Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft
File:                     InkscMmJR76K9PSj51Wu3nlZ0ng.mft (raw, json)
Hash identifier:          Ij0t1MIQN6+YUuBgvwjZkqmocBDtfD+TTJwY6pJbq6Y=
Subject key identifier:   3E:48:5A:EC:8F:F7:2E:5D:FE:FF:69:F9:DB:01:23:B9:EE:03:3F:38
Authority key identifier: 22:79:2C:70:C9:89:47:BE:8A:F4:F4:A3:E7:55:AE:DE:79:59:D2:78
Certificate issuer:       /CN=A9166708/serialNumber=22792C70C98947BE8AF4F4A3E755AEDE7959D278
Certificate serial:       0FDE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft
Manifest number:          0FD6
Signing time:             Fri 22 Aug 2025 17:36:47 +0000
Manifest this update:     Fri 22 Aug 2025 17:36:47 +0000
Manifest next update:     Fri 29 Aug 2025 17:36:47 +0000
Files and hashes:         1: InkscMmJR76K9PSj51Wu3nlZ0ng.crl (hash: KZi4Ek3Xyb/CNQYwpFMDSp8JX2TDalMiJO+PIKKi5Kg=)
                          2: C3417AA6593611E98E4C8C44C4F9AE02.roa (hash: CPG724JKOro03lp9kH78JPks3F1iBFJ6IMMveDvmHaY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.crl
                          rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4062 (0xfde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166708, serialNumber=22792C70C98947BE8AF4F4A3E755AEDE7959D278
        Validity
            Not Before: Aug 22 17:36:47 2025 GMT
            Not After : Aug 29 17:36:47 2025 GMT
        Subject: CN=68a8aaaf-6f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ff:ce:3e:7d:aa:62:f7:c2:6e:ea:de:b7:11:
                    d6:e3:37:9e:bb:20:dd:3e:00:58:a4:e8:55:ff:4e:
                    38:40:77:0a:58:be:92:fb:58:39:bd:9e:3b:35:8b:
                    65:39:22:45:84:16:e9:b5:9d:7c:36:41:45:ae:81:
                    fb:de:8f:be:e2:33:98:ca:fe:11:c7:61:67:26:ce:
                    1f:5a:53:85:18:a8:c7:1f:ef:5e:2c:6b:29:b9:bd:
                    90:26:87:7e:d7:7f:ae:f0:df:28:6d:12:da:07:7b:
                    30:ec:12:09:6d:8d:88:0d:9e:37:9a:74:5c:f7:1a:
                    a5:84:2c:23:0c:26:6b:13:45:61:98:f9:80:d8:a9:
                    54:35:2a:b3:a1:17:39:8a:bb:fe:bd:e7:57:80:43:
                    46:56:d9:90:27:dd:ce:3e:1f:66:f5:7c:46:60:81:
                    62:0f:f0:4b:26:81:d8:3d:4f:76:1c:ff:77:17:3e:
                    bb:6e:af:72:2f:4d:c5:e3:ac:3e:0c:91:7f:77:dd:
                    22:2d:df:66:a5:7a:25:ae:bd:b9:23:29:f6:89:4f:
                    08:20:35:4e:bb:9b:a9:35:f0:6a:0c:de:ad:86:8a:
                    31:8f:20:6e:d1:4f:8e:0a:25:48:a8:9a:f8:59:ed:
                    a3:80:8f:2f:d9:ad:20:80:50:27:96:93:e1:de:75:
                    31:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:48:5A:EC:8F:F7:2E:5D:FE:FF:69:F9:DB:01:23:B9:EE:03:3F:38
            X509v3 Authority Key Identifier:
                keyid:22:79:2C:70:C9:89:47:BE:8A:F4:F4:A3:E7:55:AE:DE:79:59:D2:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:82:dc:bc:3c:3f:3f:22:b0:bd:33:7f:e1:c8:0b:64:b9:01:
         54:21:93:87:01:62:92:a2:e5:81:dc:3b:d0:63:e9:2f:16:79:
         d5:55:49:5d:01:87:dd:db:87:e6:f2:b1:ce:f3:d8:5e:02:a1:
         db:c2:53:b0:ff:5b:b8:83:c6:48:04:00:53:58:ad:71:18:57:
         21:4b:bd:4c:68:57:4f:cc:cc:0d:e5:76:8e:a2:bc:c5:f8:81:
         f3:99:66:99:64:d0:46:50:60:28:1f:89:87:f2:e4:51:81:4d:
         8e:ce:d2:08:71:0d:70:6d:64:04:68:f7:c5:bd:2f:4f:7f:9b:
         58:83:36:ea:fe:76:3f:0c:1b:46:df:48:d9:c8:ce:d9:79:99:
         65:25:4a:5f:43:b2:7e:50:15:5d:6e:d9:7d:f5:9e:ed:07:3a:
         c4:0b:3c:60:d8:12:77:63:50:42:7f:e5:7d:29:a7:27:f2:4f:
         a8:15:3c:c3:80:0d:a4:a2:bc:95:17:e2:fc:9b:8e:fa:41:65:
         fa:0c:89:72:53:13:64:73:dd:fe:ba:46:ea:04:ba:9b:c6:4a:
         e5:98:ec:8e:9e:fa:a4:92:e7:28:3b:50:e5:f5:69:43:ad:a2:
         04:aa:2a:11:3a:3e:7e:d7:a1:32:54:7e:85:aa:88:fb:4a:42:
         a6:e8:00:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:09:34 2025 by rpki-client