Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft
File:                     u2XjT0_eqStZoyVHozggimCJHgk.mft (raw, json)
Hash identifier:          coJKM7UkR3DDi+3Hd8UX6aTXP6EwPvzmvjVjixRoFuI=
Subject key identifier:   DE:11:EB:C6:50:34:B8:F8:08:FA:CC:E4:79:13:9B:ED:D8:50:3D:23
Authority key identifier: BB:65:E3:4F:4F:DE:A9:2B:59:A3:25:47:A3:38:20:8A:60:89:1E:09
Certificate issuer:       /CN=A917F224/serialNumber=BB65E34F4FDEA92B59A32547A338208A60891E09
Certificate serial:       0BEC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft
Manifest number:          0BE3
Signing time:             Wed 20 Aug 2025 18:55:46 +0000
Manifest this update:     Wed 20 Aug 2025 18:55:46 +0000
Manifest next update:     Wed 27 Aug 2025 18:55:46 +0000
Files and hashes:         1: u2XjT0_eqStZoyVHozggimCJHgk.crl (hash: 8S8zpVhiRHXRxKaSlBAsbXfg63550CXv07HxPxn4URA=)
                          2: A46E4EAC205911EAAB6ECF1FC4F9AE02.roa (hash: 6VuhUdY4wX4JtAdDLdZ6VRCxsSJ2dhl5mfVJFdysXwU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.crl
                          rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 18:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3052 (0xbec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F224, serialNumber=BB65E34F4FDEA92B59A32547A338208A60891E09
        Validity
            Not Before: Aug 20 18:55:46 2025 GMT
            Not After : Aug 27 18:55:46 2025 GMT
        Subject: CN=68a61a32-aae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c9:4f:23:6f:97:93:2d:b5:b1:a9:64:a1:50:
                    e9:08:d0:26:50:98:f3:42:45:5e:b6:dd:3f:0e:4a:
                    5f:ed:ad:c0:25:14:ff:12:1d:e3:2a:cb:4d:1f:a9:
                    3c:d5:12:d4:aa:9f:08:bd:cc:f0:77:64:32:a0:68:
                    5e:e3:f7:57:0d:23:a7:87:99:2a:43:fc:82:17:3c:
                    81:da:53:a4:9e:05:0c:29:ff:5a:fe:2d:aa:78:f4:
                    da:d2:ec:8f:3a:da:a4:a4:d0:fc:e2:68:61:e3:6f:
                    be:cf:f7:e6:e2:3a:9b:49:db:de:74:75:78:d6:c8:
                    cc:03:6f:76:33:d5:92:da:14:3a:af:fa:38:90:24:
                    5c:8e:90:ed:3b:aa:48:1b:9a:0b:d9:15:d8:8f:b5:
                    c5:d4:fa:f1:b4:44:48:65:fb:74:49:25:44:b7:fd:
                    ef:e5:0e:ab:c3:41:c2:87:2b:56:ba:d7:b2:12:64:
                    d5:35:11:90:9d:c5:2b:f4:62:e5:d6:8d:d2:0d:45:
                    85:fb:16:08:e3:1f:6e:68:0a:06:b9:64:1c:20:5b:
                    ec:d2:54:31:76:48:36:3c:66:8c:f4:d8:63:41:8c:
                    95:e6:5c:cb:f1:76:8f:b9:fa:e5:45:2c:1c:e9:19:
                    3a:a3:7d:35:d7:07:c5:c6:25:d2:8a:9d:1f:c1:2e:
                    0a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:11:EB:C6:50:34:B8:F8:08:FA:CC:E4:79:13:9B:ED:D8:50:3D:23
            X509v3 Authority Key Identifier:
                keyid:BB:65:E3:4F:4F:DE:A9:2B:59:A3:25:47:A3:38:20:8A:60:89:1E:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:29:c5:87:56:68:83:52:33:b9:e1:57:ac:a7:fa:b0:63:48:
         6b:3f:77:b7:31:55:b2:a2:f8:fb:b3:27:e4:7c:fe:94:3e:dc:
         e5:95:27:b7:0d:91:96:e6:b7:aa:12:fd:37:2c:f0:c1:0c:01:
         9f:6e:54:54:45:58:fb:92:d6:49:3b:af:55:53:90:fc:5e:17:
         8c:8c:7d:1a:06:1e:0a:fd:62:99:b8:0b:bf:65:4b:03:58:8b:
         da:3d:ab:98:8d:71:53:7c:8a:81:5a:f0:45:d7:c1:da:4f:7f:
         9c:63:49:b8:69:e4:12:cd:72:e1:51:82:1e:43:d6:20:08:a8:
         ff:b5:15:0f:1b:4a:68:43:cd:9d:ff:25:84:d0:d7:56:90:7a:
         d4:4b:a4:84:7f:61:a2:23:68:06:92:e0:0e:90:5a:3e:fb:de:
         36:d4:6a:20:c2:2f:5e:89:62:aa:ec:4b:f3:15:eb:01:87:70:
         c9:ec:3e:a9:50:0a:e9:46:1b:8e:68:0a:04:42:d2:7c:e8:0c:
         b5:8a:78:58:95:91:08:ec:3c:a3:f6:08:08:0e:6b:76:c3:5d:
         7b:04:58:11:b3:6f:25:5a:b4:ad:e1:de:95:ac:7c:24:8e:e6:
         f4:cb:93:fd:b7:b3:33:30:9d:97:d5:9b:17:ea:7f:a2:05:13:
         25:0a:4e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:35:14 2025 by rpki-client