Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
File:                     P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft (raw, json)
Hash identifier:          gpmHJO3VFMMA5lkQfKIM4too0a9jyicsqC3ANjStKtU=
Subject key identifier:   BC:B0:B6:92:4B:84:2B:73:42:14:CE:E2:60:99:0F:3D:E9:63:2C:24
Authority key identifier: 3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37
Certificate issuer:       /CN=A919F0DA/serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37
Certificate serial:       34B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
Manifest number:          60B4
Signing time:             Fri 22 Aug 2025 14:15:25 +0000
Manifest this update:     Fri 22 Aug 2025 14:15:25 +0000
Manifest next update:     Fri 29 Aug 2025 14:15:25 +0000
Files and hashes:         1: P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl (hash: 8Sc1HDUr1hPmIUrUHG510/9pR1uytUg1RficcKn/st4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 14:15:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13495 (0x34b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA, serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37
        Validity
            Not Before: Aug 22 14:15:25 2025 GMT
            Not After : Aug 29 14:15:25 2025 GMT
        Subject: CN=68a87b7d-1353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f3:57:7a:7d:d9:aa:46:39:65:5a:73:4a:87:
                    61:1c:b2:44:f1:37:fe:3c:d8:dc:a1:4a:f1:9f:a6:
                    21:8e:29:88:86:ee:f9:00:11:d7:15:e8:0c:34:47:
                    4e:5a:ad:23:81:51:f1:b2:4d:6f:bc:c8:53:55:08:
                    df:46:dc:51:ad:19:d6:5e:8d:7f:b1:01:28:1c:4e:
                    2d:b5:cf:55:66:07:40:a2:75:41:c7:06:52:97:2b:
                    e5:2e:47:c2:a6:58:9d:cb:b3:e2:a8:86:54:b7:73:
                    f5:73:20:21:29:1d:93:61:4f:e5:f0:05:52:b3:7d:
                    55:d6:40:1f:0b:2c:c3:1d:77:d3:25:06:20:e5:d8:
                    28:7e:63:0f:7d:16:a7:27:76:ff:df:60:da:9e:49:
                    3f:16:72:b3:7e:55:7d:c9:52:08:5b:dd:d5:c1:a7:
                    0e:d9:eb:80:2a:09:74:28:7b:2e:6f:e3:0b:2e:e3:
                    d4:52:16:e1:a5:48:92:83:86:69:fc:6c:eb:3e:e5:
                    6f:b1:68:03:f8:ba:99:74:fd:f0:82:29:c6:b9:06:
                    5e:e0:eb:b4:e2:69:ef:45:0e:68:c4:f7:1d:84:c6:
                    bc:df:5b:7b:d8:45:2e:97:fa:15:b9:fb:5b:8b:f4:
                    24:3f:74:38:38:a9:69:87:76:e3:90:0b:ed:1b:9b:
                    35:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B0:B6:92:4B:84:2B:73:42:14:CE:E2:60:99:0F:3D:E9:63:2C:24
            X509v3 Authority Key Identifier:
                keyid:3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:82:69:a4:d8:4c:c5:f1:10:12:7b:48:8f:58:b3:7a:d7:02:
         01:38:89:2b:b0:ae:1f:fe:f3:f9:9f:3f:2a:f6:e0:6f:2b:d0:
         10:e0:d2:1c:eb:be:8b:d5:b9:d9:18:e9:05:ef:46:68:a6:c7:
         77:b0:8c:92:bb:18:75:9c:f6:df:e7:28:33:f2:d5:5e:70:a5:
         38:38:12:91:74:29:15:c5:c9:5c:48:3a:4f:13:3a:50:d7:ea:
         f5:20:b4:8c:3a:43:2d:a4:24:3d:14:59:d6:0b:b3:54:85:24:
         5e:00:34:95:3a:54:53:cd:fb:d4:4f:ba:00:24:8c:55:0f:93:
         2b:46:28:06:32:9e:c5:32:6d:7f:29:29:4a:28:e8:03:4e:23:
         54:c4:05:94:d5:91:c2:72:c4:34:50:16:b7:79:fc:b5:d5:78:
         cd:20:d2:e0:89:db:19:ca:c7:3e:18:8a:4e:29:fa:b2:27:23:
         ae:d5:be:e3:d6:44:3e:79:5a:5e:6d:12:8c:9a:df:b0:bc:47:
         e2:ef:f9:ce:4a:eb:b2:59:07:3b:7b:72:e0:57:81:68:e0:a5:
         23:32:e1:2a:ff:86:06:37:2e:9a:0f:31:ff:2a:42:46:67:01:
         16:45:60:e8:94:33:11:09:af:b4:00:fc:24:97:d8:bf:c1:44:
         78:1e:00:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:09:10 2025 by rpki-client