Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
File:                     ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft (raw, json)
Hash identifier:          Z1oabbxRo59afdS9pNRFd1F3giz7PUv/MdfWlA6V0mc=
Subject key identifier:   11:7A:FF:80:F2:DE:62:47:B6:36:C9:A2:AD:46:25:96:18:18:52:71
Authority key identifier: 00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B
Certificate issuer:       /CN=A913C0C6/serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B
Certificate serial:       0528
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
Manifest number:          050F
Signing time:             Sat 19 Jul 2025 00:06:07 +0000
Manifest this update:     Sat 19 Jul 2025 00:06:07 +0000
Manifest next update:     Sat 26 Jul 2025 00:06:07 +0000
Files and hashes:         1: ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl (hash: GB+Qgznq35Z/i9ZFnC8DajrIHALqhUFErx8mGP4MwdA=)
                          2: 2D197F6E52E611F087152212C4F9AE02.roa (hash: zVOqM+RoWZN/wECjUDwPT1Rps1jHUz0kOOj8NAvGv1U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl
                          rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 00:06:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1320 (0x528)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C0C6, serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B
        Validity
            Not Before: Jul 19 00:06:07 2025 GMT
            Not After : Jul 26 00:06:07 2025 GMT
        Subject: CN=687ae16f-25b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2c:61:f1:ce:be:35:e4:ed:35:67:63:29:a3:
                    c1:3b:a4:3a:fd:73:38:4e:a1:5b:0b:d6:e6:69:9b:
                    1a:e2:cd:f0:c8:d2:88:ec:58:ec:cf:c2:4e:30:72:
                    a6:1f:74:bf:45:31:97:27:b1:2b:c9:fb:20:74:22:
                    1c:f8:c2:71:67:20:c6:0e:f0:28:f6:da:68:e2:b6:
                    f3:a7:12:ea:cd:ea:a0:65:71:04:04:5f:10:cc:02:
                    b9:65:6c:fc:fb:43:f8:ac:ff:23:37:74:f5:26:bf:
                    20:28:e5:c3:63:e0:d0:10:61:b6:82:f1:6b:7d:8b:
                    d6:41:af:bd:c7:92:bf:3e:bd:04:4c:fc:5b:07:12:
                    9a:24:2b:79:e8:6f:f4:30:fb:0e:1a:c0:1d:6e:37:
                    f9:46:72:69:9a:d8:34:66:18:83:c2:b2:cd:c6:ca:
                    e9:88:05:b2:42:46:c1:5d:f0:2a:95:f0:39:6e:5f:
                    11:01:ea:57:b8:cf:9e:fd:6b:f6:ee:d4:d9:71:e8:
                    61:93:82:97:00:5f:7a:ed:9c:e4:e0:f4:27:00:7a:
                    ca:4c:c2:8d:ec:de:bf:a5:f0:a0:e8:0a:68:79:fa:
                    68:9f:fc:ee:49:8b:95:b0:88:45:be:90:a6:72:d6:
                    1d:98:19:2b:e7:18:18:c2:d5:99:81:1a:37:a2:73:
                    e1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7A:FF:80:F2:DE:62:47:B6:36:C9:A2:AD:46:25:96:18:18:52:71
            X509v3 Authority Key Identifier:
                keyid:00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:62:59:37:3f:d4:52:59:03:47:11:f7:80:7c:c1:8c:41:86:
         cd:74:09:a4:f2:34:d7:ce:11:3e:64:40:b6:ae:44:aa:f0:35:
         64:f9:bb:e0:88:a3:18:1e:04:f1:d1:1d:a8:27:64:83:3d:2d:
         50:45:67:e9:b3:d1:5c:de:df:d5:db:02:6a:09:9c:15:76:0e:
         86:fd:c1:a0:40:d5:f2:47:1f:21:ec:fd:6a:db:14:6d:ec:61:
         9e:58:37:29:de:0e:42:6b:95:86:02:1e:e2:19:fe:12:a0:d3:
         b4:46:aa:0c:31:bd:ca:ee:69:ed:3e:71:11:68:0c:94:41:55:
         6d:6a:60:cd:f9:83:67:a9:71:be:64:47:4e:3f:a4:e4:49:ff:
         aa:e1:f1:6b:e8:e6:9b:7a:5a:0e:d4:2d:ec:f9:0e:f7:34:02:
         f0:e6:04:7f:92:8b:56:fc:5c:96:c2:0d:1d:cd:9c:81:96:3c:
         34:1b:b1:92:0b:79:67:2d:da:84:9a:b0:c8:02:e1:68:24:bc:
         48:6c:d5:03:3b:c3:18:22:30:8b:bc:01:a0:ff:f1:a7:c0:ce:
         2c:27:de:af:4c:ca:9f:a0:a8:a2:69:ad:29:5d:f4:d9:8a:5b:
         bf:80:c2:cc:7f:23:a8:8f:e1:f8:2a:05:51:01:0a:45:e7:4b:
         9a:ef:de:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 06:23:18 2025 by rpki-client