Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
File:                     aRgc9FH4s_7GT8gpi1ItSIylyeY.mft (raw, json)
Hash identifier:          6fL8F/GUm0hv/HZTyMOOWKLygxTL1akyX7uCM/ZZ2Rc=
Subject key identifier:   2F:7B:A3:54:6B:9B:90:3C:8E:34:BD:49:3B:B9:B9:9C:95:E7:45:4A
Authority key identifier: 69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
Certificate issuer:       /CN=A916DE3D/serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
Certificate serial:       79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
Manifest number:          72
Signing time:             Sat 23 Aug 2025 07:11:20 +0000
Manifest this update:     Sat 23 Aug 2025 07:11:20 +0000
Manifest next update:     Sat 30 Aug 2025 07:11:20 +0000
Files and hashes:         1: aRgc9FH4s_7GT8gpi1ItSIylyeY.crl (hash: quIuvsYDOZrCcp5qjUiz4DY+GI1kScwFCys/LEIgKmk=)
                          2: 3AA17754FD8211EFB5BB677AC4F9AE02.roa (hash: imHJlERFiYSGRBFLnXEmas2EVRVLv/9+zOxRclw7D8g=)
                          3: B3266880FD8511EFA4783083C4F9AE02.roa (hash: W6yWEruXPIDPoCs6QL8pnWnNjj8hPqXcENkKFmbbFhk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl
                          rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 07:11:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DE3D, serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
        Validity
            Not Before: Aug 23 07:11:20 2025 GMT
            Not After : Aug 30 07:11:20 2025 GMT
        Subject: CN=68a96998-e5f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:59:33:fb:44:90:b2:33:85:c0:51:cc:cf:69:
                    29:d7:08:1b:aa:6c:46:09:07:56:18:3c:e3:55:bf:
                    65:7c:29:fc:21:47:b9:7c:cb:6f:3f:36:b1:9e:aa:
                    e7:f1:3e:c7:ff:33:6b:f1:08:5e:67:53:46:86:bf:
                    3a:8a:0a:5d:68:00:84:95:ff:ac:51:35:74:ea:2e:
                    86:66:e9:39:f1:8b:81:55:ff:70:a3:58:ce:39:33:
                    fb:6a:d1:7c:fc:84:35:09:ab:d5:7c:8b:04:e9:19:
                    ce:e6:80:56:20:b2:28:0d:a1:d7:84:54:6b:ec:1e:
                    5e:dd:ea:4a:fa:32:8c:df:4d:9a:41:80:84:37:96:
                    af:e8:c2:c4:50:7d:37:98:50:c1:e6:05:db:11:ef:
                    5e:31:c6:d4:d0:ba:6b:44:82:19:cb:57:26:6d:5b:
                    32:f9:d5:ff:ad:fe:b0:43:ad:a4:b8:09:63:53:ce:
                    23:0a:f7:46:df:87:57:f9:00:38:e1:48:f8:0f:74:
                    c5:a7:52:6a:61:65:15:ae:7f:0d:13:cc:ff:4c:e2:
                    ea:da:48:f2:d8:a9:dd:e7:73:77:62:3d:f9:a5:e1:
                    a1:ca:97:28:16:64:c2:02:46:52:b8:f5:df:00:10:
                    f3:fe:c5:59:55:49:6d:eb:ce:53:03:8e:9b:5a:24:
                    46:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:7B:A3:54:6B:9B:90:3C:8E:34:BD:49:3B:B9:B9:9C:95:E7:45:4A
            X509v3 Authority Key Identifier:
                keyid:69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:9a:0d:dd:fa:52:05:db:5a:be:13:95:e3:c1:1a:2b:1d:c0:
         4a:67:80:d4:1b:ac:a8:a7:59:83:74:9c:13:7b:b2:d1:0d:6b:
         44:41:6e:42:fe:c9:ad:9b:d1:b7:61:5f:1f:a3:24:3f:fb:18:
         bd:11:03:f2:b5:4d:9e:00:b6:74:b9:cf:2a:64:56:37:76:08:
         fa:52:62:dc:34:b6:5a:43:8b:cd:4e:54:d5:c5:7e:7a:7d:b8:
         aa:38:06:ff:f8:e5:b3:19:1a:5b:5a:15:26:ae:4a:76:de:41:
         0e:21:28:22:96:2f:ba:8e:da:28:35:c5:0e:26:ca:b4:88:a8:
         1b:5b:30:1c:50:1b:fe:ab:9b:a7:53:f2:ed:3c:2f:e5:01:e1:
         ed:84:e5:84:c3:e2:51:c6:85:a6:f3:c7:0d:f1:c1:93:22:40:
         04:75:d5:dd:a6:91:89:50:4c:cb:a9:5b:92:b1:9d:b9:43:24:
         a5:26:8c:96:92:36:24:8a:16:8c:58:81:05:c4:c1:bf:e4:af:
         a6:56:85:f0:96:74:1a:87:0c:4a:cc:a5:2c:25:c4:b6:cb:c4:
         4c:59:85:f4:be:f3:fd:46:79:3f:e1:71:58:da:e2:e8:41:e4:
         6d:3c:6a:98:c0:3d:bf:0b:42:e6:cc:7a:ea:8c:71:ff:fb:49:
         c5:6c:ba:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:39:11 2025 by rpki-client