Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft
File:                     L__8o-ZL11oIXmx2cyYl8iTHRDI.mft (raw, json)
Hash identifier:          m2YreNGOX/DPAsetVxqtXQ9uUJiNpggUAyawQx54/NY=
Subject key identifier:   B7:A4:80:55:94:E2:32:02:21:6B:FD:D2:45:D3:AD:09:82:5F:0B:07
Authority key identifier: 2F:FF:FC:A3:E6:4B:D7:5A:08:5E:6C:76:73:26:25:F2:24:C7:44:32
Certificate issuer:       /CN=A9193604/serialNumber=2FFFFCA3E64BD75A085E6C76732625F224C74432
Certificate serial:       013F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft
Manifest number:          013C
Signing time:             Sat 23 Aug 2025 04:36:15 +0000
Manifest this update:     Sat 23 Aug 2025 04:36:15 +0000
Manifest next update:     Sat 30 Aug 2025 04:36:15 +0000
Files and hashes:         1: L__8o-ZL11oIXmx2cyYl8iTHRDI.crl (hash: Gr1ueRyKQ2rM8SHxFuXvsCR4R1Yv9UEFl8OcIUD7nsY=)
                          2: 4578BBA89F4E11EEB293B87EC4F9AE02.roa (hash: 3yiW508L3oftd11FyXYrUNBNgcv/84LhY7x8tmbtRS4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.crl
                          rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 04:36:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193604, serialNumber=2FFFFCA3E64BD75A085E6C76732625F224C74432
        Validity
            Not Before: Aug 23 04:36:15 2025 GMT
            Not After : Aug 30 04:36:15 2025 GMT
        Subject: CN=68a9453f-8500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:15:c1:03:38:dd:70:d1:ec:38:f4:d9:d9:cb:
                    6f:de:cd:a8:eb:fe:2f:42:a5:bc:a1:9e:23:35:b6:
                    25:3d:11:f7:3e:a4:9d:a5:08:96:4c:3a:a0:08:9e:
                    27:47:ef:75:09:da:4e:50:f3:ff:36:7b:9d:4e:a2:
                    77:f6:86:d2:c4:31:d6:39:04:8a:17:8c:da:df:c6:
                    e3:d9:54:52:33:40:f6:2b:37:56:e3:59:8a:2e:04:
                    b8:06:4f:60:23:4f:24:ae:2d:6e:bf:d5:6f:ad:20:
                    03:12:a3:e5:bb:49:d6:7a:b2:b5:ab:17:f7:55:6d:
                    61:15:be:a8:a1:cd:9a:41:58:12:13:54:88:33:ff:
                    d8:d5:34:23:d8:c6:f1:95:6d:ef:f1:d5:bd:57:30:
                    2f:57:68:7e:b4:91:28:29:15:2b:17:84:8c:06:b5:
                    4e:7c:21:6b:6e:a7:3b:16:62:1f:1c:f8:fa:8c:d2:
                    e4:f7:11:91:ac:1e:77:23:a9:10:56:de:91:10:f9:
                    ed:65:39:f2:ff:87:8e:92:f1:ef:0e:91:8e:17:0e:
                    f3:d0:8e:b3:b8:22:01:d6:40:8a:8e:9b:6f:d2:0b:
                    ba:e8:06:17:49:68:22:8b:47:b8:79:ea:c3:ba:76:
                    2e:74:69:f8:06:49:52:f6:e6:dd:87:e2:57:a9:18:
                    00:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A4:80:55:94:E2:32:02:21:6B:FD:D2:45:D3:AD:09:82:5F:0B:07
            X509v3 Authority Key Identifier:
                keyid:2F:FF:FC:A3:E6:4B:D7:5A:08:5E:6C:76:73:26:25:F2:24:C7:44:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:fe:fe:c8:79:6d:8b:d5:0a:90:ec:64:ae:43:53:82:85:7f:
         e2:d0:3d:42:55:d5:dc:88:4c:ed:65:bd:21:ae:b1:96:bf:9d:
         bb:8f:c7:fa:62:3b:da:d1:84:cf:47:b3:7a:79:d1:bb:a4:f0:
         5f:8c:17:68:ac:4c:2e:89:27:59:11:7a:f1:73:7c:db:5c:5f:
         f5:80:ee:61:49:8f:a9:cc:cc:86:f7:bb:f5:dd:8c:34:cb:fb:
         ca:7e:e4:39:62:0a:0d:65:7f:b2:c0:61:91:f8:6d:9b:bc:0f:
         db:94:8b:08:a9:da:16:35:6a:e5:95:b0:2a:de:a8:a1:a9:2f:
         b3:7f:28:2c:7d:45:7a:d9:44:7c:96:b1:8a:5d:39:b4:8c:42:
         1c:14:b7:c5:44:86:9f:04:7d:db:1a:0e:7e:40:50:82:c8:36:
         5a:f0:4d:4c:d1:eb:a4:ef:fc:b7:fa:c6:fc:6c:26:91:0d:48:
         2b:95:57:be:e3:d7:a8:31:69:e1:6b:f5:b9:db:a8:29:74:9a:
         ff:57:fb:2c:71:f5:3b:11:06:7c:17:65:ac:73:7e:c0:d5:df:
         d9:47:0f:0a:82:c1:d5:8a:5e:b0:11:8a:2d:a3:af:36:8b:12:
         4b:35:09:2b:7b:44:e7:8a:bc:de:ca:09:8e:d0:95:7e:43:6d:
         da:50:7c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:59:53 2025 by rpki-client