Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
File:                     CZJdtntKud9gBue9K8HY7cjMfhk.mft (raw, json)
Hash identifier:          k6taSWbEf0kwcLF7reNZl7tW0GoxXZldGr3S53Zj1l4=
Subject key identifier:   9B:4A:DC:B8:D4:27:9C:69:B0:61:7A:62:B6:F4:FA:DA:A6:50:C1:4B
Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19
Certificate issuer:       /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
Certificate serial:       0B52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
Manifest number:          0B41
Signing time:             Sat 06 Sep 2025 19:20:59 +0000
Manifest this update:     Sat 06 Sep 2025 19:20:59 +0000
Manifest next update:     Sat 13 Sep 2025 19:20:59 +0000
Files and hashes:         1: CZJdtntKud9gBue9K8HY7cjMfhk.crl (hash: aIR5dY5ln8Wto/ov1xdNVIdueY2CTdDSY4P9KkFphrA=)
                          2: 6808E6322F1C11EDA3E29B09C4F9AE02.roa (hash: vqIiC5denoz8Yiz6UodWvD7t0BBX+gY3rEG+abpRC2o=)
                          3: 6932258C2F1C11EDA3E29B09C4F9AE02.roa (hash: lSOlJAUUKdf/oxORuEf9BSblv8TlMMz6ihd34X0wQsM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl
                          rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 19:20:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2898 (0xb52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19
        Validity
            Not Before: Sep  6 19:20:59 2025 GMT
            Not After : Sep 13 19:20:59 2025 GMT
        Subject: CN=68bc899b-40a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:92:c7:58:2d:29:4c:78:86:6f:df:8f:55:38:
                    ac:d6:61:01:d0:7a:eb:53:c8:26:11:31:94:7c:4b:
                    5d:7f:32:7e:84:5b:aa:4e:88:1e:f5:5e:25:8c:c5:
                    b3:40:de:c7:33:ce:ee:39:53:79:78:a0:66:85:98:
                    c0:99:fb:64:fb:18:49:d8:fe:a8:37:aa:54:e8:13:
                    ed:7a:44:cd:ab:fd:7c:42:ae:88:79:cf:60:36:0b:
                    4c:ec:02:13:73:cc:ff:1e:fb:45:a3:6f:cd:9f:18:
                    5d:45:54:48:5e:ae:58:cd:83:c1:6f:5a:65:e5:fc:
                    89:76:e0:76:dc:74:95:b0:30:7a:37:dc:e4:d3:5c:
                    7f:ec:bc:4a:84:d6:3d:c7:cd:aa:6c:9c:f2:74:4a:
                    03:04:36:3f:49:b5:18:a3:81:95:4b:93:76:1e:4f:
                    5b:eb:9b:02:b2:9a:66:75:d3:49:4b:30:a4:09:fb:
                    ef:71:f2:be:76:0a:d3:b6:ab:8a:ab:68:cd:41:98:
                    e7:51:20:02:3a:e6:20:00:35:56:31:c6:fe:8c:a9:
                    ce:d5:e9:2b:dd:32:42:9c:4a:ef:d8:99:dd:f7:cf:
                    9f:33:4f:b5:88:11:a7:27:77:39:7b:f5:84:49:ec:
                    54:d7:28:c9:71:56:06:af:60:47:9b:26:69:d3:e6:
                    41:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4A:DC:B8:D4:27:9C:69:B0:61:7A:62:B6:F4:FA:DA:A6:50:C1:4B
            X509v3 Authority Key Identifier:
                keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:04:4c:c4:4c:2c:ce:94:ac:95:44:c9:9f:59:65:c8:4c:66:
         c1:25:59:bc:ee:e3:55:6f:11:65:41:c9:85:3d:fe:55:8b:30:
         22:54:8e:34:9a:04:a3:95:65:c9:7e:9e:63:45:4b:9c:35:0c:
         b8:f0:76:00:b7:2c:d4:76:02:26:67:15:05:a2:b7:89:0f:17:
         fa:97:55:fe:f2:1b:eb:1f:01:a2:4f:c8:58:0f:1f:23:c4:37:
         c0:a5:05:db:31:36:ff:c6:3c:2e:a3:22:f7:e5:72:2a:a0:f7:
         5f:6c:2f:32:e8:66:d0:88:3a:fa:19:6d:d5:81:e2:37:a4:ac:
         54:f5:38:f4:86:44:a8:42:dd:e3:c9:9d:62:2f:c0:36:f9:a8:
         74:90:70:90:6e:8b:43:be:46:de:6d:c5:00:29:13:0d:32:a1:
         f4:bf:5c:fa:6d:c3:bc:2b:48:93:c6:da:6e:34:d5:fd:ee:9d:
         31:23:9e:7b:3f:11:bc:42:6b:cd:7f:32:f4:fd:d9:e0:ec:4a:
         52:7a:cb:a5:6d:7f:77:98:c7:25:0c:d7:18:2f:a7:ce:bc:a5:
         db:b2:74:56:94:20:8a:02:9d:73:c7:b2:8c:36:86:d6:fa:2f:
         54:ea:59:98:fa:8f:3d:a7:21:37:35:87:a6:8d:82:84:7d:99:
         d5:62:33:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 16:58:13 2025 by rpki-client