Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
File:                     3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft (raw, json)
Hash identifier:          w6d/EMIm7GMx4wbA8utVJDJUPcyxvlNDSmQ4saNItI0=
Subject key identifier:   FF:D5:29:63:DB:22:FB:1C:9C:B9:09:21:3C:32:DE:AF:43:4F:20:6C
Authority key identifier: DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5
Certificate issuer:       /CN=A919A016/serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
Certificate serial:       0B3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
Manifest number:          0B30
Signing time:             Thu 24 Jul 2025 19:22:20 +0000
Manifest this update:     Thu 24 Jul 2025 19:22:19 +0000
Manifest next update:     Thu 31 Jul 2025 19:22:19 +0000
Files and hashes:         1: 3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl (hash: ZsSX7IJ9l6fvMdNveexqzYJ9Y098IoBQ60y0Z4t+t+Q=)
                          2: 26010A0605EF11F09181F913C4F9AE02.roa (hash: N9/aRucZG0vkV0NK+baiZCaCBLLblOnkOGbPF5TkJk0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl
                          rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 19:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2877 (0xb3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A016, serialNumber=DF2F8A75F3E9275E0D4F10FC6A319997911BE5B5
        Validity
            Not Before: Jul 24 19:22:19 2025 GMT
            Not After : Jul 31 19:22:19 2025 GMT
        Subject: CN=688287ec-0e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:49:96:8f:ff:ad:9b:d7:c1:11:b4:76:17:67:
                    19:d3:96:58:3c:3e:7c:31:32:30:53:98:08:5a:49:
                    92:58:a0:17:b9:1a:54:f3:6c:e6:b4:60:be:9d:00:
                    a4:c9:2a:49:98:0e:b9:8f:c6:f9:a0:e5:9b:f4:b1:
                    2f:42:be:50:ec:0c:1a:b1:1f:77:a3:e2:ba:cc:d2:
                    63:74:89:cb:57:39:f1:d4:63:59:17:84:44:cf:b2:
                    ee:9d:42:5f:5f:8d:37:1e:a8:f4:3d:34:ec:ea:ff:
                    21:75:b0:8a:b8:19:65:2a:b8:d9:66:40:10:d1:9e:
                    db:3c:f6:fc:16:22:75:6f:fe:13:a2:c9:6d:18:85:
                    f8:c0:49:f1:27:c7:b2:4f:42:15:cf:64:0c:d9:a7:
                    72:12:b9:fe:9b:ce:10:9f:00:2c:a3:5b:f4:2f:4e:
                    f1:30:22:34:01:a0:56:0c:d8:48:a8:06:ac:22:87:
                    3e:15:b7:69:28:b0:f4:44:65:69:c0:dd:c0:0e:77:
                    85:fb:9e:da:f0:16:51:01:1a:7c:4a:8d:6f:96:50:
                    78:28:b2:21:53:bd:12:48:ed:28:ae:e0:18:d7:b6:
                    7f:de:7f:fd:ec:90:6c:10:c3:30:45:69:0d:1c:62:
                    47:9c:4a:66:d0:de:e1:28:a1:56:5d:8d:eb:bd:c1:
                    54:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D5:29:63:DB:22:FB:1C:9C:B9:09:21:3C:32:DE:AF:43:4F:20:6C
            X509v3 Authority Key Identifier:
                keyid:DF:2F:8A:75:F3:E9:27:5E:0D:4F:10:FC:6A:31:99:97:91:1B:E5:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A016/C0677226417111EAAAD26A6CC4F9AE02/3y-KdfPpJ14NTxD8ajGZl5Eb5bU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:c3:01:a6:7b:77:93:c4:d5:98:cd:a4:df:bc:9b:4c:df:07:
         7d:1f:d6:bc:f8:df:f4:0e:81:23:a2:f9:6e:56:23:d6:71:d7:
         ac:f5:57:1f:ea:7e:1e:8a:5c:5b:a4:d6:9c:ce:c7:28:b0:4a:
         f6:14:83:39:6b:09:51:62:f8:2c:2f:65:18:59:00:3e:ad:27:
         18:45:2e:68:6b:91:09:45:03:92:56:7a:56:3b:48:d6:8b:2d:
         52:10:25:e2:01:08:95:5c:ea:bc:5e:88:d8:38:9f:8e:66:75:
         27:84:bb:eb:86:4b:38:6f:77:db:15:97:91:d4:b0:47:dc:c1:
         42:4d:9d:f0:01:e6:7a:3c:73:7b:be:f0:a2:02:29:3f:03:c3:
         6b:0c:e0:83:74:db:61:1e:33:08:e1:9f:de:c0:e4:be:3f:35:
         89:5e:09:6c:c4:57:a5:21:02:33:5c:2e:ca:47:86:45:34:6f:
         d6:1a:8e:cf:92:0c:ad:cb:be:7c:d1:c3:93:f8:9e:a3:df:20:
         e4:ab:8a:88:19:92:46:74:b8:53:28:26:a8:49:db:25:8b:ae:
         44:dc:8a:c7:17:df:3e:dd:ec:9a:96:ba:ed:88:3c:62:e1:d8:
         49:ac:48:ce:ae:49:c3:c4:37:7e:33:cd:0e:8c:f1:31:49:58:
         5a:87:d1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 07:04:21 2025 by rpki-client