Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
File:                     30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft (raw, json)
Hash identifier:          2L7G8TAHseRc2kxOJWk3MA3t8nMUfGVm985ZK/Erz/0=
Subject key identifier:   4E:84:C4:4A:CF:5D:1E:47:1E:B7:11:86:05:88:80:34:5C:66:C2:D8
Authority key identifier: DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93
Certificate issuer:       /CN=A9118479/serialNumber=DF4069F246E9FEA97B0ABE3A5FEC778E53931793
Certificate serial:       34B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
Manifest number:          34B4
Signing time:             Sun 24 Aug 2025 15:00:30 +0000
Manifest this update:     Sun 24 Aug 2025 15:00:29 +0000
Manifest next update:     Sun 31 Aug 2025 15:00:29 +0000
Files and hashes:         1: 30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl (hash: hf7GTTWDzRJeS/eRQJWfvW/mfmb6g2CJ63llSerSQZM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl
                          rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Aug 2025 15:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13492 (0x34b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118479, serialNumber=DF4069F246E9FEA97B0ABE3A5FEC778E53931793
        Validity
            Not Before: Aug 24 15:00:29 2025 GMT
            Not After : Aug 31 15:00:29 2025 GMT
        Subject: CN=68ab290e-6ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:57:8d:e7:c4:ec:cc:ab:5a:3d:45:ef:2c:c5:
                    5e:8a:a3:b7:46:01:95:04:84:27:53:99:28:65:48:
                    55:14:2c:6c:32:de:6b:1e:55:cf:58:49:b2:b8:a6:
                    6c:49:55:29:ff:90:4b:47:fd:28:6d:a7:d9:0b:5b:
                    c5:bd:89:13:3a:d9:c7:8f:4e:6a:c5:69:e3:0c:24:
                    29:67:c3:17:ae:60:14:59:fa:4b:f2:3d:4b:d4:d5:
                    49:3e:0c:b3:26:c8:82:2a:c4:d4:82:6b:8f:85:0c:
                    3f:59:67:27:40:59:d9:b9:f2:d3:79:98:c1:c2:93:
                    a7:8e:36:9b:21:10:20:10:bd:0f:bb:5e:03:21:b5:
                    96:14:8d:bb:e6:8f:13:8e:d4:8e:d2:26:92:78:f7:
                    7b:54:e6:a1:2e:c8:19:eb:b6:6b:95:3d:07:5e:b7:
                    1a:4b:26:51:4d:4b:1b:cf:7f:da:8f:89:d5:59:11:
                    1e:79:0f:27:71:18:74:8c:4e:37:82:f6:ed:10:48:
                    d2:ca:b3:a8:5a:4d:39:1a:78:3a:3f:28:63:61:de:
                    51:19:d7:b4:1f:61:63:9f:43:59:21:68:bb:18:5f:
                    aa:54:d9:b5:53:c1:ec:8b:70:49:b4:a9:b4:45:d7:
                    b4:a1:a1:33:82:30:d0:c7:7b:e1:17:ba:38:3d:83:
                    6a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:84:C4:4A:CF:5D:1E:47:1E:B7:11:86:05:88:80:34:5C:66:C2:D8
            X509v3 Authority Key Identifier:
                keyid:DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ca:46:72:f0:1f:ed:33:0b:fd:79:68:64:ad:26:eb:3b:9a:
         67:cb:0a:80:bd:83:a0:f9:3b:ba:39:f7:6f:da:0a:7c:7e:57:
         16:85:0c:5d:3d:8e:cb:3e:b4:0c:5c:d9:27:54:93:b9:ec:1d:
         d6:79:77:4e:b7:1f:5a:f9:b3:7b:31:94:15:e1:0a:b5:5c:42:
         25:6c:f9:d3:51:54:7c:d3:e2:e8:8b:c1:cf:fa:4f:4f:94:5c:
         ff:a6:3f:fd:36:2a:5e:68:ae:c1:0f:2f:99:80:41:d3:b2:6c:
         27:70:b8:19:80:54:34:8f:78:85:3a:73:59:72:2a:5f:b2:06:
         ac:20:36:59:2b:dc:18:c3:8b:d3:81:83:ed:ed:9a:6d:47:61:
         23:cf:d9:0f:06:7a:db:b8:6f:17:5d:91:00:26:70:19:d2:fb:
         1e:46:6b:3a:ba:c4:b7:c6:69:08:0a:37:14:6d:0c:c1:16:4f:
         91:3c:5c:72:6d:42:81:2f:57:6b:9e:59:79:93:2a:56:d7:46:
         a3:81:9f:11:2b:6f:5a:41:c8:64:0f:e6:84:22:c1:db:8a:5a:
         17:5e:54:42:e3:7d:ea:27:03:69:05:cd:66:f7:d9:8f:03:52:
         54:8d:92:1c:f2:18:8d:8a:8c:80:5b:f2:b2:77:86:21:18:83:
         0c:fc:f7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 22:20:53 2025 by rpki-client