Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.mft
File:                     IAmPtDvZCsAy3VDJ-ufauiCggp4.mft (raw, json)
Hash identifier:          v8KKL7Uv5XHBcQgrWfr469CX8boXcTb2jR1Qk03sMxg=
Subject key identifier:   A8:53:16:42:34:B5:B2:D6:D4:E7:B4:74:53:63:5D:8F:35:3B:25:F1
Authority key identifier: 20:09:8F:B4:3B:D9:0A:C0:32:DD:50:C9:FA:E7:DA:BA:20:A0:82:9E
Certificate issuer:       /CN=A914334E/serialNumber=20098FB43BD90AC032DD50C9FAE7DABA20A0829E
Certificate serial:       01D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.mft
Manifest number:          01D0
Signing time:             Mon 21 Jul 2025 02:56:30 +0000
Manifest this update:     Mon 21 Jul 2025 02:56:30 +0000
Manifest next update:     Mon 28 Jul 2025 02:56:30 +0000
Files and hashes:         1: IAmPtDvZCsAy3VDJ-ufauiCggp4.crl (hash: bNecB69tDXzM9W7MaTSGoJkqcSPM+i949CZCCxgMdK4=)
                          2: DF49E576A61711ED887EC04CC4F9AE02.roa (hash: cuyJes2LNe1DLICJKAu2N2g64dsZMgoY+9zmGAvCGMg=)
                          3: CC636E14FFE011EDA35F8946C4F9AE02.roa (hash: GXOHn0AK49u25tDuuMWJ/6hKr5TVf1Wysunj8q572D8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.crl
                          rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 02:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914334E, serialNumber=20098FB43BD90AC032DD50C9FAE7DABA20A0829E
        Validity
            Not Before: Jul 21 02:56:30 2025 GMT
            Not After : Jul 28 02:56:30 2025 GMT
        Subject: CN=687dac5e-75c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:29:33:b5:4a:a4:ba:9c:c2:c9:88:fa:13:58:
                    42:11:c3:2b:b3:c1:e0:32:f5:01:3b:20:cf:87:70:
                    2f:ff:45:d6:e9:29:97:52:05:0d:97:d5:51:02:c2:
                    87:62:ab:b4:26:01:d2:60:8d:8f:12:1c:a4:de:24:
                    b5:e7:8f:3e:6a:08:87:37:ce:fe:8f:57:0e:0d:27:
                    9c:26:73:4e:71:91:04:10:d3:b0:06:08:22:20:ca:
                    d5:1c:06:15:42:d3:0c:d8:6f:5d:0b:c0:a9:4f:fc:
                    1c:18:52:64:1b:8d:11:cd:ad:e7:a6:d4:8c:b4:15:
                    03:03:54:fc:70:7f:64:f7:e1:23:12:68:28:1f:8b:
                    34:b6:09:68:fb:e8:6e:76:13:3f:87:f7:14:61:9f:
                    2d:2f:f4:a8:08:af:95:99:7f:60:64:18:df:8a:36:
                    bf:83:02:cb:a7:cf:de:34:66:87:d7:70:32:51:29:
                    2a:4f:e7:2a:c3:d9:4d:09:b7:d2:26:42:f4:63:dc:
                    90:39:1a:26:da:2b:46:ad:5d:c8:b5:7a:0d:91:87:
                    e8:35:38:db:46:13:d4:a6:64:96:3c:d8:c5:01:e2:
                    4d:8a:2a:3c:cf:d2:a1:e3:2c:55:e3:4e:e9:69:f7:
                    fd:5c:59:45:8f:fa:7f:20:7b:58:f6:8b:cb:a1:9d:
                    c0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:53:16:42:34:B5:B2:D6:D4:E7:B4:74:53:63:5D:8F:35:3B:25:F1
            X509v3 Authority Key Identifier:
                keyid:20:09:8F:B4:3B:D9:0A:C0:32:DD:50:C9:FA:E7:DA:BA:20:A0:82:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:77:ca:67:79:15:f5:d0:f7:be:ba:1c:b2:a3:8c:bd:35:4c:
         a2:60:94:e8:23:49:64:4e:eb:e9:8a:5d:21:33:01:1d:17:19:
         25:1e:ea:d9:82:e1:51:20:1a:28:b4:b1:2b:dd:fa:6e:7a:e4:
         ba:51:43:ca:cd:95:0c:bb:05:10:fe:d5:e1:ef:38:1c:05:66:
         37:d6:fc:7b:57:99:49:55:18:68:82:25:6e:57:57:00:89:db:
         28:f1:b1:e2:96:ae:4d:d2:f8:a8:c8:4c:c8:bc:a3:e7:45:8a:
         fa:78:df:16:da:5e:a3:68:61:f7:b4:b0:42:1c:bd:00:3c:c8:
         2e:34:59:67:8f:34:ff:fd:06:b4:c9:a2:e5:31:c7:ac:7f:aa:
         f3:69:55:22:10:35:20:35:d8:af:38:5f:06:18:02:f6:7d:58:
         23:53:b9:b7:33:53:35:c6:6e:54:ed:23:eb:77:9e:b3:34:9b:
         9f:52:5a:12:63:f1:38:a6:a1:8b:ea:de:f8:3b:68:5c:3b:89:
         5d:e3:97:f4:97:b8:7a:fc:38:31:fb:b1:4f:af:f1:1f:ac:f1:
         8d:c8:4b:ef:01:f4:0c:f6:05:33:82:da:63:bc:51:fa:ce:93:
         92:b3:38:b0:a2:6b:20:8b:41:02:7e:6e:17:4f:5e:94:8b:33:
         7e:20:c6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 05:11:16 2025 by rpki-client