Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft
File:                     64P0iA8jV15XUXhcbgqyvgskm8M.mft (raw, json)
Hash identifier:          pjRssgS+UA8I3sRuahGfCK5boNodOEZ/8LcFWQZUos0=
Subject key identifier:   A9:F8:76:E8:9F:12:9E:66:BD:7C:53:A2:59:02:09:70:D3:51:9B:45
Authority key identifier: EB:83:F4:88:0F:23:57:5E:57:51:78:5C:6E:0A:B2:BE:0B:24:9B:C3
Certificate issuer:       /CN=A917C0F3/serialNumber=EB83F4880F23575E5751785C6E0AB2BE0B249BC3
Certificate serial:       74
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft
Manifest number:          73
Signing time:             Sat 23 Aug 2025 07:04:22 +0000
Manifest this update:     Sat 23 Aug 2025 07:04:22 +0000
Manifest next update:     Sat 30 Aug 2025 07:04:22 +0000
Files and hashes:         1: 64P0iA8jV15XUXhcbgqyvgskm8M.crl (hash: iU+tf0EltP7+6dtW0WdZ2jqHBQ1mArdqYXkRjwnSDpg=)
                          2: 028452F0D0BA11EFA8B5A526C4F9AE02.roa (hash: IREGMcYzyBbo6wcvGexVHMAjLf7W6LD1j2SfUrLribg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.crl
                          rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 07:04:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C0F3, serialNumber=EB83F4880F23575E5751785C6E0AB2BE0B249BC3
        Validity
            Not Before: Aug 23 07:04:22 2025 GMT
            Not After : Aug 30 07:04:22 2025 GMT
        Subject: CN=68a967f6-62ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:24:91:a8:93:77:42:b9:32:17:b6:48:c0:11:
                    31:3a:34:fe:b8:15:49:73:e2:8f:24:bf:b1:f0:c8:
                    57:b3:ee:25:58:ef:e5:c4:b1:75:23:af:f1:82:7d:
                    03:75:cd:cd:6d:ab:fe:28:58:48:4f:c1:99:7c:cf:
                    49:ca:45:56:3d:7d:ce:89:91:b3:a9:5e:d7:5c:5a:
                    67:dd:55:82:26:9b:f2:59:58:14:4d:56:15:e2:a8:
                    85:09:6e:79:cc:e2:4b:36:7d:b6:e0:e9:46:40:18:
                    b4:37:be:1a:41:fa:83:73:b6:ac:c2:eb:fd:8a:ee:
                    4d:db:7b:43:03:17:4b:3c:be:d0:14:f5:7f:a8:df:
                    42:f1:f9:81:17:31:d2:2d:83:be:e8:ff:13:33:56:
                    dd:d6:be:b4:51:11:e7:a1:4f:29:0c:63:44:7c:a6:
                    b3:f7:5d:14:19:43:48:12:07:9b:4d:bf:d3:76:12:
                    4d:92:38:4b:1b:de:31:3e:da:42:4d:02:a0:36:e1:
                    52:f9:a3:d9:02:25:7d:1f:42:1b:e5:4d:31:82:3d:
                    04:9e:5d:93:3e:46:90:b4:7b:11:0b:5d:5f:03:88:
                    16:4e:84:32:ba:1f:43:c3:59:17:f8:e4:42:d9:04:
                    bf:86:a3:16:89:5a:94:15:b6:07:cd:b1:50:a7:ca:
                    81:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F8:76:E8:9F:12:9E:66:BD:7C:53:A2:59:02:09:70:D3:51:9B:45
            X509v3 Authority Key Identifier:
                keyid:EB:83:F4:88:0F:23:57:5E:57:51:78:5C:6E:0A:B2:BE:0B:24:9B:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:bb:b8:e0:d5:2a:87:92:9f:f1:89:91:ad:87:6e:60:c7:fe:
         24:2d:ca:14:d6:e2:f9:4e:d0:2a:b1:86:9b:c4:6c:c5:42:52:
         df:d3:a6:3b:96:0e:e9:71:fb:2b:82:bb:d5:79:8b:95:ce:32:
         aa:4f:ca:af:24:fa:9a:3b:8f:b5:c8:22:aa:f6:60:67:63:45:
         85:64:e1:87:82:12:97:2e:26:b6:f6:1b:49:e6:89:e4:da:e0:
         9a:4f:30:96:7b:f1:ea:df:68:1a:7c:28:af:23:c6:36:e5:e9:
         65:0c:dd:35:a8:64:93:4a:90:41:b9:4c:d2:fc:a1:03:36:59:
         bc:cf:c2:7d:be:e0:5f:19:e2:01:34:47:70:ff:89:92:91:ab:
         59:af:94:2f:cd:76:e1:9b:b6:92:f2:8b:7c:ec:85:b8:bb:6d:
         97:8b:73:f3:cb:ab:3b:c5:80:3b:fc:28:eb:84:86:89:0b:17:
         17:a6:49:68:3a:3b:f8:39:4c:43:3f:76:99:a5:a7:9b:f9:e1:
         3d:dd:e1:22:43:84:41:60:7a:47:b8:90:a4:6e:40:b5:18:37:
         65:15:d5:9a:6e:df:d1:8e:8e:4b:13:43:23:34:d5:42:45:21:
         eb:ad:27:24:55:d6:d4:c8:e8:e0:65:c4:15:4e:9b:1d:e3:3f:
         92:51:23:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:50:02 2025 by rpki-client