Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
File:                     mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft (raw, json)
Hash identifier:          FyH1kLbjcIMQqAIVm9m0BV7pgtr8bqEEsxPZF2d3TU4=
Subject key identifier:   AB:17:8B:E6:F1:D9:1D:3F:96:D2:07:E2:FD:21:54:27:0B:37:50:37
Authority key identifier: 98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24
Certificate issuer:       /CN=A9136429/serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24
Certificate serial:       03E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
Manifest number:          03E0
Signing time:             Sat 19 Jul 2025 00:58:12 +0000
Manifest this update:     Sat 19 Jul 2025 00:58:12 +0000
Manifest next update:     Sat 26 Jul 2025 00:58:12 +0000
Files and hashes:         1: mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl (hash: yOzHyGdX+LXCSbQ9TE/gccyrfoMSaN8V1m3STBBLF0c=)
                          2: A3FBC4668A3511ECB4502D0DC4F9AE02.roa (hash: EHGFFNKYLhkroKhaSJxD35WEinaxk7mhvnsD4zQjF4g=)
                          3: 3A51C4061DF211ED95A51A3EC4F9AE02.roa (hash: h8JGD2TX2zCZAvoeCATDFLy5kT17CJ7zwhERt61Mof0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl
                          rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 00:58:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1000 (0x3e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136429, serialNumber=989319F56A7AE24208D13624DD69D8E4091B7C24
        Validity
            Not Before: Jul 19 00:58:12 2025 GMT
            Not After : Jul 26 00:58:12 2025 GMT
        Subject: CN=687aeda4-d573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:15:b2:b5:2b:69:ca:c5:db:e5:d1:a8:2f:9c:
                    fb:e3:f6:d6:0c:5a:4b:a1:17:b4:7b:70:25:b6:c2:
                    76:b4:6c:29:fb:df:09:ab:14:b0:62:c4:50:79:3a:
                    54:a5:06:06:4e:bb:06:5c:80:28:c6:7c:e2:d5:0b:
                    8b:3f:b6:bf:ae:a2:16:87:1d:24:43:c9:05:2a:e7:
                    90:60:92:12:5c:b7:0f:b6:ca:9f:74:9b:82:b6:28:
                    0c:be:ab:a3:e1:81:66:27:b0:07:f3:0c:22:77:ca:
                    79:e5:86:8b:92:fd:7d:53:7b:a3:51:50:62:f9:fd:
                    31:03:02:ec:73:24:6c:5e:41:ab:1f:d6:2d:81:0c:
                    a9:7f:d9:0d:8b:a8:15:4a:fb:fa:30:3a:ce:cd:41:
                    d6:d9:62:1b:27:4b:4d:f8:2f:61:28:1e:dd:d1:90:
                    5a:ed:65:9a:10:63:d9:1f:40:04:e9:c7:27:19:50:
                    6b:04:99:41:02:c5:96:ff:0d:6a:cb:8e:75:3f:c7:
                    de:a8:7a:45:e9:ac:83:99:4c:91:fc:72:83:b7:32:
                    ca:d3:80:ba:ef:40:97:7c:cc:3a:0c:6d:5f:f1:3e:
                    93:6e:8c:9c:8c:cd:4e:e7:42:ce:f3:76:69:ac:4a:
                    e3:35:cc:d6:04:31:e8:de:e6:68:63:8d:44:4e:fc:
                    c5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:17:8B:E6:F1:D9:1D:3F:96:D2:07:E2:FD:21:54:27:0B:37:50:37
            X509v3 Authority Key Identifier:
                keyid:98:93:19:F5:6A:7A:E2:42:08:D1:36:24:DD:69:D8:E4:09:1B:7C:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136429/E80FFB488A3211ECB08D900AC4F9AE02/mJMZ9Wp64kII0TYk3WnY5AkbfCQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:af:9d:f1:a1:5e:06:cf:87:b1:20:56:94:a7:12:65:3d:47:
         d6:1d:ef:33:8b:dd:e5:52:8b:95:e4:34:53:38:c3:f9:b2:7c:
         c2:bd:fd:6a:88:46:83:cf:ee:cc:1c:97:be:3c:b4:a9:f8:fd:
         71:ff:b8:36:8f:82:87:34:79:00:48:dd:89:f3:b7:c9:40:04:
         80:e3:d4:64:e7:d7:17:31:9b:32:03:2a:e9:69:07:65:3c:17:
         17:04:e2:36:99:78:21:ff:2c:c1:bf:8b:5f:c4:ee:c8:77:e9:
         87:8a:27:b3:7d:70:82:ea:ff:97:c5:ed:77:5a:1d:5b:8a:3a:
         0a:75:a1:13:e2:97:df:da:a5:54:5b:b0:64:98:78:cf:71:fe:
         e5:63:b8:56:7a:05:b6:43:54:67:16:ce:b3:1d:16:d8:f7:91:
         27:29:91:d9:6d:ee:fe:17:a0:dc:ad:d2:d1:7f:70:80:13:07:
         da:fb:59:2b:1a:3f:8b:b3:df:63:9e:d8:1b:19:82:06:f0:c4:
         c5:de:ee:dc:d4:27:f0:68:ed:2f:04:95:21:e1:d5:92:a5:76:
         ef:93:97:3b:1e:ac:c8:d1:7a:1c:23:8b:f0:56:e1:ac:11:02:
         03:38:08:aa:fa:68:6e:b0:54:0e:ce:17:25:11:5c:8a:ea:b8:
         73:bb:b3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:34:15 2025 by rpki-client