Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
File:                     6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft (raw, json)
Hash identifier:          mhDbNNxoSj8450nhzQklLliYZ+jcUcTnTI3oSVQbFH0=
Subject key identifier:   B0:A7:41:58:AC:62:70:40:81:76:7D:71:A0:74:64:AE:87:15:71:CF
Authority key identifier: E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
Certificate issuer:       /CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Certificate serial:       0889
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
Manifest number:          0855
Signing time:             Fri 22 Aug 2025 21:00:00 +0000
Manifest this update:     Fri 22 Aug 2025 20:59:59 +0000
Manifest next update:     Fri 29 Aug 2025 20:59:59 +0000
Files and hashes:         1: 6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl (hash: D4dnCX8hjIcFtv8beSkvCLTEDHQVFkHxom5LiARoO4I=)
                          2: C183E63077FD11F0A656FC44C4F9AE02.roa (hash: 0R9iz7181F7PaBcLkbdaXv+LVpATil4RyYLXbqxbdt4=)
                          3: 4500A5A669BD11F0A024565FC4F9AE02.roa (hash: LS599Y26OBxG7rAOCClwcDjWdQ4xPNZG0wJ1NF6kL3Y=)
                          4: 03476D523FB011F097B5F864C4F9AE02.roa (hash: V/GUkEYycrfVr0CeXDFIAE3DCEVs8ccFAFXl7jAkBfQ=)
                          5: 87448EFE3D1D11F0A469B051C4F9AE02.roa (hash: 67c129aFdKchOeJBLSQTErVCgqpsP+UzfUSQtqZi7PQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
                          rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 20:59:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2185 (0x889)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EFDF, serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
        Validity
            Not Before: Aug 22 20:59:59 2025 GMT
            Not After : Aug 29 20:59:59 2025 GMT
        Subject: CN=68a8da4f-99c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:67:06:a6:dc:27:5e:77:31:1b:5c:2b:e9:e0:
                    62:cf:f2:b7:ea:e5:12:66:42:72:cd:77:3a:20:9b:
                    63:06:c7:d7:df:c6:6c:1d:e5:39:46:11:b0:4c:6c:
                    86:e6:c4:1b:4f:3d:98:94:03:3e:7c:27:3f:ee:8e:
                    14:86:46:32:96:40:38:ea:cc:81:f8:cc:bf:a6:f5:
                    2b:02:d4:6c:bd:a5:02:81:b4:5e:2e:f2:ae:72:51:
                    b9:e8:3d:f7:9d:b1:f4:b4:e4:51:9e:9c:d3:39:df:
                    d7:a9:f8:d1:0b:12:87:fe:2a:a2:65:7b:7b:1c:fc:
                    da:15:a6:cd:7a:ea:2b:3b:70:54:9f:87:f4:6f:b7:
                    71:9c:2b:22:46:6a:82:e3:c0:87:14:85:53:96:b0:
                    d4:26:d0:b5:7e:ca:65:dc:de:06:aa:4b:ca:e9:98:
                    c8:1d:58:fa:8a:96:88:54:ad:da:a5:8b:1e:15:15:
                    91:26:e0:50:76:fe:fd:16:48:88:7f:20:38:96:da:
                    60:71:90:ec:fb:8f:3f:94:d9:44:32:96:1a:dd:d9:
                    38:3c:47:be:08:1d:a5:9e:4b:03:c8:1c:13:d3:9b:
                    6b:0b:a1:e8:2b:5a:d4:78:e9:c9:d1:63:e0:b2:e0:
                    ca:84:e5:52:86:b8:ff:85:20:27:48:16:2e:b7:c2:
                    88:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A7:41:58:AC:62:70:40:81:76:7D:71:A0:74:64:AE:87:15:71:CF
            X509v3 Authority Key Identifier:
                keyid:E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:09:eb:b7:44:b2:df:b9:ab:5f:ea:b8:c1:b3:0b:0d:0d:30:
         b4:ce:22:22:2a:47:7b:18:58:5d:8b:e8:ad:5e:bb:e6:d0:9f:
         05:91:18:45:f7:4c:64:2e:92:96:a0:20:83:2f:a7:66:d3:86:
         29:53:e8:3e:91:cf:c6:e5:24:7c:cf:db:a1:52:42:ec:9e:4d:
         9a:5c:e8:f8:81:6a:2b:0d:4b:b2:e8:69:fe:5c:e0:5d:11:df:
         4e:27:5b:e0:a3:9f:9e:39:06:04:16:3e:13:7b:69:3f:e6:64:
         3f:6d:09:e5:d3:e8:44:03:c9:bf:4c:8c:f4:2b:33:ff:d9:cf:
         69:a7:ce:4d:8c:c9:e6:ca:aa:e5:ef:9b:7e:55:45:df:a1:0d:
         d6:ad:22:9d:39:6c:0b:b9:20:5e:a9:fe:a6:87:b1:b4:8f:18:
         1e:37:ab:46:1e:22:06:f9:d0:2f:a7:e2:d5:ae:b3:a2:22:8b:
         07:16:98:68:ff:29:11:e4:73:e8:d5:04:6d:46:ab:a7:84:9a:
         f0:6f:39:6f:3e:21:ac:36:1e:d8:7f:5b:92:43:3d:0a:16:d6:
         7d:83:58:b3:69:04:30:ec:2f:8f:91:98:d8:1a:16:f1:23:02:
         c7:2a:14:53:48:33:1d:f1:d0:da:ed:4d:0a:15:a1:b0:2f:92:
         c2:5f:6e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:24:33 2025 by rpki-client