Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
File:                     Exdoo2swNG49vr6_h7hIG6q-Pus.mft (raw, json)
Hash identifier:          2Gdld+4HTWA/QmSALjKa5Ghpw4FxbW+J9LBDYi28XbY=
Subject key identifier:   B1:6B:FF:46:CF:8A:42:05:FB:43:7E:5B:A5:4F:D3:28:7F:A0:2A:6D
Authority key identifier: 13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB
Certificate issuer:       /CN=A915C281/serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB
Certificate serial:       353D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
Manifest number:          3506
Signing time:             Sun 24 Aug 2025 14:53:19 +0000
Manifest this update:     Sun 24 Aug 2025 14:53:18 +0000
Manifest next update:     Sun 31 Aug 2025 14:53:18 +0000
Files and hashes:         1: Exdoo2swNG49vr6_h7hIG6q-Pus.crl (hash: JzVSrGB6jouUATx7kVPAC+d3I6j/FHLnPt+CGQArklQ=)
                          2: 92078AAE0B5411EF957DA628C4F9AE02.roa (hash: MDqcYhBOLAd7Ve6t+D2323MIjWFyCpfTNAq4hOx2Ghw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl
                          rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Aug 2025 14:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13629 (0x353d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C281, serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB
        Validity
            Not Before: Aug 24 14:53:18 2025 GMT
            Not After : Aug 31 14:53:18 2025 GMT
        Subject: CN=68ab275e-4a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7d:a3:6d:f1:20:64:24:00:71:df:31:43:36:
                    7e:50:53:67:9b:b8:ec:0d:58:54:fc:f4:a8:52:af:
                    f1:21:bc:80:11:34:61:f2:80:d1:3f:8b:9f:98:01:
                    27:4e:f4:d9:14:37:c2:60:bc:00:a1:1c:9a:c4:0b:
                    4c:e3:aa:67:71:fc:58:75:b0:e0:92:88:ba:f6:f7:
                    42:1a:35:90:6d:0e:41:47:f0:9d:19:14:ca:73:d6:
                    51:bc:51:d4:6e:6b:2a:50:f1:e2:0a:98:27:f5:0f:
                    14:8d:bd:0a:a2:79:bd:bf:b5:f1:9b:ef:65:b2:2d:
                    56:d2:be:ff:38:12:b1:14:87:6a:21:6d:f9:ca:27:
                    2b:35:3f:96:24:5e:fa:be:2f:5d:c2:b1:5c:bc:51:
                    6c:6d:a2:8f:98:3c:a0:b2:67:da:9c:79:7a:b2:64:
                    dd:84:4f:d9:ff:8b:f7:17:77:1f:87:de:d4:2d:4e:
                    99:07:ba:e8:86:b7:13:57:f6:d3:7e:2b:3e:70:a2:
                    44:95:ec:ec:61:33:ce:4c:bd:3a:94:42:c0:76:e5:
                    1a:a4:00:4c:5f:f4:90:c9:1a:eb:a2:62:45:36:c2:
                    a0:d7:a0:ff:07:c9:b0:61:65:44:28:38:bd:ce:6f:
                    94:1f:6f:16:70:6d:63:29:87:18:67:93:26:60:4a:
                    c0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6B:FF:46:CF:8A:42:05:FB:43:7E:5B:A5:4F:D3:28:7F:A0:2A:6D
            X509v3 Authority Key Identifier:
                keyid:13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:9a:ce:8b:59:90:ea:7a:30:ba:13:07:5e:4d:a0:a7:66:49:
         d2:15:8f:a2:46:98:e6:43:e8:f2:b4:12:5b:74:3b:49:ac:cb:
         d8:36:42:49:f6:8b:d4:0d:5a:32:7b:55:9b:38:c5:f0:26:9f:
         05:8f:a9:7f:50:8a:66:82:4a:81:8b:6f:bf:92:5b:2d:3a:9d:
         02:f9:fa:69:84:de:53:57:fe:d0:e1:f9:2d:90:87:28:11:f4:
         57:98:c8:c9:24:12:fd:3d:02:34:d4:70:be:f7:02:06:7e:d7:
         ff:4e:74:60:ef:8c:df:e3:fc:a1:46:78:1c:f1:95:0e:63:d3:
         e7:49:a2:d0:63:41:70:18:77:1d:9a:67:bb:e1:71:cd:fe:fa:
         1d:e8:34:fb:9c:0d:dc:49:01:0b:3f:e8:08:05:b2:f3:28:94:
         ee:d9:de:99:5f:80:8a:ef:5c:91:0d:5f:aa:30:93:b3:0b:03:
         35:ed:87:ff:31:67:b3:9d:05:03:52:6a:e7:8f:2b:d5:c0:6f:
         ad:a7:e8:84:9b:06:0b:8d:fc:87:4c:5f:89:9a:08:9f:96:f8:
         cd:a2:a6:e6:eb:97:cc:12:aa:2b:73:67:e1:9d:60:d9:ce:b6:
         e9:18:68:e3:73:cc:2f:7b:f3:12:86:c2:19:11:e2:4f:d1:71:
         b8:54:39:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 21:44:30 2025 by rpki-client