Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
File:                     M3WpYTTFczGvVN1xTtNj2rMba9A.mft (raw, json)
Hash identifier:          xGWv/+yH8XHNCCzvgES+yjkPfuoPA9tyeXk0T5skiOI=
Subject key identifier:   18:67:4D:7E:23:CB:59:7B:AC:A3:77:D5:58:10:30:FE:63:B0:43:76
Authority key identifier: 33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0
Certificate issuer:       /CN=A9115620/serialNumber=3375A96134C57331AF54DD714ED363DAB31B6BD0
Certificate serial:       A3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
Manifest number:          A2
Signing time:             Sat 19 Jul 2025 06:26:55 +0000
Manifest this update:     Sat 19 Jul 2025 06:26:55 +0000
Manifest next update:     Sat 26 Jul 2025 06:26:55 +0000
Files and hashes:         1: M3WpYTTFczGvVN1xTtNj2rMba9A.crl (hash: FaRnfLLnhtnSyIHK0C//bPE4qzNPv1E/l/rkJZ9XuY4=)
                          2: 8334E4446BA911EFADEBED84C4F9AE02.roa (hash: Ur23uerjkF05UN2d4OV8Z6LvPx8JS26HE6YTaEzhleU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.crl
                          rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 06:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115620, serialNumber=3375A96134C57331AF54DD714ED363DAB31B6BD0
        Validity
            Not Before: Jul 19 06:26:55 2025 GMT
            Not After : Jul 26 06:26:55 2025 GMT
        Subject: CN=687b3aaf-a3d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:fe:21:20:84:20:77:23:91:8a:d2:62:b9:23:
                    4b:5f:d4:6e:ea:23:e8:fe:27:2a:ab:94:d6:50:b2:
                    d8:bd:96:31:b6:d6:f0:19:8d:97:2b:af:7d:24:0c:
                    d0:82:fd:02:47:bc:54:59:90:3b:03:db:07:fa:b4:
                    4c:9a:96:c9:8a:06:4f:88:88:bd:bb:75:71:44:3b:
                    91:c5:a3:29:2a:1e:e8:d1:13:a6:12:e2:dc:6d:39:
                    8c:86:ab:a5:21:80:22:80:cb:f7:4f:44:09:2f:ed:
                    3e:d3:7d:f3:f5:6a:84:6b:c9:55:e7:ab:c9:ab:e9:
                    f4:67:94:3e:1b:d2:90:47:95:3a:3c:9f:3a:88:ca:
                    ee:b6:0e:b8:05:8d:76:44:3a:cd:16:55:28:b6:80:
                    d3:df:11:c8:72:8f:51:3c:43:2a:77:b8:85:1d:39:
                    3b:28:4f:78:0c:0c:c6:56:1d:56:f2:d0:33:09:2e:
                    5c:ad:6f:d3:9a:b9:cf:7d:cc:a6:dc:96:59:ae:02:
                    b5:c9:c3:eb:17:85:f6:65:46:af:6f:62:fa:0a:4b:
                    5f:90:77:c3:37:37:df:bc:4b:8e:e8:fb:17:0f:35:
                    3e:16:05:3c:ab:ae:c6:d2:f2:5d:13:2b:96:fb:3a:
                    8f:9a:08:ea:4d:7a:4c:74:8f:b7:5e:3c:3a:65:47:
                    6e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:67:4D:7E:23:CB:59:7B:AC:A3:77:D5:58:10:30:FE:63:B0:43:76
            X509v3 Authority Key Identifier:
                keyid:33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:a9:7a:bf:c8:76:9a:e2:63:98:d2:77:94:bc:cb:cf:30:cb:
         7c:23:58:31:d9:b1:9a:65:17:2c:d2:08:f6:3e:da:bc:42:3e:
         df:a0:4c:a5:16:36:73:9b:dc:68:9d:8c:81:4c:49:a5:2d:44:
         68:bc:29:a5:bd:27:ec:8c:b2:7e:2c:b1:52:41:88:28:a3:8d:
         8e:43:b0:ee:aa:a1:7b:06:96:d4:76:0f:11:a8:30:04:3a:0f:
         50:65:a9:5d:60:1c:42:77:f8:f7:d6:1d:8c:ae:60:22:66:e2:
         fc:87:3c:a9:bc:c0:b5:98:74:bc:99:4d:48:00:78:a3:ba:c6:
         ee:1c:5f:f4:62:9b:60:28:c5:ab:d3:69:78:7e:5c:70:24:59:
         82:45:1a:ec:4b:77:19:fd:7f:b8:3c:04:ed:3f:69:76:fe:ab:
         bb:eb:d5:7f:eb:19:60:3b:8c:a4:d3:00:3c:4b:0b:a9:2a:d4:
         25:2a:93:2d:14:f1:7b:b9:31:60:b3:c3:5c:d8:38:2b:12:03:
         06:ee:d3:50:c8:e0:a4:c3:61:f5:8b:8b:44:14:00:48:96:f4:
         30:93:d4:45:13:f7:b2:64:a4:fb:b2:28:79:8f:8b:fa:66:53:
         b0:9c:70:f8:28:ce:17:d7:12:29:44:11:a7:c1:57:de:b1:fc:
         99:07:48:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:55:12 2025 by rpki-client