Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft
File:                     mc3A6r4YBBJhGaHVGpjMhxkT86k.mft (raw, json)
Hash identifier:          6GKzqZJELj7xzc/pczbcLG+Je1vo7lQdPtvso+QQhcc=
Subject key identifier:   F3:32:C2:1F:E5:5B:E4:B8:61:DD:D8:0E:D4:04:CC:96:9C:16:76:69
Authority key identifier: 99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9
Certificate issuer:       /CN=A9183F7F/serialNumber=99CDC0EABE1804126119A1D51A98CC871913F3A9
Certificate serial:       07B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft
Manifest number:          07AC
Signing time:             Fri 22 Aug 2025 21:29:58 +0000
Manifest this update:     Fri 22 Aug 2025 21:29:57 +0000
Manifest next update:     Fri 29 Aug 2025 21:29:57 +0000
Files and hashes:         1: mc3A6r4YBBJhGaHVGpjMhxkT86k.crl (hash: JJCSkePIW4Z9L3uMx4r7ulAe2uSSrV+bgcmhiup3Vm8=)
                          2: AE26CE12180911EB962CB216C4F9AE02.roa (hash: 2MLqNLG1c5f9W1Oa6laD6D4M2hQ2BaRHZstB1sfOGMM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.crl
                          rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:29:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1972 (0x7b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183F7F, serialNumber=99CDC0EABE1804126119A1D51A98CC871913F3A9
        Validity
            Not Before: Aug 22 21:29:57 2025 GMT
            Not After : Aug 29 21:29:57 2025 GMT
        Subject: CN=68a8e156-0240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0b:d9:ca:7a:14:07:1b:33:11:e8:65:8b:0f:
                    bb:af:12:95:49:61:1a:f8:2c:e0:65:f2:2f:0a:90:
                    00:be:08:e6:08:9b:cb:67:68:a1:bb:db:b3:7b:72:
                    fd:da:0c:f6:df:16:e4:df:d8:92:c9:e7:83:07:83:
                    8a:1b:e7:35:db:28:07:96:86:89:3e:c5:95:ef:ce:
                    b2:ff:91:48:9a:fe:5c:08:a5:cc:29:c2:78:db:7b:
                    d8:ed:0d:c0:a4:53:92:62:aa:b5:bc:a3:aa:97:fa:
                    10:18:28:b6:65:54:2d:4e:fc:43:97:67:11:14:34:
                    c8:e4:22:1d:e5:84:8b:cd:4c:cc:3d:6a:f9:c2:3d:
                    4f:e3:b7:62:b4:2a:41:ca:4d:f2:22:26:d4:8c:83:
                    4f:af:fe:75:b7:7e:f5:46:7c:a7:16:c3:2b:ea:b4:
                    1e:04:c7:56:92:24:bd:14:99:d4:76:67:8b:87:26:
                    a6:66:77:0f:2a:5e:19:86:fc:d3:34:24:8d:66:41:
                    d6:a0:9a:93:74:f2:2b:2b:5a:ee:f0:f4:41:1f:33:
                    8e:64:1f:76:53:31:49:0f:33:cc:75:77:19:84:22:
                    ea:99:6f:ac:d5:a8:d8:7f:b7:eb:15:af:2a:67:77:
                    42:a1:f2:d5:f0:26:08:be:ec:41:a3:df:09:6b:85:
                    cc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:32:C2:1F:E5:5B:E4:B8:61:DD:D8:0E:D4:04:CC:96:9C:16:76:69
            X509v3 Authority Key Identifier:
                keyid:99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:5b:d3:e0:58:22:b0:be:7e:7f:70:60:cd:25:64:2f:ea:5a:
         a5:71:17:61:73:e9:4b:6d:0c:7c:69:c5:f3:ec:0a:bb:ad:d6:
         f8:39:29:43:1b:2f:9d:45:be:d1:5d:c9:ef:4c:a9:bf:63:e1:
         23:c6:24:0a:9f:57:32:f6:3e:00:b5:82:f0:82:c1:1a:c5:d0:
         cb:2c:3e:0a:ea:2c:d2:07:48:df:63:ba:e3:0f:06:7e:79:67:
         9f:e6:ce:d4:83:3c:b0:c2:7f:29:76:a5:e9:eb:61:f7:cd:da:
         ca:12:c6:e0:69:7f:43:99:10:dc:3b:0f:0a:35:4d:c8:af:6f:
         2d:36:59:eb:e0:1b:ae:d4:75:55:ad:12:a2:dd:3f:b4:52:7d:
         4a:b9:83:26:c7:ab:d3:d1:46:10:73:d1:a0:9f:04:63:7c:65:
         09:cc:25:95:aa:42:84:da:a6:8c:cc:f0:fd:26:91:cb:8a:04:
         31:17:3a:29:8d:c5:0b:3b:85:b7:a8:fc:4d:a3:38:35:0b:11:
         a9:d8:c9:a0:18:b7:06:21:2a:cb:c2:bb:95:78:9e:31:07:a8:
         c0:39:b4:64:01:dd:a9:ec:35:3e:3d:cb:8b:ec:0c:a8:5d:df:
         d7:19:5c:a6:33:6a:6e:72:c3:b2:9a:b9:7c:9c:5f:96:9f:1e:
         06:3c:ed:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:11 2025 by rpki-client