Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
File:                     d6E036eiOU7SRHU58T_kqNHgVsk.mft (raw, json)
Hash identifier:          mZNu3yDbar68hdES/I6X+8v8qlWUvjAdLRExhJikBsA=
Subject key identifier:   50:23:DF:53:B2:09:04:1C:FE:91:32:A4:41:3B:D4:E6:85:35:A5:8D
Authority key identifier: 77:A1:34:DF:A7:A2:39:4E:D2:44:75:39:F1:3F:E4:A8:D1:E0:56:C9
Certificate issuer:       /CN=A915A821/serialNumber=77A134DFA7A2394ED2447539F13FE4A8D1E056C9
Certificate serial:       0A82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
Manifest number:          0A7C
Signing time:             Sun 24 Aug 2025 19:36:00 +0000
Manifest this update:     Sun 24 Aug 2025 19:35:59 +0000
Manifest next update:     Sun 31 Aug 2025 19:35:59 +0000
Files and hashes:         1: d6E036eiOU7SRHU58T_kqNHgVsk.crl (hash: xId+PrqOVOTLFPWoqszRRmiBBv1aswa03tA+DVQuMpE=)
                          2: 4B2AAC20660211EA83A76342C4F9AE02.roa (hash: VubdDr6jpnctpYE2M5QsaGv87QGAE8y0LNTwoL81fa8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.crl
                          rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Aug 2025 19:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2690 (0xa82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A821, serialNumber=77A134DFA7A2394ED2447539F13FE4A8D1E056C9
        Validity
            Not Before: Aug 24 19:35:59 2025 GMT
            Not After : Aug 31 19:35:59 2025 GMT
        Subject: CN=68ab699f-5be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:18:6c:50:b3:55:07:9c:5c:af:51:74:57:a3:
                    fe:d0:7e:5f:a0:b1:18:7a:5d:56:64:b4:dc:b8:d1:
                    78:f6:83:94:0e:3f:8a:c5:03:8a:20:12:ad:bd:f1:
                    63:38:c2:6d:f5:55:34:b3:b6:1c:e1:30:aa:62:fe:
                    6b:58:b8:5c:b3:0e:9b:2d:b4:cb:56:56:d0:ab:12:
                    16:da:de:10:bf:1a:48:8d:1b:c9:cb:dc:44:b1:87:
                    ec:90:9a:06:c3:ed:17:1d:69:ef:0b:32:3b:04:c9:
                    16:ba:aa:56:93:65:e8:a7:69:75:68:03:43:0c:54:
                    c3:5c:89:f1:75:c9:ef:a1:ce:5b:8e:a7:fd:5f:39:
                    7b:06:e1:77:5e:6b:39:e3:b0:98:dc:95:01:e8:55:
                    fc:83:ed:12:28:6c:b0:5c:a8:75:92:f6:a7:e6:f4:
                    12:85:ab:1c:c7:ee:e2:dd:f0:9a:63:17:8e:9a:78:
                    1f:bc:10:1d:9a:ed:45:1e:d2:3c:6f:43:58:b4:d4:
                    a2:59:17:eb:9d:48:a5:63:cc:b2:65:71:8c:a5:42:
                    7c:c5:04:4f:8c:99:3d:1e:8d:23:0d:5a:56:ec:4b:
                    31:a0:73:4d:92:0b:10:fd:ca:cd:45:cd:74:6e:4f:
                    2e:c9:8f:63:08:b3:e8:bc:50:74:8c:2a:2b:ba:37:
                    cd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:23:DF:53:B2:09:04:1C:FE:91:32:A4:41:3B:D4:E6:85:35:A5:8D
            X509v3 Authority Key Identifier:
                keyid:77:A1:34:DF:A7:A2:39:4E:D2:44:75:39:F1:3F:E4:A8:D1:E0:56:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:28:4c:f3:38:ba:40:79:62:37:51:f9:91:f4:4d:ba:eb:87:
         ee:38:06:d3:72:8b:ad:25:20:db:5a:84:83:fd:20:65:e1:d2:
         b5:5f:28:7b:46:3e:a5:1e:cf:e7:4b:ff:1f:79:e0:96:2f:f2:
         c1:84:ca:58:ab:88:1d:82:53:4a:36:9a:34:39:d8:67:fe:f1:
         90:6f:1a:07:79:2d:90:34:c7:4c:26:ed:c0:e0:fe:af:5c:92:
         11:b0:48:f3:b1:e9:2f:93:c1:4b:b9:9e:5a:96:67:db:ce:81:
         5a:2d:08:55:11:7a:1e:f4:8f:37:b2:77:2d:42:9a:53:66:1a:
         7e:6c:92:3c:28:ff:47:50:11:12:cd:e7:82:73:1a:4c:19:a5:
         b6:ed:df:d0:4e:f8:76:c9:5f:72:c3:ba:07:03:71:ea:b4:38:
         23:60:d0:20:fa:6f:70:c2:ca:24:24:0f:c6:92:db:61:9c:39:
         5b:e7:30:7b:ef:f1:b0:fe:68:b4:22:1d:47:3b:f3:4f:41:fa:
         c7:06:b9:8f:27:21:c7:07:10:6e:82:42:f2:5b:ed:f6:33:4d:
         e5:a4:7c:9c:a6:79:9b:c5:54:2c:d6:fc:61:0a:fc:07:3c:ab:
         3e:e6:a5:b4:04:3f:c8:50:c2:e9:bc:0b:e1:7b:db:79:c8:cb:
         2d:8e:9b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 22:07:05 2025 by rpki-client