Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft
File:                     ML4eudOsSdCv7hNTw_nRFnoAexc.mft (raw, json)
Hash identifier:          ItY+BL9P4ch9NjRYbBF5nSv7YdJG+Cu04ZBX+zeJdxg=
Subject key identifier:   80:57:8F:E6:88:24:61:2B:E0:C5:5A:F1:B7:87:24:68:CA:F2:24:83
Authority key identifier: 30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17
Certificate issuer:       /CN=A917B736/serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17
Certificate serial:       9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft
Manifest number:          98
Signing time:             Sat 19 Jul 2025 06:37:08 +0000
Manifest this update:     Sat 19 Jul 2025 06:37:08 +0000
Manifest next update:     Sat 26 Jul 2025 06:37:08 +0000
Files and hashes:         1: ML4eudOsSdCv7hNTw_nRFnoAexc.crl (hash: rw02mojT7CsnPhV1iifkOonIKkuBUcnKW7BkXFi4zzs=)
                          2: A8F4AE389D7E11EF91A24C73C4F9AE02.roa (hash: Y1QGQN0nXso2hopLjYxap7U6L3vOEJ5sbYbcbURZoVc=)
                          3: EBC0BF3A843411EFA205900AC4F9AE02.roa (hash: 1lTg3C6avyOXyGgdRKyCJEw/4DfSTwcprqQ9ajZX1oM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl
                          rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 06:37:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B736, serialNumber=30BE1EB9D3AC49D0AFEE1353C3F9D1167A007B17
        Validity
            Not Before: Jul 19 06:37:08 2025 GMT
            Not After : Jul 26 06:37:08 2025 GMT
        Subject: CN=687b3d14-f131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:41:b0:ac:0e:42:20:6a:05:eb:d4:ee:72:cf:
                    84:00:5e:40:d1:9c:7d:04:2c:96:c5:e9:a9:aa:c4:
                    2f:a4:8e:ef:ac:a6:9f:a9:b2:8d:ed:dd:df:b0:bb:
                    55:e7:65:4c:65:15:a2:85:c0:d5:d1:f0:8b:e0:04:
                    af:f3:55:22:ac:97:9f:77:ed:49:2e:2c:80:5a:c3:
                    11:2b:36:68:96:c0:7e:1a:d1:a9:b3:de:16:cb:67:
                    f0:47:c7:5f:41:ee:02:4a:70:43:c2:3b:1e:34:d1:
                    d6:7c:7f:eb:d6:fb:1b:26:44:e0:03:70:f1:ff:2d:
                    b2:dc:81:13:ee:3f:b7:45:f6:55:53:05:33:ef:70:
                    57:07:27:f0:11:1f:08:13:44:f4:16:1d:25:76:3e:
                    30:9b:23:4d:9f:c6:93:ed:a6:1f:98:f3:1c:d6:e2:
                    c7:4e:4b:43:8c:4a:80:dc:3f:95:25:67:9d:81:a4:
                    07:18:cb:cd:93:e3:49:2f:2b:a1:9e:50:1f:08:97:
                    fa:8f:4b:7d:d6:b7:1f:f1:ca:cd:20:58:57:73:ca:
                    06:71:1c:ae:a6:10:a9:dd:25:90:33:77:f3:c6:78:
                    f9:0a:df:af:3c:e9:1d:52:fc:bd:7c:d4:6a:40:1c:
                    ab:65:1e:8e:c8:88:24:ea:37:f0:75:e6:df:e3:d4:
                    81:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:57:8F:E6:88:24:61:2B:E0:C5:5A:F1:B7:87:24:68:CA:F2:24:83
            X509v3 Authority Key Identifier:
                keyid:30:BE:1E:B9:D3:AC:49:D0:AF:EE:13:53:C3:F9:D1:16:7A:00:7B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ML4eudOsSdCv7hNTw_nRFnoAexc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B736/F133EF0C842D11EF99E83D84C4F9AE02/ML4eudOsSdCv7hNTw_nRFnoAexc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ba:e3:d1:06:6e:2c:a0:9f:18:1d:aa:3a:b3:03:db:72:a4:
         45:8c:ec:51:df:c3:64:25:c2:60:84:d9:38:9c:6d:d4:a8:06:
         3b:2a:db:13:4a:05:58:77:19:5f:5d:0e:17:a0:7c:4b:c7:fd:
         6f:ab:cd:e1:69:67:58:08:fe:18:7b:6c:cd:8c:60:98:b3:6b:
         89:95:b1:f3:22:0e:9a:57:33:82:bd:95:e9:f5:40:32:5a:71:
         f4:18:6c:ae:0b:b0:c4:a7:e8:69:88:e5:be:97:c1:e8:d5:bb:
         c2:6b:32:70:65:a5:90:d3:a8:0c:06:95:22:d8:6e:4f:0d:a1:
         3b:3c:8f:03:36:03:66:66:ef:6a:3a:31:61:de:e4:8d:ce:78:
         91:59:ea:57:9a:8d:2d:0f:48:87:1a:c8:2d:0c:7d:9f:3d:34:
         3d:d2:e1:71:33:56:7c:6a:99:12:ce:d7:71:f1:4c:b2:82:b3:
         49:4e:a7:15:35:d7:b9:bc:e9:ef:ba:5d:9e:4c:29:37:da:ab:
         d8:a6:a3:ab:7f:47:1a:2a:7d:2a:b5:4f:b3:a7:7e:30:a4:ec:
         06:e5:bf:0c:ba:51:2a:24:cb:6d:1b:21:fb:7c:43:eb:43:ed:
         29:27:4b:32:5f:cf:ae:e7:72:c5:ca:df:bf:7f:d3:60:5e:f2:
         eb:a8:2b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:59:10 2025 by rpki-client