Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
File:                     PeZ4HWdeynny_j0XqyQ8t0t7liI.mft (raw, json)
Hash identifier:          UnSaORCikd7uB7sZLo07f6BatPQfERtWfK9V1p2e2tU=
Subject key identifier:   08:C4:55:EF:8A:3A:A7:28:A3:0B:AF:4D:62:9B:8C:F9:DA:00:8F:96
Authority key identifier: 3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22
Certificate issuer:       /CN=A9166123/serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
Certificate serial:       01B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
Manifest number:          01AE
Signing time:             Sat 23 Aug 2025 03:19:12 +0000
Manifest this update:     Sat 23 Aug 2025 03:19:12 +0000
Manifest next update:     Sat 30 Aug 2025 03:19:12 +0000
Files and hashes:         1: PeZ4HWdeynny_j0XqyQ8t0t7liI.crl (hash: JBJXs0zxaUn7HnC1NhMrDpWMp9yjOCJFMJXzlXw+Phk=)
                          2: 38891D6C159111EEA7190965C4F9AE02.roa (hash: meLyoohFJXeq9xZyDhHsYBao6mMdxERyGjcvbUw1nUs=)
                          3: 2F02BC96718D11EE97E3E022C4F9AE02.roa (hash: aL33iipoIJ8uom00lMgUJWhHvjr9mG3sVCYSyGN714A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl
                          rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:19:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 437 (0x1b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166123, serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
        Validity
            Not Before: Aug 23 03:19:12 2025 GMT
            Not After : Aug 30 03:19:12 2025 GMT
        Subject: CN=68a93330-1231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:04:ce:a3:97:2b:95:ce:ee:e0:5e:53:02:92:
                    90:f4:b8:12:b9:ca:cc:73:c0:0b:bf:25:28:50:d8:
                    22:21:b3:7c:ef:cd:80:39:c4:15:95:e3:69:c5:10:
                    2f:87:70:d3:9e:ac:49:59:82:c1:93:f9:c0:26:1e:
                    e7:37:7d:e0:26:d4:db:de:90:6e:04:a4:8c:8d:f2:
                    c7:2a:3a:ac:9c:44:8f:8d:07:3d:7f:26:ad:38:34:
                    aa:10:92:a8:be:e1:2d:2e:17:b3:8d:0c:e6:a0:56:
                    76:4e:10:29:02:4f:2f:8b:c2:d3:81:2a:c6:ba:99:
                    43:c8:71:94:6d:16:33:0a:76:53:78:bd:b2:cd:9c:
                    dd:2d:f1:8a:22:03:e8:19:df:c6:2e:82:20:0a:3c:
                    e7:e5:a5:72:07:70:e8:d6:87:03:89:a1:75:aa:c1:
                    a5:1c:b8:a4:df:12:67:ff:c4:c7:27:8a:12:95:47:
                    76:6a:40:3a:8a:7e:8f:3f:87:05:2d:25:d1:09:62:
                    b1:4c:1d:cc:b0:f9:84:ff:80:f4:c3:e5:6d:1c:a8:
                    72:89:2f:aa:d6:79:e2:63:78:35:4a:32:74:67:2d:
                    bd:d3:dc:5b:62:12:84:d5:0f:37:15:e5:f5:99:6d:
                    ba:18:e3:d6:80:13:1c:0a:27:60:30:4f:98:75:57:
                    44:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C4:55:EF:8A:3A:A7:28:A3:0B:AF:4D:62:9B:8C:F9:DA:00:8F:96
            X509v3 Authority Key Identifier:
                keyid:3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:26:5d:6c:20:01:fc:80:ad:7a:e3:41:e8:55:e6:4e:0b:8f:
         d3:8f:f7:77:02:fe:0a:c0:d4:84:02:6c:df:c5:93:aa:2d:f6:
         42:8d:df:a0:57:81:36:30:49:72:28:26:66:c3:6a:87:2b:65:
         ac:e0:ce:9a:05:21:a6:34:b2:6a:3b:43:eb:55:70:c4:c5:a9:
         0d:bf:05:e9:12:d9:2f:c7:cf:7f:cc:0f:6e:0f:77:4e:81:94:
         20:53:51:8a:e0:13:97:ae:71:ab:8c:1d:e7:1d:dd:24:71:85:
         d0:11:49:42:71:d9:22:89:00:21:d0:06:4f:94:e7:8c:c4:30:
         58:ed:b8:72:60:5e:00:c3:c0:c3:b2:9b:04:0d:ad:a9:74:50:
         2f:57:1c:cb:54:85:9e:28:d3:b2:25:e3:72:5e:e7:dd:70:96:
         86:20:4d:bd:ea:70:10:1f:de:c7:ed:68:20:40:c3:fc:f0:ac:
         c7:02:7f:57:06:e9:c7:02:2d:6f:41:90:a1:3e:06:9b:51:01:
         08:a8:63:b7:eb:e0:7e:db:05:ca:72:e3:cf:31:20:0b:73:f7:
         e2:fd:eb:19:00:7f:8d:99:aa:80:3f:d0:d4:39:b0:34:9a:63:
         ff:b0:f4:b1:24:7b:bd:58:09:b2:51:7d:07:bb:ca:2f:e3:8b:
         f0:13:98:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:42:06 2025 by rpki-client