Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft
File:                     5MpluNDHsWXZwip6vfgapm-q1NE.mft (raw, json)
Hash identifier:          FGjiH7WD7Mb9QYYD6HsSAH/BAp+cyIYaCxEE4YToLmg=
Subject key identifier:   E0:ED:F5:C3:A5:E7:C3:26:FE:A4:D0:13:14:8F:C5:EB:5D:BB:A2:48
Authority key identifier: E4:CA:65:B8:D0:C7:B1:65:D9:C2:2A:7A:BD:F8:1A:A6:6F:AA:D4:D1
Certificate issuer:       /CN=A915EAAF/serialNumber=E4CA65B8D0C7B165D9C22A7ABDF81AA66FAAD4D1
Certificate serial:       34AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5MpluNDHsWXZwip6vfgapm-q1NE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft
Manifest number:          34AF
Signing time:             Fri 22 Aug 2025 14:39:32 +0000
Manifest this update:     Fri 22 Aug 2025 14:39:31 +0000
Manifest next update:     Fri 29 Aug 2025 14:39:31 +0000
Files and hashes:         1: 5MpluNDHsWXZwip6vfgapm-q1NE.crl (hash: xLH4zMoT/uAmXuLpUKexOsop238RvChdpMO7znH6l1E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.crl
                          rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5MpluNDHsWXZwip6vfgapm-q1NE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 14:39:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13487 (0x34af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EAAF, serialNumber=E4CA65B8D0C7B165D9C22A7ABDF81AA66FAAD4D1
        Validity
            Not Before: Aug 22 14:39:31 2025 GMT
            Not After : Aug 29 14:39:31 2025 GMT
        Subject: CN=68a88124-89ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a1:1d:e1:6f:0e:f8:7e:bc:ab:1b:75:71:cf:
                    fa:23:0f:eb:6f:75:8f:d4:41:e6:1f:6a:5b:80:a5:
                    cb:09:d0:41:fd:8a:8e:ec:3d:22:27:64:49:ce:bb:
                    14:32:28:f6:53:0b:58:ca:a9:9c:6b:35:cb:f8:5e:
                    ad:b2:d7:62:b5:83:e1:c8:0f:37:73:00:b5:62:1f:
                    7b:72:13:b6:31:e2:42:6d:0f:4a:f7:bc:a4:04:b5:
                    6d:bc:cc:b3:79:dd:34:5c:6b:9c:1a:17:03:5a:df:
                    b7:14:5f:b9:07:48:ed:f2:51:60:bb:56:43:38:43:
                    08:39:7b:3b:0d:92:03:63:b2:95:6f:77:a0:5c:ff:
                    15:bb:c4:47:7e:96:50:b1:10:51:79:7c:ea:04:9d:
                    43:85:68:95:c4:a0:d4:72:b2:31:84:2f:72:ad:e2:
                    41:4c:e0:89:a5:0e:5e:42:7d:b7:85:63:31:50:c1:
                    3a:c8:f0:2a:61:72:de:07:b6:29:34:f0:bc:9a:91:
                    11:9e:29:aa:4a:1f:e4:dd:cc:4b:09:d6:62:af:e8:
                    41:9e:ba:88:66:92:7b:2f:9b:1c:06:51:a7:ac:0b:
                    cc:34:ab:48:8e:f6:ff:79:3c:fc:83:fe:fb:7d:f1:
                    90:58:2f:61:33:89:d0:f9:19:2f:95:b4:1c:4c:c2:
                    48:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:ED:F5:C3:A5:E7:C3:26:FE:A4:D0:13:14:8F:C5:EB:5D:BB:A2:48
            X509v3 Authority Key Identifier:
                keyid:E4:CA:65:B8:D0:C7:B1:65:D9:C2:2A:7A:BD:F8:1A:A6:6F:AA:D4:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5MpluNDHsWXZwip6vfgapm-q1NE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:b1:8d:43:34:46:f5:06:3c:95:e9:c7:e1:f2:81:61:49:ae:
         de:49:4c:47:ea:ec:53:66:98:19:ad:ba:55:dc:08:1b:a3:f1:
         ce:10:cc:a9:71:61:0c:ba:5d:91:f7:8f:77:ce:6e:c2:54:11:
         34:9f:42:f5:4b:58:66:66:84:eb:68:e1:51:f3:52:b1:8a:c9:
         94:eb:a1:c6:87:0a:37:eb:e9:68:d7:7f:54:cc:fe:cb:42:68:
         b8:0f:87:c2:5f:5c:ae:e9:8a:36:4f:f7:6e:4e:95:de:f2:8e:
         62:f2:17:db:e7:d4:aa:50:33:1a:50:44:45:d7:ad:6e:4a:14:
         56:40:56:cc:4b:e6:78:18:1b:a4:ff:6d:77:c2:23:61:bc:b1:
         88:3d:52:4b:76:8f:60:5b:97:89:80:93:4e:e8:b8:ac:80:15:
         f4:c1:93:64:39:d4:fa:86:1a:64:56:a0:3c:c9:de:45:e4:57:
         22:dd:e5:8b:2e:4b:9d:a2:fd:f0:ee:3a:ff:aa:4e:19:b5:ea:
         62:d8:83:a2:ba:94:ed:8c:7b:c3:55:a8:3f:95:43:5a:eb:a5:
         cb:5e:e2:aa:f1:a3:ce:18:8a:51:aa:e0:cf:6c:de:76:fc:08:
         61:59:fa:9d:f7:fa:65:9f:21:6b:68:cf:7c:72:6f:53:94:66:
         a1:7e:64:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:51:28 2025 by rpki-client