Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
File:                     iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft (raw, json)
Hash identifier:          YdSux8fYTsDnEQazuOYk6LQlODNY+FIZi8fHMFLMjos=
Subject key identifier:   D0:8C:73:C8:57:A2:20:42:EF:D0:C4:20:DA:7C:B3:F4:35:42:E0:86
Authority key identifier: 88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29
Certificate issuer:       /CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729
Certificate serial:       0369
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
Manifest number:          0362
Signing time:             Tue 09 Sep 2025 01:00:59 +0000
Manifest this update:     Tue 09 Sep 2025 01:00:59 +0000
Manifest next update:     Tue 16 Sep 2025 01:00:59 +0000
Files and hashes:         1: iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl (hash: MIsVtDund0f5U31PPQP5ON0zWbTD5KAHztOM3tA9Hag=)
                          2: 7FA7FFD6D54F11EF88D65E53C4F9AE02.roa (hash: BWjw8ZzgxeIsXktsSggwFqoGIGBV9RKmqBd6UmUawiw=)
                          3: 3DCC89FAC6CB11ECB185E43EC4F9AE02.roa (hash: w5wAGuBp2YZuw7r2gpx/dOhrAuPlBh9HGiqoIoNxrIk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl
                          rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 01:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 873 (0x369)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A35E, serialNumber=8899693E931350C555F2BF47B151DEF87342B729
        Validity
            Not Before: Sep  9 01:00:59 2025 GMT
            Not After : Sep 16 01:00:59 2025 GMT
        Subject: CN=68bf7c4b-d110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:33:2a:38:96:da:31:a2:d6:d7:7c:67:60:94:
                    21:9c:3a:d2:c2:fc:e7:20:4b:8d:15:ae:91:20:0a:
                    c6:51:e8:89:b2:83:a3:b5:99:12:ce:b3:c6:cd:2e:
                    4f:84:37:d2:2b:69:f0:e8:2e:6a:a4:61:35:73:58:
                    de:ac:c2:53:88:13:e5:e0:5f:3e:ec:55:dd:38:70:
                    1c:01:07:a4:b3:20:53:e5:76:29:99:15:9d:c4:8c:
                    ce:40:28:65:a4:03:67:ea:42:d8:29:88:45:f3:5c:
                    d4:37:a9:e2:32:c8:b8:58:9f:74:2b:e2:30:50:74:
                    48:5b:42:79:d8:17:67:34:d9:88:48:85:9b:8f:15:
                    15:ab:0e:84:c4:14:2b:0d:8c:69:d1:74:21:67:b4:
                    8c:1d:e6:63:ad:5e:b4:01:e3:98:a5:8b:c7:e8:8a:
                    38:6b:fc:0c:0f:7d:8e:92:cb:18:6a:0a:f0:57:c5:
                    73:ea:43:94:13:af:09:70:ef:58:19:bb:ed:f2:5d:
                    12:84:1f:44:ba:51:ce:4c:dc:45:cd:f6:e5:67:ef:
                    e2:1d:84:76:4d:9e:fc:9b:11:d9:a2:80:64:96:fa:
                    32:85:b1:a8:27:dd:fc:06:35:89:85:8f:03:25:ec:
                    c7:6e:51:5b:b8:12:e8:8e:5b:cf:1f:59:4f:8a:ef:
                    e4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8C:73:C8:57:A2:20:42:EF:D0:C4:20:DA:7C:B3:F4:35:42:E0:86
            X509v3 Authority Key Identifier:
                keyid:88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:87:21:e0:21:47:d5:69:7a:ab:f1:a8:4e:2f:59:46:46:d2:
         29:c5:9e:5c:7a:53:0d:6c:21:f2:55:09:84:3d:86:9c:95:79:
         a9:5c:dd:5a:77:b7:27:b6:cb:79:ca:74:b3:87:87:69:58:13:
         50:ab:04:ad:d5:c5:53:be:19:7c:95:83:0d:0e:46:91:46:ec:
         12:02:76:f2:dd:10:5d:95:93:f4:eb:ec:4c:e2:02:5d:b8:c0:
         c4:42:d7:c6:0f:9e:81:e1:4c:b1:f5:5e:71:ba:24:2e:28:1c:
         39:20:5d:22:4b:10:d8:85:af:95:a6:bd:69:95:8d:07:0c:b9:
         ca:d0:c9:74:9e:4f:c4:ff:1d:b7:e2:fe:e4:f6:90:b0:2b:2f:
         fb:a6:91:0e:f4:3f:23:64:d0:d3:63:94:f7:03:29:89:50:21:
         f2:16:8b:e3:fa:6b:78:18:17:f2:ab:3d:13:e0:18:8a:51:8a:
         c1:91:58:fd:a7:4a:cc:e2:0e:cd:cf:af:42:27:f2:0f:79:2d:
         0f:49:41:d9:2b:16:fc:de:4f:81:cf:fc:3f:cc:af:5f:1a:8d:
         75:ad:3d:a7:66:76:21:81:93:2d:4c:f1:43:a8:8d:f8:d5:84:
         38:da:db:c2:68:45:14:63:8d:ab:39:9b:30:8b:af:77:0b:1c:
         41:15:df:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:33:38 2025 by rpki-client