Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft
File:                     i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft (raw, json)
Hash identifier:          e3SJvy8jk2IoRlYPEBhX3Dxt2mrGtlJYWBHNABn5nxo=
Subject key identifier:   AD:4B:56:62:DD:3E:15:AD:12:2A:89:A6:86:13:AE:B6:1C:35:B6:04
Authority key identifier: 8B:E9:D9:2E:3B:31:D4:0C:A3:3B:3B:B6:29:47:43:2E:84:56:D2:90
Certificate issuer:       /CN=A918FD04/serialNumber=8BE9D92E3B31D40CA33B3BB62947432E8456D290
Certificate serial:       0C21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft
Manifest number:          14B8
Signing time:             Wed 02 Jul 2025 18:52:14 +0000
Manifest this update:     Wed 02 Jul 2025 18:52:13 +0000
Manifest next update:     Wed 09 Jul 2025 18:52:13 +0000
Files and hashes:         1: i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl (hash: a5bqGuIcDE0RjmOadLEVRLhv4MsskCtctg09Cuit6zE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl
                          rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 18:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3105 (0xc21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FD04, serialNumber=8BE9D92E3B31D40CA33B3BB62947432E8456D290
        Validity
            Not Before: Jul  2 18:52:13 2025 GMT
            Not After : Jul  9 18:52:13 2025 GMT
        Subject: CN=68657fdd-a8f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ce:7f:23:5d:5a:38:76:af:a0:46:a2:5e:58:
                    42:f8:17:bf:23:b3:ad:80:c2:fe:b1:12:fb:37:cd:
                    ae:3d:73:48:eb:5b:30:3f:64:cc:40:2b:57:6d:c8:
                    b9:dc:1a:54:48:08:e5:4b:d1:82:8d:fb:2d:c4:f8:
                    00:bc:ad:88:2a:77:26:4d:8d:cc:03:35:58:f9:ea:
                    54:3b:e8:3b:12:a9:fe:35:39:1f:28:92:7a:74:5b:
                    23:2c:7a:1c:06:6e:b0:51:88:d5:a2:f6:92:bc:6f:
                    72:60:8a:90:f0:d9:2f:c4:7d:46:a6:cd:61:6f:83:
                    b8:4d:81:86:45:5d:15:52:93:ac:4c:0f:91:65:9e:
                    83:9b:9f:4e:3c:ba:e1:5a:de:c8:69:23:43:6c:16:
                    bf:eb:7c:56:58:a8:c4:5e:ee:dc:45:27:dc:3b:da:
                    27:0d:05:25:bd:4f:c5:b5:8c:97:c4:05:e2:ca:d0:
                    b7:17:a2:3a:4b:e5:cc:4a:92:b7:3b:22:33:45:07:
                    c4:9e:06:d6:36:a3:3e:88:97:3e:85:b0:e2:52:a6:
                    1b:6a:70:a2:22:7b:d0:64:d2:04:b1:3a:23:09:0d:
                    7b:29:a8:3d:ff:c5:02:74:7e:ef:54:14:35:87:82:
                    1e:d0:7c:c9:c5:96:8e:e6:00:04:e9:1d:8e:ac:59:
                    17:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4B:56:62:DD:3E:15:AD:12:2A:89:A6:86:13:AE:B6:1C:35:B6:04
            X509v3 Authority Key Identifier:
                keyid:8B:E9:D9:2E:3B:31:D4:0C:A3:3B:3B:B6:29:47:43:2E:84:56:D2:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-nZLjsx1AyjOzu2KUdDLoRW0pA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/i-nZLjsx1AyjOzu2KUdDLoRW0pA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:20:30:5b:90:8f:a3:7a:2b:05:13:61:0a:ab:57:95:6d:8f:
         52:d0:30:3f:6b:91:2a:95:00:38:68:18:47:04:ef:44:ef:6b:
         41:90:a7:13:18:e7:ea:57:3a:43:44:8c:f6:14:f4:0b:f4:84:
         3f:f2:39:50:18:88:b5:ee:23:0d:3e:86:5a:05:32:14:03:ca:
         40:c6:c6:b3:0f:c9:e8:df:e0:1d:f4:ba:a8:19:24:24:9d:0f:
         31:95:50:f6:26:c8:90:83:be:28:ae:be:3d:4c:18:c8:d7:a1:
         0a:b1:f0:de:4f:02:51:74:c6:85:aa:5b:6b:0b:a8:fe:58:5c:
         25:b6:c8:20:f4:20:e7:1a:20:7d:15:45:7d:0a:a9:3c:d3:fe:
         8e:6f:ea:62:01:8c:a7:9b:68:10:dc:a6:ee:c1:e7:cf:24:cd:
         d6:89:99:51:86:55:fe:70:dd:7b:e7:d1:0f:e7:d3:8e:5e:fe:
         03:ed:30:c0:f3:6e:36:df:18:93:39:e3:b0:bb:73:0f:5c:b0:
         07:47:1b:63:58:6b:f3:2a:21:c1:1d:5a:e5:a7:0e:90:14:2e:
         c5:67:08:90:13:e6:c0:b4:eb:fb:47:e1:a9:7e:5a:e7:4b:1b:
         e0:29:63:81:d1:0b:13:d8:3e:25:18:5e:b6:51:2d:14:c1:18:
         8e:63:a4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:47:35 2025 by rpki-client