Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
File:                     SYklN9iywDJbe-CB_ZKGx5vqaoU.mft (raw, json)
Hash identifier:          nGpu4uvlT/UoRiGpCSShpu4M/TwpnAT2FWVNtzUxPQI=
Subject key identifier:   43:E7:F7:C7:55:06:69:EF:81:69:DC:C5:8F:AE:EF:56:80:3E:9E:A3
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Certificate issuer:       /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial:       3225
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
Manifest number:          311E
Signing time:             Fri 18 Jul 2025 15:31:40 +0000
Manifest this update:     Fri 18 Jul 2025 15:31:40 +0000
Manifest next update:     Fri 25 Jul 2025 15:31:40 +0000
Files and hashes:         1: SYklN9iywDJbe-CB_ZKGx5vqaoU.crl (hash: OZv1SzoXMuSdbmfhOnArKSSh+zx++vGz/uiLrsRMLt4=)
                          2: 4B7DDB34F78E11EAB64C8E81C4F9AE02.roa (hash: EeYrA0oUiX5ob1GCl360Jl12TI+VaTOiyuJgYZMlYyQ=)
                          3: 9C58363E8F2811ECA311FF19C4F9AE02.roa (hash: 2SMCn/npWqcmfZg6nAHuysuldQhi1wmuZFYT9k6JumE=)
                          4: B4D9927A014E11EB9E13483FC4F9AE02.roa (hash: aNflNpZRFbV1iEzwZkerSjooL3ZbHNTo9sqEEuW0z5E=)
                          5: B059C44831AB11ECAB908E42C4F9AE02.roa (hash: mvXnOqucNgAYFkGlwRCZn28/IzHeZDABYgBedIIjNdo=)
                          6: 9CE444808F2811ECA311FF19C4F9AE02.roa (hash: Za7CTLhf4UasBzGSp7I8a3g4a+j+NWEqF/KL56/2vS8=)
                          7: 3E745A08803611ECB2187650C4F9AE02.roa (hash: jeZ1quXhohHcENScdWfxhX0SEjFUrsOnsK/TOw/jZjs=)
                          8: FBD80F88F92111EAABA5882BC4F9AE02.roa (hash: dgpVoO6weS/ndsZQWujNDS9YR9/GTcgU2Ntn/TREgTo=)
                          9: 200B2C4804AB11EB8AAF5923C4F9AE02.roa (hash: lEnvEsVQKg7+MGcOwWT2W3WslnVR/yrmJySbJOft9Z8=)
                          10: 0E95C2D8F14211EAA4333775C4F9AE02.roa (hash: Ahn6ZDXaFlyG3ps/K1qhqsraiLwDj6j+LNP8Jh18fxI=)
                          11: BE430FFA699011EE96387F19C4F9AE02.roa (hash: eghTnl4+9Hou7Dvhi8Y2Dc5HYMDvdB3RFP+Hf9xhTd4=)
                          12: D26B4EE8070A11EB90C85C2BC4F9AE02.roa (hash: THe1NI3B1xx7kSh8zVoF92Sy5zfPL4BkUSLTuhQWgWA=)
                          13: 6A721236977E11EBB7908378C4F9AE02.roa (hash: /e6KrWMRhzwLnS1sGFyJnoQWuznldP9kkNXk2FwS2m8=)
                          14: 3F6A8A20953911EF9AAE0D26C4F9AE02.roa (hash: kkNYbzKkLIBOYGxWmeZtdwxdR3j0J/AVK8ZLE00KOWY=)
                          15: D1AEBE18070A11EB90C85C2BC4F9AE02.roa (hash: 6qeUbqQDZAs4XxUg3gjiDgNNwxCSJtTUmRGvfOUM8Jg=)
                          16: D4002378F15211EAA1BAB944C4F9AE02.roa (hash: Wyi5/LddF842JO/Qup+T+TtnSVCZWmXJ6KXLaRipY9A=)
                          17: F311F68E01C311EB898F2D52C4F9AE02.roa (hash: 85Xzc4sUFq6DeQmrj7B+GSXoAlkSVZuZhM/htcARgis=)
                          18: 997B7CFADEA011ED84E5D17BC4F9AE02.roa (hash: YpHnGald+tUXWOHiLdrxtwMGKIMtsU2LryOXgoLOgKw=)
                          19: 2687563AFA8E11EB8B0FCD39C4F9AE02.roa (hash: BHyc8gJj1zrzdD7tccu9ah8CwFB8JYItzsH3eX+N0N0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
                          rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 15:31:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12837 (0x3225)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
        Validity
            Not Before: Jul 18 15:31:40 2025 GMT
            Not After : Jul 25 15:31:40 2025 GMT
        Subject: CN=687a68dc-9261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:78:f0:f8:b1:07:75:ec:fc:91:05:c5:21:64:
                    f7:9c:04:95:96:99:53:34:66:f8:f5:63:7a:93:d2:
                    f5:4b:65:cd:0e:fa:b8:ea:52:95:c0:9e:8b:4b:29:
                    ae:5b:0a:af:32:3a:82:c6:12:60:7a:4a:bb:b2:87:
                    42:f4:b8:87:6a:06:c1:50:88:b0:cd:25:2e:c1:e4:
                    cc:72:79:1a:f5:c7:a7:24:33:6d:a2:01:29:0e:a9:
                    0f:e2:d1:1c:a3:22:7d:74:3e:92:d3:f2:44:41:9b:
                    c8:77:be:9f:6a:2b:04:56:13:ed:7d:44:a6:46:c0:
                    d0:fb:7b:61:b0:b1:8e:10:3a:9e:e7:a6:8a:64:0d:
                    7c:97:84:07:c5:bd:09:de:ee:6e:89:b6:50:9d:ef:
                    79:8c:37:89:38:ad:79:e1:b7:be:3a:93:2f:46:cf:
                    fb:b3:4e:c3:c4:ea:4d:cc:10:8b:af:50:c6:b5:25:
                    d4:9a:ed:6f:56:87:ba:d0:e7:f5:20:d3:fc:bc:70:
                    8b:a4:cb:c4:77:71:7a:c2:34:00:51:46:21:5d:78:
                    26:65:ef:27:c4:f6:36:18:34:4c:c9:28:28:49:09:
                    78:49:d3:c8:e1:df:f5:4f:61:67:58:95:43:60:64:
                    05:4c:85:e8:c5:fb:49:eb:7e:48:eb:64:b8:64:d3:
                    f3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E7:F7:C7:55:06:69:EF:81:69:DC:C5:8F:AE:EF:56:80:3E:9E:A3
            X509v3 Authority Key Identifier:
                keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:6b:5d:19:0c:c8:d4:bc:17:03:48:f3:02:fa:72:e0:b0:35:
         98:d2:76:9b:76:9b:0c:8e:1b:df:a8:e8:32:6e:65:56:4f:49:
         cb:35:28:ec:a0:2c:22:18:c0:7e:11:aa:70:93:b4:91:d7:9b:
         84:f8:8f:33:3f:ec:9b:bf:6b:c6:df:88:36:d4:eb:f2:9b:f1:
         70:8a:49:9c:93:ba:ec:2f:17:c1:3e:86:8a:06:3a:4d:7e:7e:
         da:e5:d8:14:40:fd:4b:0a:48:b2:ac:9c:8e:41:90:40:23:7f:
         7b:3d:e6:73:6b:e9:33:15:d3:85:a7:7f:b3:ad:c7:3f:39:19:
         70:4e:2b:43:66:5e:08:82:74:9a:52:68:9b:5a:33:29:d9:2c:
         04:78:fa:34:ae:93:5b:fe:be:a5:7d:f0:40:09:d7:30:f8:bc:
         6d:81:16:ab:13:5c:0c:77:8d:2b:48:e3:f0:44:78:01:7a:de:
         25:a0:16:80:4e:e8:34:d1:f0:c4:fc:b8:a6:05:4f:b1:d5:83:
         46:80:ac:f4:a0:c8:8f:a7:63:c6:08:7b:ad:59:05:7f:40:62:
         bd:dc:ae:ba:cf:c7:9d:29:55:90:3e:77:f0:0c:b9:56:e9:48:
         91:46:5d:0e:56:66:28:67:82:ea:9a:79:7d:14:6d:c5:23:11:
         f4:8f:04:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 15:17:05 2025 by rpki-client