Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.mft
File:                     SKOukZPdEbs3NMcFR26Yw_94uEE.mft (raw, json)
Hash identifier:          ZG7LynLbVYE8flPh9uejPnEPNwlWV+vz1LO8UjT9luw=
Subject key identifier:   39:3E:92:EB:75:87:F7:7F:99:15:E2:FE:CC:E1:50:88:A6:12:A6:8D
Authority key identifier: 48:A3:AE:91:93:DD:11:BB:37:34:C7:05:47:6E:98:C3:FF:78:B8:41
Certificate issuer:       /CN=A916534C/serialNumber=48A3AE9193DD11BB3734C705476E98C3FF78B841
Certificate serial:       0806
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKOukZPdEbs3NMcFR26Yw_94uEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.mft
Manifest number:          07FE
Signing time:             Sun 24 Aug 2025 21:00:53 +0000
Manifest this update:     Sun 24 Aug 2025 21:00:52 +0000
Manifest next update:     Sun 31 Aug 2025 21:00:52 +0000
Files and hashes:         1: SKOukZPdEbs3NMcFR26Yw_94uEE.crl (hash: tUCVyr+boh7E5sSHFVZ5XIsvL77NHe4N4MKONcbNGMk=)
                          2: FB54EFD2F31711EABD181553C4F9AE02.roa (hash: bCPJBkn9emdc8QIWrm8jMUVZ7T/2TjesHwvqUFZpfEs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.crl
                          rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKOukZPdEbs3NMcFR26Yw_94uEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Aug 2025 19:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2054 (0x806)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916534C, serialNumber=48A3AE9193DD11BB3734C705476E98C3FF78B841
        Validity
            Not Before: Aug 24 21:00:52 2025 GMT
            Not After : Aug 31 21:00:52 2025 GMT
        Subject: CN=68ab7d84-c399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:33:05:a7:83:3f:fe:e9:4c:dd:2e:b9:01:fc:
                    40:19:e7:2d:27:41:51:6c:e3:cb:43:43:a7:f2:fa:
                    89:b7:ae:d4:9b:70:1b:f9:a9:d5:e3:50:a3:5b:25:
                    41:7d:8b:93:73:f3:38:c5:1e:e4:67:9c:7f:e2:43:
                    ee:ee:ea:fc:9c:2f:50:13:01:70:44:2b:35:45:43:
                    2d:fd:c7:e0:41:02:e7:32:68:82:b2:5d:16:ee:fd:
                    3d:66:c0:f3:63:9b:7b:f9:6f:5f:a7:45:4b:9d:2f:
                    b3:d2:43:48:15:da:db:82:af:99:d4:8c:ed:a7:c1:
                    92:3a:06:74:bd:d6:b7:ff:85:ba:a9:f0:cf:78:85:
                    cc:73:46:49:67:d7:a1:8e:62:a1:b6:10:12:ce:42:
                    06:36:f5:c7:3e:71:a0:12:ce:f9:b3:f6:23:e8:94:
                    52:7a:aa:2f:f9:a0:b9:43:86:14:85:43:a0:c8:b2:
                    59:d0:83:00:a0:58:44:4f:28:0d:2c:b3:e0:73:c3:
                    06:0b:aa:d1:c7:60:69:77:cd:f9:4a:b1:db:86:c6:
                    7f:a5:dc:44:20:ce:ce:e8:3c:ea:62:d9:90:3c:5f:
                    d1:85:ed:29:6a:43:07:b9:4e:85:b7:63:14:40:84:
                    a8:8f:a2:68:2d:74:30:99:ec:4b:fe:7d:4f:17:92:
                    94:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3E:92:EB:75:87:F7:7F:99:15:E2:FE:CC:E1:50:88:A6:12:A6:8D
            X509v3 Authority Key Identifier:
                keyid:48:A3:AE:91:93:DD:11:BB:37:34:C7:05:47:6E:98:C3:FF:78:B8:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SKOukZPdEbs3NMcFR26Yw_94uEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916534C/EFE25F04F30D11EA87577435C4F9AE02/SKOukZPdEbs3NMcFR26Yw_94uEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:b0:48:bf:8e:59:e9:46:b0:81:62:67:d3:17:db:b5:44:d2:
         64:75:9f:7d:0d:b7:78:b0:d8:b0:fd:e3:f9:78:a9:43:45:fe:
         75:58:b5:fa:89:09:00:7e:0c:15:3f:83:16:0d:84:fa:c9:a9:
         b5:7f:34:f2:81:b6:fe:da:3f:e1:07:df:3a:0e:df:bc:10:bf:
         9e:a5:25:3e:6b:28:e6:ab:7d:35:7e:ee:c8:c9:65:53:f9:ac:
         98:9d:b8:49:01:dd:28:1d:04:f5:33:f1:83:2e:c8:07:aa:60:
         11:35:c2:79:93:c0:f7:30:4b:ef:84:a7:6b:0e:dd:7e:37:5a:
         99:9a:a2:f3:92:8d:cf:41:6e:da:10:86:dd:c3:66:fb:04:a4:
         8a:37:58:12:4a:48:f7:d1:80:46:aa:4e:fc:1b:ac:ba:19:dd:
         dd:c4:68:f3:62:98:ce:13:3a:dd:94:44:2d:3b:6f:9c:dd:96:
         83:8c:30:6d:4d:3d:34:28:1b:4b:ec:86:4f:13:85:e9:6e:d1:
         e5:c8:11:c7:24:ad:6f:0f:a3:3e:75:b5:90:4e:eb:c9:d2:f8:
         a2:c7:38:22:fb:0a:83:e9:dc:30:8d:ab:5d:2f:e8:df:3d:4b:
         1b:50:de:f7:00:2f:d4:98:4c:a9:3b:a1:15:14:50:04:57:b4:
         9f:80:49:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 22:21:00 2025 by rpki-client