:ec:1d:f1:
         17:a9:de:54:18:32:51:9c:a4:56:62:9f:99:d3:7c:3c:54:4c:
         1a:8c:ad:0c:34:88:17:0b:d5:47:41:6f:f0:8b:b8:f9:2b:09:
         57:88:da:cb:08:e9:81:0c:56:54:48:1d:47:d4:df:c0:96:fd:
         07:85:b8:8a:7b:91:61:e4:23:5e:71:4d:84:2b:db:a5:91:6a:
         c9:d0:b1:cc:71:91:c0:98:11:3a:c4:92:ba:de:f3:e9:be:8b:
         f1:97:c6:b9:cd:c5:3d:72:1a:70:6c:16:5a:e1:d6:72:eb:20:
         2e:79:05:2e:f2:52:02:89:26:d9:87:46:5d:52:03:5c:c2:5b:
         fe:a5:22:e5:11:a4:b2:43:bb:42:01:a4:c6:2f:d8:a9:07:58:
         44:5a:6f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:49:10 2025 by rpki-client