Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft
File:                     pyf1mySxFKJR_fd_U7-g7GkeJaU.mft (raw, json)
Hash identifier:          XgcqP4JPLkqfHFzxA3aubyvlVq4oOSzxe10WwQYSynU=
Subject key identifier:   66:97:00:F6:2B:95:B4:7B:ED:EF:96:B6:92:83:40:52:76:DD:2C:04
Authority key identifier: A7:27:F5:9B:24:B1:14:A2:51:FD:F7:7F:53:BF:A0:EC:69:1E:25:A5
Certificate issuer:       /CN=A918232F/serialNumber=A727F59B24B114A251FDF77F53BFA0EC691E25A5
Certificate serial:       14BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft
Manifest number:          14AF
Signing time:             Fri 22 Aug 2025 16:59:34 +0000
Manifest this update:     Fri 22 Aug 2025 16:59:33 +0000
Manifest next update:     Fri 29 Aug 2025 16:59:33 +0000
Files and hashes:         1: pyf1mySxFKJR_fd_U7-g7GkeJaU.crl (hash: RSD47F57RK2eoVPUnNWyQtXY1NqZJsCVOvha7yYxlhI=)
                          2: 530FB34C664D11E89967A549C4F9AE02.roa (hash: FG61AEeBt/KwKh7Rq7GtmQk5iB1zq03M8kwTThCsmIw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.crl
                          rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 16:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5307 (0x14bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918232F, serialNumber=A727F59B24B114A251FDF77F53BFA0EC691E25A5
        Validity
            Not Before: Aug 22 16:59:33 2025 GMT
            Not After : Aug 29 16:59:33 2025 GMT
        Subject: CN=68a8a1f6-8de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cc:f3:7e:6c:07:50:1c:f3:b6:86:bb:73:69:
                    cb:2e:d4:e8:be:2c:51:3a:27:15:a4:c6:f5:4e:b9:
                    de:60:4c:12:0d:7c:19:1c:68:27:44:14:a5:28:c0:
                    08:ab:25:8d:c1:6d:20:d9:0e:3b:cb:85:71:10:56:
                    be:f4:50:4e:e7:b3:f0:85:e0:4b:92:94:5c:10:56:
                    dd:88:ff:c9:37:20:3c:8f:a4:a5:97:4f:79:c0:1e:
                    e3:d2:59:b0:5c:46:66:65:8e:da:3f:ff:f6:d3:86:
                    d9:16:23:78:b6:c3:b8:7d:f4:0d:cb:b2:4d:60:36:
                    5b:a5:13:fd:8a:eb:27:e6:ae:d5:b8:4c:36:04:38:
                    5c:50:7a:fe:f3:26:10:a1:ba:b8:41:2c:a6:2b:eb:
                    d3:f9:8c:cd:5f:b1:e0:bc:03:85:b6:cc:32:d0:61:
                    3f:d8:2e:45:e1:7d:f3:d9:c7:3f:6c:65:44:28:f0:
                    da:b5:3c:6c:40:81:2c:f4:fa:42:30:67:6c:6f:10:
                    85:ad:44:73:75:07:e1:f0:6f:43:e4:fc:bd:3f:11:
                    38:66:dd:cc:a0:72:26:cf:39:c0:39:a9:1d:4a:f2:
                    41:a1:1b:e2:ec:a0:4d:76:b4:1b:e7:ad:72:2f:8b:
                    19:db:c0:c8:8d:7e:33:d0:17:74:ca:f8:4f:c2:6e:
                    fc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:97:00:F6:2B:95:B4:7B:ED:EF:96:B6:92:83:40:52:76:DD:2C:04
            X509v3 Authority Key Identifier:
                keyid:A7:27:F5:9B:24:B1:14:A2:51:FD:F7:7F:53:BF:A0:EC:69:1E:25:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:15:b6:ea:b4:69:46:2c:26:f7:78:ee:f5:08:3d:eb:6d:54:
         f3:b5:06:46:dd:49:6e:54:73:ac:a3:a4:5a:e7:21:85:f0:8c:
         be:c4:10:49:36:f0:e8:63:da:ce:62:42:84:96:8c:fa:38:ac:
         dd:9e:7e:e8:32:ac:a3:da:16:06:c3:3e:73:64:04:93:ca:16:
         7f:96:8f:fb:b2:fd:7a:dc:9d:19:35:fc:af:a4:4d:0b:df:34:
         25:c7:17:8c:b0:49:18:d1:e5:9e:2b:7c:80:b2:04:05:bf:6f:
         87:f3:ac:0d:cc:5e:a1:e7:2b:08:45:86:fb:4d:51:ae:86:4e:
         54:42:de:c7:95:c0:b0:d0:39:fd:bc:22:5d:5b:7f:50:fb:39:
         cc:c7:66:cd:2e:52:5e:66:37:12:60:88:a9:41:bd:ae:d7:e0:
         20:2b:26:97:d7:80:67:01:58:bd:7c:48:87:6c:4e:9d:df:77:
         2a:77:ff:a6:4d:28:d5:0d:96:7e:53:9b:97:e3:fc:31:41:6c:
         a6:09:a3:5c:c7:87:0f:44:f5:83:66:68:bb:df:59:18:1d:d2:
         c4:bb:a0:c8:8f:33:44:ca:64:f1:01:ac:9a:35:13:1a:fc:24:
         46:d9:a7:b8:3c:8d:5b:45:dd:84:41:00:13:ed:8d:9f:d7:54:
         cc:9a:83:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:03:20 2025 by rpki-client