Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
File:                     mZujdBECimL7UV3PAozaLcmrydE.mft (raw, json)
Hash identifier:          urFEqNadeyvj2np6lcA3NnYofCcEp6HXSz3Ammv5wQU=
Subject key identifier:   8F:A5:F0:A1:B0:44:46:61:F5:57:15:A1:7C:7B:EF:98:00:73:4A:A8
Authority key identifier: 99:9B:A3:74:11:02:8A:62:FB:51:5D:CF:02:8C:DA:2D:C9:AB:C9:D1
Certificate issuer:       /CN=A9184359/serialNumber=999BA37411028A62FB515DCF028CDA2DC9ABC9D1
Certificate serial:       01B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
Manifest number:          01B4
Signing time:             Sat 23 Aug 2025 03:12:50 +0000
Manifest this update:     Sat 23 Aug 2025 03:12:49 +0000
Manifest next update:     Sat 30 Aug 2025 03:12:49 +0000
Files and hashes:         1: mZujdBECimL7UV3PAozaLcmrydE.crl (hash: W7MQm2RE14vRWmdk54QR8dRO5rs/GKtUKkGBlScNNOk=)
                          2: F27BE0E2E4CC11EDBAFF045BC4F9AE02.roa (hash: FcVq7MapsG0tiRr/INQ1mEf1XPC8HnzEbnMHkTHPq4w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.crl
                          rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:12:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184359, serialNumber=999BA37411028A62FB515DCF028CDA2DC9ABC9D1
        Validity
            Not Before: Aug 23 03:12:49 2025 GMT
            Not After : Aug 30 03:12:49 2025 GMT
        Subject: CN=68a931b2-4d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fe:8f:f2:b7:32:a4:2e:08:5b:3e:28:12:69:
                    30:1e:24:5c:d8:0c:24:94:c4:d6:4c:bf:4b:1c:44:
                    c6:1f:b8:e6:6b:51:93:6f:a5:11:2c:e8:f9:7e:e7:
                    7d:2f:96:e9:4b:f8:4e:21:b7:18:3d:10:77:52:4a:
                    e4:a7:5f:bc:87:ef:23:3e:62:e0:31:6f:65:ed:fb:
                    64:e9:c6:ec:9c:54:7b:76:76:ee:09:c4:89:66:c5:
                    fa:c8:85:b7:20:09:3e:b2:c7:22:a4:b5:37:39:d5:
                    40:df:17:0a:43:a2:6c:d2:88:a5:61:4b:7a:74:1d:
                    85:72:86:5c:99:44:ed:fc:27:ef:90:c0:32:b5:f2:
                    6c:4e:46:d0:04:49:d5:5e:7b:fb:ec:40:7e:6b:0b:
                    3d:15:a4:58:ab:49:65:7d:19:79:62:16:21:df:35:
                    f3:21:f0:d5:6a:5d:a8:7d:d6:cb:61:bf:38:d5:38:
                    70:ea:db:70:22:5e:17:10:47:56:26:55:65:ef:16:
                    22:e5:9a:45:4c:2c:da:b9:71:f1:dc:8b:db:40:48:
                    cb:66:e2:3d:ef:22:74:2e:ca:39:7f:1e:b7:59:37:
                    c7:bd:b4:43:08:3f:96:ee:7a:90:f1:0c:20:8b:86:
                    ef:d2:8b:32:b7:3d:cc:59:d0:ec:97:5d:e1:a3:68:
                    f6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A5:F0:A1:B0:44:46:61:F5:57:15:A1:7C:7B:EF:98:00:73:4A:A8
            X509v3 Authority Key Identifier:
                keyid:99:9B:A3:74:11:02:8A:62:FB:51:5D:CF:02:8C:DA:2D:C9:AB:C9:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:75:81:25:31:4c:48:4a:d8:4e:fb:d9:06:88:78:6f:96:19:
         9a:ee:f5:dc:11:c0:b9:db:7b:3d:f5:6a:eb:09:0e:e7:46:85:
         5a:38:cf:42:37:c5:02:47:56:b9:15:a7:d3:bd:ef:df:5d:f0:
         cd:45:0f:3b:27:87:29:56:fa:a9:ea:0d:ec:77:9f:62:a4:d3:
         3e:9f:40:fc:a1:8d:4a:c2:b0:0a:2b:99:d4:7e:5a:29:4c:c1:
         19:4c:86:ce:53:1b:6b:62:ed:43:2f:f2:34:7f:9f:80:b1:bb:
         7e:fb:a0:65:9c:0a:12:18:1b:bc:cd:f7:09:48:7e:91:0c:38:
         96:86:f6:24:14:71:f6:3d:10:8c:0c:1b:f1:ed:13:c3:be:7a:
         08:37:84:e2:14:4a:d4:95:95:22:f8:66:42:69:09:ef:1c:44:
         54:2d:2e:9a:82:ee:34:74:84:2c:ce:ca:f0:40:5b:24:f9:14:
         20:a9:b7:3b:e2:2e:bc:86:54:7c:b7:ce:b3:40:b8:c7:72:a9:
         ac:53:19:a9:1d:be:33:d3:f0:83:4c:ea:d7:6d:2c:76:85:65:
         53:55:1e:c3:e7:53:f6:c0:80:de:4f:51:57:94:0f:b4:d2:1a:
         55:f4:6b:8f:53:d1:59:26:4e:dc:53:4d:df:2e:9e:38:10:09:
         92:ae:f6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:14:47 2025 by rpki-client