Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft
File:                     3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft (raw, json)
Hash identifier:          uqkO2UbpxurEr0ECB8/XzAnUdEgZUCue6NerffYrXxs=
Subject key identifier:   4D:F1:AD:92:5F:33:86:38:BA:45:4F:F2:47:1C:7E:59:F2:C9:BC:39
Authority key identifier: DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C
Certificate issuer:       /CN=A9199AFB/serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C
Certificate serial:       0320
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft
Manifest number:          031B
Signing time:             Fri 25 Jul 2025 01:35:08 +0000
Manifest this update:     Fri 25 Jul 2025 01:35:07 +0000
Manifest next update:     Fri 01 Aug 2025 01:35:07 +0000
Files and hashes:         1: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl (hash: DtENmghonTrV2s3Cwlo23aCww0IkhQTj82qpymWlUhc=)
                          2: 9E9EC628D9C511EC81B54F47C4F9AE02.roa (hash: BkyDK7N8MqPzb7yz7N5nQ1LHqHZV+xDxLFOlL/0hv/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl
                          rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 01 Aug 2025 01:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 800 (0x320)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199AFB, serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C
        Validity
            Not Before: Jul 25 01:35:07 2025 GMT
            Not After : Aug  1 01:35:07 2025 GMT
        Subject: CN=6882df4c-7d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:95:37:2c:8a:e1:99:53:8a:db:02:e1:81:f6:
                    02:fb:1a:ab:3b:d8:07:2e:14:e4:d8:e2:94:76:94:
                    02:61:b0:30:ce:5b:5c:10:ed:aa:d2:b1:59:7d:8f:
                    09:f4:b5:58:2f:8e:7b:fb:c4:d2:95:91:b4:ca:b2:
                    66:cb:0e:5a:50:d5:b4:8c:ff:71:19:60:0f:35:e3:
                    3d:cd:40:34:6b:42:3e:50:64:2e:8a:26:77:86:4d:
                    69:6b:ce:39:ee:05:b3:ef:19:69:bf:7e:74:86:94:
                    fd:5a:5d:f5:65:1f:80:4d:c2:b1:d7:b5:b3:c6:a9:
                    fd:7c:d3:73:b5:09:1b:77:56:df:de:d0:32:d3:19:
                    30:6e:29:a6:76:63:04:ad:3d:be:0b:c4:b1:72:1b:
                    d4:77:3d:81:ef:f9:5a:4f:ce:1e:aa:21:34:d7:77:
                    f0:49:24:7a:d0:19:b3:80:58:54:8f:f1:b0:7e:0f:
                    34:d2:c8:7c:10:4f:5d:cd:73:f7:0a:9b:1d:0a:7c:
                    5a:4b:a3:71:97:a5:ad:ce:5a:c3:4a:1e:f8:32:f3:
                    e1:00:a7:9a:bf:5e:df:4c:a9:36:d7:b8:1f:9a:86:
                    3c:c9:c7:cf:1c:71:7d:15:08:2c:ba:f3:8e:53:98:
                    d6:6d:02:1d:66:c9:d2:01:0d:22:33:43:2c:e9:11:
                    c7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F1:AD:92:5F:33:86:38:BA:45:4F:F2:47:1C:7E:59:F2:C9:BC:39
            X509v3 Authority Key Identifier:
                keyid:DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:1e:21:34:1c:9d:09:f9:f6:7d:97:e5:ae:7a:97:d5:4a:43:
         0d:a9:8b:96:fb:9c:00:4a:7c:b4:cd:34:b1:51:ce:5f:2a:ea:
         ae:18:91:5a:e3:44:25:1f:60:b9:c2:57:8b:cc:09:95:73:b9:
         7f:a3:22:c7:ae:02:bf:2d:fa:4d:c3:e7:5f:af:2f:81:e0:62:
         6d:ae:bb:bd:58:22:e1:c3:2e:c3:59:1d:00:05:08:3d:b3:fd:
         e4:84:2f:60:de:b0:8a:b0:75:7a:37:b4:e4:2e:49:9c:b7:72:
         73:1d:1d:6a:e5:b9:3f:e4:36:2e:48:8e:0b:5a:73:89:66:21:
         7e:1b:de:31:cd:21:34:ee:64:a1:30:8d:60:aa:ef:06:57:31:
         e1:a3:a3:00:2b:26:a1:d3:2c:de:57:c6:ca:84:0f:b5:c8:02:
         eb:a3:64:53:97:c6:e6:0d:d9:37:cc:57:82:76:b9:b7:e9:a5:
         cc:74:87:33:fd:ee:24:e9:13:70:d5:9c:48:ee:9c:32:6a:eb:
         fe:a3:74:68:95:ce:a8:88:25:26:01:b5:1c:4d:ee:05:fa:03:
         d8:a2:8a:30:ae:05:75:d5:6b:75:65:66:04:76:60:bc:cc:48:
         de:64:b1:4e:8b:a7:03:b9:2b:47:bb:fa:89:69:61:d9:ba:30:
         8b:6a:8d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 07:08:01 2025 by rpki-client