Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
File:                     8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft (raw, json)
Hash identifier:          K8xWGEbITMlLOCIhBLiG6aqqe6bfD8WlveJHyBpxUKU=
Subject key identifier:   28:6B:77:1F:FD:7E:B5:47:0D:99:2E:4B:23:C4:3A:ED:39:09:3C:FD
Authority key identifier: F0:CB:35:F1:45:E6:1B:1C:20:43:AF:D1:BA:4E:35:41:47:C4:B5:5E
Certificate issuer:       /CN=A9163415/serialNumber=F0CB35F145E61B1C2043AFD1BA4E354147C4B55E
Certificate serial:       0B55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
Manifest number:          0B4D
Signing time:             Fri 22 Aug 2025 19:17:15 +0000
Manifest this update:     Fri 22 Aug 2025 19:17:14 +0000
Manifest next update:     Fri 29 Aug 2025 19:17:14 +0000
Files and hashes:         1: 8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl (hash: p97q6XFAINi4GLxnu4LDAAeouycirSqfNpZEJ+q1M14=)
                          2: 24C647DC3DFE11EAA52A0572C4F9AE02.roa (hash: P0bYmStiB4oa4LekcidIgrNs8onI2ttf+z7KOz4RThU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl
                          rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 19:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2901 (0xb55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163415, serialNumber=F0CB35F145E61B1C2043AFD1BA4E354147C4B55E
        Validity
            Not Before: Aug 22 19:17:14 2025 GMT
            Not After : Aug 29 19:17:14 2025 GMT
        Subject: CN=68a8c23b-3ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fc:a4:a5:8a:36:a8:43:ba:42:e5:d0:5c:6a:
                    5d:9a:ab:c4:95:f2:04:0c:a5:2e:49:da:69:d9:80:
                    89:d5:17:ba:5f:98:70:e0:42:56:5c:78:5f:0b:45:
                    4d:1b:12:f8:44:c8:5f:87:d9:83:5b:4c:c9:2d:f5:
                    c1:c1:59:bb:20:56:da:5e:e3:b7:7e:d7:a0:2e:74:
                    6a:29:31:9a:ab:13:b4:91:bc:b9:69:99:96:84:9e:
                    66:b3:86:47:ca:50:9a:35:c8:8b:91:6e:57:f1:c7:
                    b2:ca:7a:67:49:f1:08:c4:c9:02:cf:51:94:4c:2d:
                    65:7a:1c:92:18:c7:8f:f9:05:6c:55:29:d1:a9:e3:
                    ad:35:91:51:36:6d:26:1d:7c:93:bd:f0:74:93:5b:
                    8b:a4:75:9a:3f:2e:3c:61:1f:77:48:82:3c:e8:65:
                    94:75:11:e2:38:f3:7c:ef:20:cc:39:f0:c9:b1:66:
                    8b:f6:f5:77:dd:bb:83:06:6f:f6:3a:f7:68:37:8b:
                    b4:7c:ef:65:85:a0:27:f1:68:d0:ee:28:91:55:c8:
                    00:55:bf:d2:47:28:ab:c2:f0:5f:8d:0c:a1:cb:e6:
                    47:2e:18:e9:5d:db:9d:45:02:a8:45:fb:a7:fc:db:
                    17:49:b3:4f:2e:e0:f3:93:48:75:60:8d:78:6c:ec:
                    1b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6B:77:1F:FD:7E:B5:47:0D:99:2E:4B:23:C4:3A:ED:39:09:3C:FD
            X509v3 Authority Key Identifier:
                keyid:F0:CB:35:F1:45:E6:1B:1C:20:43:AF:D1:BA:4E:35:41:47:C4:B5:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:e7:83:3d:c0:71:a7:f3:c2:40:ad:d4:89:c7:86:36:1a:d8:
         67:12:fa:47:2e:96:b0:e8:88:f8:8b:ee:bc:84:0a:4f:35:e8:
         b7:0a:27:2e:f3:61:4a:47:9c:47:0c:e8:1f:e5:55:d0:e7:d8:
         36:fb:d4:b0:d2:93:5d:25:c9:08:3d:1a:46:23:75:38:1e:fe:
         52:57:18:32:0e:de:e9:e2:5d:0e:45:92:19:aa:d6:e8:19:9b:
         89:2a:f1:69:9c:fc:e3:29:de:0b:ab:6d:69:ff:5b:bb:d0:83:
         68:e3:92:0c:43:aa:d2:16:ba:c0:6a:19:67:9c:56:86:d4:6a:
         29:9e:e9:54:dc:41:46:6a:f9:b7:a5:dc:e2:5e:56:3c:6e:92:
         62:92:1f:43:27:5b:f4:5f:6d:d0:3a:bc:b9:5e:f0:7b:82:37:
         aa:2c:2f:dc:e9:8e:e0:7b:63:fb:c3:2d:54:21:62:7d:17:29:
         27:8d:fa:0b:eb:b7:3d:ad:46:3b:ed:a4:04:7c:71:69:cc:6a:
         bc:14:38:e9:00:b8:bf:f8:06:f2:71:f3:19:ce:ab:e7:c1:81:
         95:a4:c2:a0:f4:ec:08:da:f7:93:01:b9:e5:41:44:d1:ac:53:
         94:8d:c8:04:05:e0:7e:be:8b:88:c9:7a:2b:d1:1c:57:44:71:
         1b:7b:84:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:01:42 2025 by rpki-client