Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916FC1D/AE838B367C4D11F095C93230C4F9AE02/MmA_zN7mtoB29mmttf4HrlrhMH8.mft
File:                     MmA_zN7mtoB29mmttf4HrlrhMH8.mft (raw, json)
Hash identifier:          Cift9xnjw4OZMnOVhA6iOBWpn4f4qbDoKqw/y1DhCzw=
Subject key identifier:   80:61:C4:DD:FA:53:FD:B8:71:D5:62:B1:D0:B8:CA:B0:56:58:0F:A1
Authority key identifier: 32:60:3F:CC:DE:E6:B6:80:76:F6:69:AD:B5:FE:07:AE:5A:E1:30:7F
Certificate issuer:       /CN=A916FC1D/serialNumber=32603FCCDEE6B68076F669ADB5FE07AE5AE1307F
Certificate serial:       04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmA_zN7mtoB29mmttf4HrlrhMH8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916FC1D/AE838B367C4D11F095C93230C4F9AE02/MmA_zN7mtoB29mmttf4HrlrhMH8.mft
Manifest number:          04
Signing time:             Sat 23 Aug 2025 08:24:06 +0000
Manifest this update:     Sat 23 Aug 2025 08:24:05 +0000
Manifest next update:     Sat 30 Aug 2025 08:24:05 +0000
Files and hashes:         1: MmA_zN7mtoB29mmttf4HrlrhMH8.crl (hash: lp84TH2+ya+inUufqrnfGnpi5ktriqyrYIppCLr3wL4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916FC1D/AE838B367C4D11F095C93230C4F9AE02/MmA_zN7mtoB29mmttf4HrlrhMH8.crl
                          rsync://rpki.apnic.net/member_repository/A916FC1D/AE838B367C4D11F095C93230C4F9AE02/MmA_zN7mtoB29mmttf4HrlrhMH8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmA_zN7mtoB29mmttf4HrlrhMH8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 08:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916FC1D, serialNumber=32603FCCDEE6B68076F669ADB5FE07AE5AE1307F
        Validity
            Not Before: Aug 23 08:24:05 2025 GMT
            Not After : Aug 30 08:24:05 2025 GMT
        Subject: CN=68a97aa6-023d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ba:30:b9:be:e6:df:01:72:88:ed:ec:99:50:
                    15:13:ed:bd:b6:75:02:ed:33:59:72:88:80:9d:c7:
                    0a:ef:1f:25:70:e4:e8:39:a3:f9:6c:1e:96:8c:09:
                    aa:66:7c:6e:79:ec:e5:4e:be:82:8d:30:0a:58:c1:
                    93:f2:b4:2d:2c:25:1e:71:24:3d:4f:c7:38:26:6f:
                    3f:56:be:b3:64:8c:e8:51:e2:d7:f7:2e:7a:bd:7c:
                    70:0c:d0:d1:a3:3f:b8:51:84:81:f1:3a:cc:5a:27:
                    98:21:71:6e:42:f2:52:55:10:06:7e:4b:46:ea:c1:
                    ab:9a:fa:f3:45:9b:69:17:87:3f:83:69:90:bd:87:
                    83:41:b8:fc:67:2b:d2:e0:62:5d:ce:5f:6e:27:85:
                    7d:01:73:1a:be:b8:70:71:1e:32:59:82:86:1a:78:
                    4d:74:b9:c1:35:79:ea:61:64:62:0e:d6:21:89:75:
                    5a:eb:a5:40:2f:5c:7b:a0:92:3c:38:73:85:e9:16:
                    92:27:a0:94:72:27:e5:34:66:7a:e0:29:a3:c3:98:
                    96:38:ab:fb:24:00:1e:92:3d:0a:5b:01:94:6f:72:
                    55:b5:df:1f:8e:62:f4:0a:a4:23:40:76:f0:d3:23:
                    ff:37:14:7f:7d:f7:f1:1c:89:b2:40:42:2f:d6:23:
                    c2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:61:C4:DD:FA:53:FD:B8:71:D5:62:B1:D0:B8:CA:B0:56:58:0F:A1
            X509v3 Authority Key Identifier:
                keyid:32:60:3F:CC:DE:E6:B6:80:76:F6:69:AD:B5:FE:07:AE:5A:E1:30:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916FC1D/AE838B367C4D11F095C93230C4F9AE02/MmA_zN7mtoB29mmttf4HrlrhMH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmA_zN7mtoB29mmttf4HrlrhMH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FC1D/AE838B367C4D11F095C93230C4F9AE02/MmA_zN7mtoB29mmttf4HrlrhMH8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f2:aa:6e:23:a4:ba:4e:39:35:49:8d:56:9e:3e:5f:87:99:
         7b:f9:b5:3a:d4:3a:55:d0:ad:28:87:24:54:a9:70:1b:97:b9:
         fa:f8:a9:ea:66:a3:68:60:96:30:d9:50:93:26:ae:3d:af:31:
         47:41:56:6e:6e:f8:b7:f4:21:cb:b0:7a:ce:c1:61:90:77:af:
         ec:e5:29:18:d1:08:86:fc:bf:6e:02:be:a3:47:50:45:bb:34:
         c9:d9:2e:b8:b0:37:39:11:84:08:f8:38:bc:aa:63:2b:5d:3e:
         5d:76:94:35:36:02:60:bf:2b:d8:b5:31:f1:1c:8c:97:1e:06:
         30:91:23:ff:6e:d2:b7:4c:e5:67:4b:c9:b7:0c:1a:bb:5a:50:
         52:b3:34:89:8e:74:68:dc:9e:dc:25:7f:e4:fd:4d:7f:9b:49:
         3f:c7:6c:4a:eb:a0:3c:f2:41:87:69:16:68:19:30:1c:1d:12:
         b3:b4:0e:32:ae:fe:e0:33:76:1a:df:7d:3d:80:7b:56:63:33:
         58:67:6e:38:02:d1:e3:c0:d1:a3:16:2d:33:06:ee:e8:d0:96:
         b0:4d:06:a8:81:1a:30:8e:b2:b8:73:01:05:a9:02:3e:56:7d:
         fc:70:c2:72:4a:3c:51:09:b2:33:90:7e:79:0c:84:2c:7b:c0:
         0c:1c:93:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:44:36 2025 by rpki-client