Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
File:                     cp4vnB2HwhRzUHjP0hxjjgcVe10.mft (raw, json)
Hash identifier:          uAMksA7X5kbhILgp9CVTzGtdBJ4g+/1ban9c+3+1MDE=
Subject key identifier:   F9:44:94:F7:F9:C2:45:8C:14:4B:10:70:B2:51:87:64:E8:92:12:48
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       0295
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
Manifest number:          0262
Signing time:             Fri 05 Sep 2025 02:15:18 +0000
Manifest this update:     Fri 05 Sep 2025 02:15:17 +0000
Manifest next update:     Fri 12 Sep 2025 02:15:17 +0000
Files and hashes:         1: cp4vnB2HwhRzUHjP0hxjjgcVe10.crl (hash: ksKKaNPeTo8YQXAaOpZIS7makRordkEmHL+9lOTQVnU=)
                          2: CD8401DE725011F0A3F05A4DC4F9AE02.roa (hash: 7OKGLN0AquslhR2wq6kbUot4euzlUMkruJOrwY6VWnc=)
                          3: 40257FE64D0E11F082837352C4F9AE02.roa (hash: HkcxWcOcJQ97ESWS97WCCLspE00RKugs+s6nj0HZv3Q=)
                          4: 0711ABAE36D311F091108A4EC4F9AE02.roa (hash: 597OuPOYgkyZPJzuTMHmEhUJoLCC1JeifLTzP6wE3yI=)
                          5: E88B9F0C778511F0A4E72535C4F9AE02.roa (hash: 3D9lBpJ7mteA7Bb3YQGDJry3PnMCpoVw+v32rQDtSvs=)
                          6: 2E2847223DB311EE9375493EC4F9AE02.roa (hash: fpl1QeLbfvQuhkR1/wuQiPy5mkE26myDKA7Pu9M6C4M=)
                          7: 0634745A36D311F091108A4EC4F9AE02.roa (hash: H4l27JSq8qMJJA6As00fhxpue9Mo/O0NE/Rm9knT++Q=)
                          8: 05E0CD8A56D311F0B46F9787C4F9AE02.roa (hash: GDiEG/pNTXLg5Vlv3aqbkShCJX0NKJUVFvGIXmMT/Uo=)
                          9: 853DCAEA341111F0A5CD2B20C4F9AE02.roa (hash: 3124udjGGKcS1/Wy1zJaOsZltJyh/OcbojpCAI+dINM=)
                          10: 056F9FEA36D311F091108A4EC4F9AE02.roa (hash: O2RZXjtjRUpqBA2nisDZS/Q57A0u3AEfmSz1wetsXTQ=)
                          11: 359EA23662B311F081881A48C4F9AE02.roa (hash: ml90CHJI6hM9cwuuAL9Y+OP72xTNZ1gM1O6bqm1RFPE=)
                          12: E7BB6878778511F0A4E72535C4F9AE02.roa (hash: q0dRuolqOgecUXb4uEgp631GRcsGQw3FBRIwFVQHVns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 02:15:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 661 (0x295)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: Sep  5 02:15:17 2025 GMT
            Not After : Sep 12 02:15:17 2025 GMT
        Subject: CN=68ba47b6-3fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:98:a8:d6:33:7e:27:9a:5f:92:52:f6:1f:0e:
                    59:9b:77:e3:d3:ce:0e:1f:49:58:83:5e:f3:d7:9d:
                    7f:68:84:5f:4c:c0:7b:9d:40:6e:3b:9a:e0:df:12:
                    13:95:5d:54:a8:d2:9a:85:97:32:9a:34:4d:70:32:
                    98:64:0e:ca:5c:95:01:c0:32:78:52:ac:10:f8:fa:
                    ec:86:11:d9:7c:74:8f:48:66:2f:61:70:b4:9b:e2:
                    ac:79:6e:0b:4f:ca:85:ae:19:94:2d:3c:5a:df:d4:
                    1f:d8:df:dd:85:16:99:78:52:6c:a1:e4:c5:3e:c3:
                    3b:0b:2e:9c:1f:ef:d9:82:6e:43:44:de:80:40:be:
                    96:6c:82:b9:2c:16:cb:9f:ee:55:c0:6e:f8:5e:25:
                    78:0a:c3:42:0d:cb:04:45:15:85:52:7a:e8:a1:49:
                    f9:1a:d7:41:04:30:cb:94:e1:a4:db:17:69:fe:53:
                    4a:ed:46:ea:49:cc:ba:af:98:69:8a:be:39:0a:44:
                    b4:7d:31:80:4e:a5:18:eb:a5:3b:eb:54:e3:3e:95:
                    29:cb:4f:06:c3:37:e2:3f:97:6b:7c:3e:bc:44:fa:
                    58:dc:45:3a:ed:e6:56:5c:6f:bf:1e:8f:3a:d0:61:
                    28:0b:a8:ea:eb:82:6c:28:6f:7d:01:ec:70:bd:ad:
                    5f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:44:94:F7:F9:C2:45:8C:14:4B:10:70:B2:51:87:64:E8:92:12:48
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:9a:84:c8:22:9c:8f:7d:3b:b0:79:5e:13:0e:4e:be:50:d0:
         03:35:e7:f3:63:8c:92:13:65:78:81:29:40:2a:5c:84:11:42:
         ce:e7:e3:9f:19:e1:92:cb:ae:36:eb:8f:cc:96:96:8a:b5:d7:
         30:24:5e:c2:7e:90:2f:38:8d:07:ed:6b:7d:d0:a5:19:89:20:
         03:a7:77:42:0c:cb:5e:bb:f8:b8:0f:a7:61:b4:0b:a9:07:3d:
         96:cd:7a:06:ad:ad:3b:7c:0c:b0:ba:c8:db:a0:32:7f:e4:1d:
         83:2b:2e:65:58:84:3f:26:7c:8f:2d:ff:2e:f1:29:4b:95:4f:
         0d:25:dc:36:dc:ab:9a:3a:27:60:2c:25:84:1c:cb:06:a3:c6:
         ab:62:76:11:8f:c0:d9:91:a8:e2:c9:e8:42:fc:73:ab:b6:61:
         91:d2:c5:1a:e1:50:9c:79:71:a8:6c:2b:0c:25:c1:15:ed:ff:
         9b:ac:a4:57:9d:b1:e2:f8:b0:27:c0:6a:3c:a7:9f:98:7c:2f:
         8d:62:df:86:d7:b8:df:38:17:f3:ce:12:45:dc:9f:c6:b7:66:
         0f:a0:10:49:5f:fd:33:c9:71:e1:c3:c0:75:53:97:49:e7:72:
         d1:2b:85:e3:10:1e:35:6c:a3:96:fd:42:c5:1c:38:47:e3:bb:
         8e:12:0c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 11:32:28 2025 by rpki-client