Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
File:                     RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft (raw, json)
Hash identifier:          Qj3TP6q/qRzC4RF6pAY/ViaGb1Gcjt3QjLR9RK/RP6U=
Subject key identifier:   AE:C4:F1:34:CE:E7:1C:E7:44:99:7A:16:C8:4E:33:B9:C8:B0:66:2C
Authority key identifier: 44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3
Certificate issuer:       /CN=A919C5FE/serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3
Certificate serial:       12BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
Manifest number:          12B7
Signing time:             Fri 22 Aug 2025 17:12:16 +0000
Manifest this update:     Fri 22 Aug 2025 17:12:15 +0000
Manifest next update:     Fri 29 Aug 2025 17:12:15 +0000
Files and hashes:         1: RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl (hash: b2+sdEvhIjQy9Sa2iNlTJ9ZnfREXd75NOIEYOiZNSbI=)
                          2: C3CD4B12C85411E8A5D4274BC4F9AE02.roa (hash: 4z3M5HiueuxSghgC74Ahy0/LyTUAqKseWIGsOSeClyk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl
                          rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4798 (0x12be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C5FE, serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3
        Validity
            Not Before: Aug 22 17:12:15 2025 GMT
            Not After : Aug 29 17:12:15 2025 GMT
        Subject: CN=68a8a4f0-036e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:82:56:63:dc:2e:90:17:75:e7:13:9d:d7:95:
                    c5:1a:d7:f8:82:78:dc:5f:83:3a:e4:a5:2b:46:08:
                    3f:4e:a9:8f:c9:28:be:c8:40:14:ab:ed:38:44:df:
                    7a:d6:33:7c:90:fb:a6:98:29:11:cc:90:a5:e0:e9:
                    40:1a:72:0a:e3:ff:3a:ee:56:2a:64:b5:4b:00:04:
                    a9:2a:74:ad:7f:2e:82:da:48:5e:01:a2:d7:15:5d:
                    b6:76:29:2a:a3:02:52:3b:9e:37:08:5c:8a:72:e9:
                    54:a0:62:3d:76:fa:e8:2c:c3:b0:9c:36:72:ea:a1:
                    f8:c5:aa:36:8f:bc:83:75:e9:de:c9:74:cd:5e:95:
                    85:86:8b:23:22:b1:24:c9:a5:07:09:fb:b0:72:4a:
                    4b:38:fe:1c:3e:51:ac:8a:82:6a:8e:80:35:c2:35:
                    88:cf:9b:74:1f:3a:8c:4b:ed:35:fd:31:d1:b8:d4:
                    00:a7:b6:e8:8c:96:ba:3c:96:3c:ed:a3:29:47:e4:
                    f7:95:ec:67:2d:24:9a:75:25:c0:75:c3:6e:c4:b9:
                    54:73:d5:5b:1b:5c:d8:9c:72:61:ad:8e:5e:3a:0b:
                    d7:59:91:11:20:3f:6b:c1:ee:f8:c4:29:ef:9c:e7:
                    e6:cb:96:1f:c4:81:fd:81:9b:36:ec:f7:4f:f6:20:
                    01:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C4:F1:34:CE:E7:1C:E7:44:99:7A:16:C8:4E:33:B9:C8:B0:66:2C
            X509v3 Authority Key Identifier:
                keyid:44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:6a:89:46:33:ae:f6:35:d0:d2:49:06:be:c3:da:10:20:42:
         5f:28:f7:bb:a1:1d:53:bf:36:b0:fb:e9:90:97:52:69:3b:c9:
         28:31:47:2f:c9:8a:00:2e:9b:fb:fc:bb:31:69:83:b7:f1:45:
         64:59:d7:22:4e:a3:bd:18:3b:39:8d:60:32:d4:e8:20:36:ee:
         22:14:cd:18:f6:58:f9:18:e6:ce:e0:33:91:47:05:81:a2:d7:
         d3:e9:95:63:9b:6e:76:cc:ce:eb:8a:f1:be:2f:02:32:46:8c:
         32:b4:e4:d6:d0:6b:9e:99:32:ad:b1:1d:88:f1:87:69:18:aa:
         1c:19:81:8b:59:7e:2c:91:b0:d6:6a:23:82:af:c3:93:f9:41:
         d5:87:22:82:2e:58:7d:06:d4:6b:38:fd:4e:18:27:03:92:d1:
         9a:72:26:5e:bd:21:85:35:b1:a7:9a:11:fe:c5:44:f8:eb:3d:
         1d:24:3f:35:4a:79:11:76:e3:0c:3f:0e:05:82:6f:54:fd:d9:
         f8:da:d2:d9:41:eb:d5:59:3e:c2:b4:33:6b:c1:99:da:19:b4:
         6a:45:01:64:49:db:9b:ff:54:00:ee:46:86:c6:99:c9:21:2e:
         99:ff:59:7f:95:3e:f4:50:8b:d5:d3:ac:e6:63:1f:79:e2:7b:
         e7:77:d1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:36:21 2025 by rpki-client