Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
File:                     tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft (raw, json)
Hash identifier:          mesZkBleNEN1uBNALgrReAEZuzCdDuPauWDpOhUP7EE=
Subject key identifier:   95:73:6E:AD:88:8D:C0:C7:62:BE:1A:BE:23:4E:DB:E0:D4:54:83:CA
Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8
Certificate issuer:       /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
Certificate serial:       01D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
Manifest number:          01B8
Signing time:             Sun 07 Sep 2025 03:38:16 +0000
Manifest this update:     Sun 07 Sep 2025 03:38:16 +0000
Manifest next update:     Sun 14 Sep 2025 03:38:16 +0000
Files and hashes:         1: tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl (hash: A5dt/0R6xUcm6QyGvUEQfxvZPgSVWLmCzV37fYgtd0o=)
                          2: 3A9B86AED0C011EEB134543DC4F9AE02.roa (hash: GzY2mja93XMB8v0gofsGbfBeQdmx/oTQdYYP656riXY=)
                          3: 7203E112568C11EEA2DD9914C4F9AE02.roa (hash: JjxPWRQvVRqo2VJfQtmGf8Knnw8An8emF5M7TgePlIE=)
                          4: 6F4F0F4230AA11F0AD39210DC4F9AE02.roa (hash: YHLvsfLb9vn+sTC103ywcZHpPAhWQQaEGzE/L4SadW0=)
                          5: 221A3064480411F0A14D5A83C4F9AE02.roa (hash: sKzlG98yhfvA0cZ5DMZFsMl5sTXVOn8rst+hGNnB2OA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl
                          rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 03:38:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AE4D, serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
        Validity
            Not Before: Sep  7 03:38:16 2025 GMT
            Not After : Sep 14 03:38:16 2025 GMT
        Subject: CN=68bcfe28-2fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9d:18:bc:30:be:fe:bf:00:d1:5c:e5:75:84:
                    48:80:db:96:f8:3c:a3:47:20:e6:b1:9a:bf:b4:50:
                    55:20:88:9e:6e:ac:5a:03:a8:9a:35:18:5c:bf:79:
                    41:29:c4:f4:4e:37:72:b2:7a:a8:46:81:35:75:62:
                    16:4c:bc:55:c4:bc:a6:b4:b9:54:2f:7a:d3:a8:4f:
                    74:a6:d4:c3:3e:f9:69:1c:69:3a:dd:f4:40:28:0a:
                    7d:f5:60:a8:a8:0e:7a:0c:23:0d:14:f9:b3:a1:7c:
                    3f:7a:11:68:d0:da:f8:8e:03:82:89:c8:1e:26:28:
                    28:d3:af:f7:cc:f4:0c:0d:5a:dd:ae:e6:2c:cd:24:
                    74:fb:29:0c:9a:17:03:35:39:35:91:7e:5a:fa:82:
                    8d:4d:0f:52:bb:7d:19:64:b3:e3:9f:9c:a0:43:e9:
                    26:99:cd:5f:09:87:da:cb:88:4a:4e:a9:c4:af:00:
                    38:1a:0d:70:c1:bc:04:bb:37:1c:71:94:b0:ff:45:
                    cd:9f:05:12:80:d0:74:14:f7:ad:fd:7c:d4:32:d6:
                    9f:cf:40:ab:5d:66:e4:6e:7e:28:04:00:64:39:cf:
                    50:77:33:99:3e:77:76:ba:0a:33:17:4a:03:ea:e8:
                    10:b7:8c:cf:61:d2:f9:b2:75:c7:8c:41:a6:99:23:
                    06:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:73:6E:AD:88:8D:C0:C7:62:BE:1A:BE:23:4E:DB:E0:D4:54:83:CA
            X509v3 Authority Key Identifier:
                keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:3d:f2:27:4a:2d:f1:a5:5b:95:48:ce:01:02:92:2a:35:87:
         38:07:71:e9:0b:cc:b4:06:91:5e:f0:16:e6:82:2b:f1:a5:8d:
         5a:ae:74:41:5a:57:50:5d:d4:ba:a8:f7:5b:e6:f4:e9:54:d6:
         de:a7:b9:c6:e2:89:fc:cf:ab:30:50:bb:e9:72:47:11:ec:e0:
         03:91:7e:04:69:c3:19:83:e7:48:e6:86:1d:ed:04:e8:b3:de:
         d9:50:82:87:f0:ca:dc:ac:1b:2e:91:78:02:c4:70:33:c4:a5:
         a4:09:8d:88:d9:0c:0b:40:75:23:28:bf:39:e4:57:90:32:07:
         79:36:5e:a0:ae:18:5f:4f:1b:95:25:99:7d:10:5c:df:e6:f9:
         0f:12:b5:58:26:c8:3c:79:43:65:02:8d:f8:10:be:b7:6b:71:
         a3:70:1b:5f:b2:d1:4e:6e:ed:fa:bf:22:40:cb:40:04:c4:b2:
         ed:8b:a6:51:6f:78:12:4f:b5:5e:82:b2:82:58:f4:06:7d:7b:
         a2:0a:7d:36:5f:5f:99:fa:72:0f:6f:86:54:5a:49:e1:a1:2d:
         d3:f4:cf:99:ac:c3:ba:6d:25:79:fb:02:7b:1c:54:f9:23:07:
         f1:cc:91:54:87:cc:68:63:d7:6a:d3:15:e0:ed:f0:01:db:36:
         f8:67:c4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 03:58:14 2025 by rpki-client