Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft
File:                     eekj1QaVf9MN0m1ieTubQPj-iVY.mft (raw, json)
Hash identifier:          sm1KwHw/11N0onzjW2D1ySwi4yguXSaxm/w+h3VuJ5I=
Subject key identifier:   99:DE:B5:B9:8D:85:DB:9E:D0:31:FE:1F:99:AF:3D:02:38:93:2A:6A
Authority key identifier: 79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56
Certificate issuer:       /CN=A916C4A5/serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956
Certificate serial:       93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft
Manifest number:          92
Signing time:             Sat 23 Aug 2025 06:41:38 +0000
Manifest this update:     Sat 23 Aug 2025 06:41:38 +0000
Manifest next update:     Sat 30 Aug 2025 06:41:38 +0000
Files and hashes:         1: eekj1QaVf9MN0m1ieTubQPj-iVY.crl (hash: LMTU4uCU4ggvuZEm6ajT+hO2Cc6bH7KQQMvTcWweX24=)
                          2: FB82BBA0A24B11EFA8802F31C4F9AE02.roa (hash: FNLMkJsV83Bt0X7SmIILDAhrnYAAJNH2tKMHd6lYZGE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.crl
                          rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C4A5, serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956
        Validity
            Not Before: Aug 23 06:41:38 2025 GMT
            Not After : Aug 30 06:41:38 2025 GMT
        Subject: CN=68a962a2-139f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:34:4e:dd:0c:96:86:b2:32:56:45:f7:20:67:
                    6b:de:cb:9b:6b:62:3c:83:d8:ff:7b:1c:b7:e0:97:
                    54:b0:c5:ef:18:44:e4:de:20:90:2f:d8:09:ba:b6:
                    b7:0e:f7:17:b5:83:d6:d1:48:86:48:f9:e2:27:57:
                    ba:6d:95:4c:c5:e7:68:33:f6:a3:70:2c:eb:a3:05:
                    ee:b3:50:10:2f:39:1a:b8:a3:f5:38:30:a2:4b:e1:
                    77:1c:f6:95:0d:e4:2b:0a:1a:41:53:71:71:9e:18:
                    6c:22:a2:e2:02:8d:ba:bb:e6:fd:de:f6:37:fe:3f:
                    5c:25:c8:a8:aa:81:58:60:78:89:ff:88:4a:c4:e5:
                    5b:db:6b:23:23:5d:a1:86:73:f7:64:80:18:ca:c8:
                    c2:8c:b7:dc:8d:ba:59:d3:9c:fe:88:58:64:5c:b5:
                    f7:d0:71:2b:27:f6:3d:28:bb:b6:5b:8a:c2:f8:24:
                    85:6a:0c:3b:64:1e:22:d8:b1:63:74:89:19:37:0d:
                    03:57:16:ac:72:81:36:74:e1:8d:e1:66:4c:af:62:
                    dd:3d:6a:63:b1:49:12:38:ed:e2:84:97:57:76:23:
                    aa:7c:f3:9e:29:40:e4:59:4b:c6:44:a5:06:9a:77:
                    b9:1d:10:72:df:cf:a9:1a:32:bd:05:62:e0:80:7f:
                    91:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:DE:B5:B9:8D:85:DB:9E:D0:31:FE:1F:99:AF:3D:02:38:93:2A:6A
            X509v3 Authority Key Identifier:
                keyid:79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:2a:df:a3:71:28:41:d5:16:d2:0d:83:ce:c7:6b:8a:1d:7e:
         b5:38:6f:ab:2a:7c:58:ec:69:80:96:f4:93:09:be:b7:5a:fb:
         cc:60:2f:13:7b:9d:62:e3:da:cf:31:4e:4e:93:87:ec:34:9e:
         c2:8b:1d:e9:2d:b2:fa:47:d9:63:38:34:ec:14:d9:79:8d:1b:
         f7:cb:a0:4b:5e:2b:62:2c:d0:d5:09:7b:78:78:67:ff:13:ac:
         a4:28:1e:a4:3e:3c:ba:ac:86:58:cd:59:00:05:56:78:9a:28:
         37:c2:17:d7:eb:33:63:02:58:15:0b:a9:be:73:32:55:7d:48:
         12:76:35:37:33:de:37:06:7b:45:6b:2e:0f:c1:13:11:fd:aa:
         c0:6e:a8:56:04:58:a0:99:f7:f9:ff:2d:48:d6:d5:4f:8b:9e:
         b7:b1:d3:94:a0:45:e5:f1:74:17:10:00:cf:0f:32:3b:51:91:
         4f:72:79:62:13:c8:d6:fe:85:96:cd:a2:6e:af:00:d7:86:a0:
         60:af:81:55:f1:07:ac:f0:47:22:1d:35:b2:66:f1:78:2b:06:
         f9:c7:db:2c:f4:8f:3e:fd:28:79:0d:5e:cc:0a:fb:c0:0b:b1:
         09:9b:0a:92:b1:38:f0:46:1a:87:fa:a2:1b:0f:4e:b6:ab:33:
         b8:9e:60:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 22:09:17 2025 by rpki-client