Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
File:                     AxycJuW6sbAa8YoLsblwq1dzRWs.mft (raw, json)
Hash identifier:          xliCJo4OE/KrBsHIJWUp+WfbYr0n4iXQrRX7hT8jxmc=
Subject key identifier:   53:06:82:65:D1:B0:CB:69:15:19:B2:3C:90:58:8D:82:7E:68:F2:D6
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Certificate issuer:       /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial:       0666
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
Manifest number:          0625
Signing time:             Fri 22 Aug 2025 23:12:11 +0000
Manifest this update:     Fri 22 Aug 2025 23:12:10 +0000
Manifest next update:     Fri 29 Aug 2025 23:12:10 +0000
Files and hashes:         1: AxycJuW6sbAa8YoLsblwq1dzRWs.crl (hash: BIfcLyR7BH+WdZHP7vlpWw5THtVcFmhluWKMYuoKpcQ=)
                          2: F2CF477E50C711EF8B03E673C4F9AE02.roa (hash: btGjIQwgSn7JJwZL2buYiqMnVUjDHCpTzcRyOHOVV9w=)
                          3: 3B428CDA8AE011EF90B73462C4F9AE02.roa (hash: 57IRG/hk+CbShhSRohuNNMRM6NtPI2s9mEQB7EL1Rs8=)
                          4: E88EE726E93611EF9E3FF729C4F9AE02.roa (hash: ltl+DfDEYXJ+yRffLM013Libfn2gz+fEWau0tvSsxac=)
                          5: 37DF315640B111F0B139F22BC4F9AE02.roa (hash: 4Gm7XiaugCNOeoZN6LJmkv/s+XyGBxUWo0FM4EVSPNU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
                          rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 23:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1638 (0x666)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D8D9, serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
        Validity
            Not Before: Aug 22 23:12:10 2025 GMT
            Not After : Aug 29 23:12:10 2025 GMT
        Subject: CN=68a8f94a-3dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:18:08:44:f8:51:5d:13:45:8c:00:c7:d5:89:
                    75:f1:b2:5d:bc:3f:49:eb:8c:8d:5e:51:58:53:4c:
                    ee:be:2c:a3:bb:f7:fa:9d:08:d0:d3:88:81:fd:3f:
                    c4:c5:82:38:c7:fe:e3:99:1a:07:36:88:f5:c4:ee:
                    c0:f5:e3:fe:53:74:2b:7d:5b:b1:43:c3:72:28:ad:
                    17:82:d3:fa:c9:cf:1e:37:ce:64:04:88:2d:4f:32:
                    50:40:a4:10:cc:6a:f7:0c:9d:ab:03:2e:57:8e:22:
                    9b:ef:c3:88:78:a1:b5:a7:0c:e8:bb:cc:7d:9f:2a:
                    79:fd:2e:c9:30:98:8a:fb:cd:30:27:ef:ca:b8:63:
                    dd:ca:f9:1d:5d:9b:49:e4:e0:a3:60:be:b0:95:1b:
                    50:f3:b7:90:5a:5e:3e:90:02:f5:7d:31:2c:ab:88:
                    6b:05:d8:58:64:7e:47:60:7c:f8:17:55:42:f8:78:
                    f1:b1:d0:c5:8c:09:4b:d9:7d:ff:db:ac:f3:a2:b5:
                    5e:3f:58:2f:67:b0:ea:ab:6f:6b:0b:4e:5b:84:b8:
                    a7:89:6a:86:57:bb:a1:3b:8e:08:bf:40:ac:73:75:
                    7d:65:da:c7:97:74:43:2a:f5:73:fc:3e:57:84:9d:
                    29:09:57:b3:6c:ec:ac:77:9e:a6:ba:0a:a4:6a:47:
                    b9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:06:82:65:D1:B0:CB:69:15:19:B2:3C:90:58:8D:82:7E:68:F2:D6
            X509v3 Authority Key Identifier:
                keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:e7:ac:7b:50:bb:7b:a6:33:d0:7d:14:38:57:5a:79:fd:5d:
         3f:4b:ed:1d:0b:de:fd:6a:b9:01:17:6d:a7:0a:0e:8c:ff:6a:
         74:19:e1:16:e5:78:c8:ca:e1:b4:5b:42:c1:89:04:d6:57:33:
         7f:e4:d2:a0:c4:31:1a:21:c7:2c:02:d4:d2:af:9e:1f:1c:70:
         96:76:e0:c8:38:2a:95:b9:57:58:05:3a:39:dc:a9:80:c3:e4:
         24:bc:a9:1c:93:2a:cd:6f:a5:be:10:85:ec:87:94:74:f4:e7:
         40:61:09:52:8b:81:56:b5:e0:5e:e2:9d:be:4a:30:f8:b2:35:
         01:ff:53:7a:37:2e:33:7f:b9:85:29:bf:71:7b:7d:a7:9f:15:
         7e:52:92:26:07:9a:7d:a7:f1:eb:96:37:08:02:6e:09:bd:cb:
         c7:30:fc:e4:86:f6:12:3a:04:61:59:b7:c1:53:06:92:2a:28:
         e0:76:75:c4:61:ce:d2:8b:66:7d:89:50:6d:d5:eb:20:e5:a3:
         bb:f5:bb:47:6b:1b:84:19:c2:40:1e:db:66:bd:4d:2d:5f:85:
         3f:12:67:21:a5:c9:27:1f:6b:84:0e:17:f9:24:1f:18:50:a5:
         ce:4c:ca:b8:34:54:38:be:71:ea:aa:e8:a8:23:a9:a0:1f:3b:
         74:0f:dc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:52:42 2025 by rpki-client