Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft
File:                     4659B01pZ-L0n_njuNebv6KAmpI.mft (raw, json)
Hash identifier:          61BQawVxr7WStZk0YsrtmiDbMQUQY3Jpq6BsN0gYc+o=
Subject key identifier:   B7:37:CD:B3:B6:B2:3E:D5:2E:A0:8E:E8:68:42:B1:42:83:6B:28:0F
Authority key identifier: E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92
Certificate issuer:       /CN=A918A695/serialNumber=E3AE7D074D6967E2F49FF9E3B8D79BBFA2809A92
Certificate serial:       BA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft
Manifest number:          B8
Signing time:             Sat 23 Aug 2025 06:12:08 +0000
Manifest this update:     Sat 23 Aug 2025 06:12:08 +0000
Manifest next update:     Sat 30 Aug 2025 06:12:07 +0000
Files and hashes:         1: 4659B01pZ-L0n_njuNebv6KAmpI.crl (hash: ASxbXFEyTOBSSuKN61Hyi7e7+arSR2o5jUny7GtVxNc=)
                          2: 0DE9C0F2691E11EF86B94667C4F9AE02.roa (hash: 13S0uPk78cTkONRaoiB2NygyvHW1IriAd1JcSvRHXys=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl
                          rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A695, serialNumber=E3AE7D074D6967E2F49FF9E3B8D79BBFA2809A92
        Validity
            Not Before: Aug 23 06:12:08 2025 GMT
            Not After : Aug 30 06:12:07 2025 GMT
        Subject: CN=68a95bb8-8f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f6:56:d5:e5:d1:05:11:e2:a5:83:82:06:80:
                    35:be:07:11:0e:31:f2:01:7d:c2:45:2e:eb:3d:87:
                    cd:f3:b7:17:9d:2d:4b:b4:72:2d:e6:d6:f1:bd:0d:
                    85:cb:ab:8b:2f:b0:44:9c:db:3e:81:fd:c5:8a:10:
                    4d:1a:e7:c6:13:1d:23:b3:f8:3e:97:b1:3e:ed:e0:
                    c4:01:c7:4b:e6:05:24:6f:bc:8b:ef:62:9c:66:55:
                    16:17:d6:dd:93:37:e4:74:69:f9:bd:4f:f9:25:e6:
                    a3:91:68:78:18:fa:69:ea:c4:03:19:8d:6c:d2:09:
                    8d:9d:52:d1:93:c3:03:aa:e3:b2:79:7b:3d:d6:c0:
                    a5:6b:5e:45:d1:e7:c8:c2:81:35:82:54:a3:75:25:
                    94:e5:5a:6c:7a:80:f5:73:b8:9b:bf:b2:b4:6f:b5:
                    ef:76:4b:11:31:9c:f6:4f:20:e8:7c:aa:2a:39:3c:
                    b1:86:9c:28:e7:9b:5d:d1:56:3f:3f:27:47:54:a8:
                    25:ea:21:89:bc:34:cd:fa:0e:cd:6a:3d:dd:28:4e:
                    e1:42:9f:eb:41:f8:9a:2c:20:03:65:42:9e:91:dd:
                    58:25:07:a7:e2:02:12:8d:f1:de:9f:3b:8a:e1:4f:
                    5e:86:31:cf:b6:1d:4e:64:c1:2e:9d:b5:bb:69:d4:
                    92:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:37:CD:B3:B6:B2:3E:D5:2E:A0:8E:E8:68:42:B1:42:83:6B:28:0F
            X509v3 Authority Key Identifier:
                keyid:E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:d3:0f:ce:4d:f8:5f:4e:8c:03:6a:c8:b2:ee:ca:02:27:6c:
         1d:aa:e4:6c:13:c6:85:2f:c5:76:87:ab:7c:59:bc:cd:40:97:
         55:61:68:79:e4:ee:29:b6:2f:7e:57:8f:af:9c:9b:f1:f2:25:
         76:97:4a:37:c5:9d:4b:9d:ed:5c:c7:ee:7e:c3:65:3e:82:fd:
         9b:43:60:f8:6b:8a:ce:b3:ce:39:03:f8:35:57:af:04:5d:6c:
         d5:6a:17:1e:fd:17:b9:7a:69:86:a2:a1:b8:88:03:65:61:8c:
         1d:a5:d3:19:89:4e:48:2a:35:26:04:d6:7e:c9:9a:97:0c:e7:
         b4:c7:b4:1d:6e:82:51:af:30:a3:6d:6b:55:b7:7d:27:57:ea:
         11:d6:62:13:fc:b7:5b:a0:62:3d:00:16:ce:70:47:0a:8c:1e:
         44:3f:a4:1b:bc:8f:3d:9c:c8:14:e6:8c:0d:dd:d5:dd:49:ae:
         f1:26:7d:cc:2a:ee:58:71:43:ad:bf:ad:a6:c7:d6:62:80:29:
         9d:33:91:13:9c:8f:e7:32:c1:4a:3c:70:7f:51:17:80:0c:bb:
         f4:33:c3:0c:96:d9:d5:6f:0c:01:45:80:13:ae:27:ef:5b:d2:
         57:6a:ba:dc:bb:6c:59:94:8b:7e:f2:64:50:6b:65:5f:eb:13:
         ca:8b:61:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:14:36 2025 by rpki-client