Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft
File:                     E5zB22udJLk7FJKKdRjQTrOyajo.mft (raw, json)
Hash identifier:          AZSbN6E3aGtGhotYGdaf+HdXptyLcdmrHe4klapnYSM=
Subject key identifier:   52:6A:A5:EE:30:93:3D:FF:83:F0:8F:FA:52:38:DF:E0:B7:78:E0:2B
Authority key identifier: 13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A
Certificate issuer:       /CN=A919DAF2/serialNumber=139CC1DB6B9D24B93B14928A7518D04EB3B26A3A
Certificate serial:       223C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft
Manifest number:          2200
Signing time:             Thu 04 Sep 2025 15:58:45 +0000
Manifest this update:     Thu 04 Sep 2025 15:58:44 +0000
Manifest next update:     Thu 11 Sep 2025 15:58:44 +0000
Files and hashes:         1: E5zB22udJLk7FJKKdRjQTrOyajo.crl (hash: tayiMUGBgPTzvIDcPbIm1lkNpHG5d2X127TXVsM9Rck=)
                          2: FF59EC70144911EFA2053B27C4F9AE02.roa (hash: 87Wd3ufHux4x6En79V3HJ0yy+yl6nx7Qh9e0Kc4SLtA=)
                          3: A20F01CCE1E511EEA0477018C4F9AE02.roa (hash: XEA5HBhsYH3LIGpBqjlOM3tEelRDYUoKK//5he1LRJg=)
                          4: 5AE16D9A386F11EFABF4E132C4F9AE02.roa (hash: 9Ncc5eO7lsxHhsxCWRYMxRGSAkh2VnH6ZKESuNAQzvA=)
                          5: C4F05AA6144911EF85E2DC26C4F9AE02.roa (hash: j3DVuY32luQDVa/vF1hOJNJXMyj5FRS3jyl06+nliBE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.crl
                          rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 15:58:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8764 (0x223c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DAF2, serialNumber=139CC1DB6B9D24B93B14928A7518D04EB3B26A3A
        Validity
            Not Before: Sep  4 15:58:44 2025 GMT
            Not After : Sep 11 15:58:44 2025 GMT
        Subject: CN=68b9b734-f8be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:41:b3:fc:50:0d:de:55:f6:c5:22:b1:20:0f:
                    5d:f3:da:e6:fb:b2:a8:ee:b2:c3:d0:4d:9f:6b:d3:
                    ef:21:ce:e5:3c:37:32:64:00:65:d3:31:7b:5d:ba:
                    72:7b:aa:94:b5:88:ac:97:1d:d7:45:27:47:75:c0:
                    d9:d4:d7:e0:1f:4d:c6:30:0a:1e:d7:bb:5a:31:b7:
                    61:6c:62:22:89:a5:9c:68:1d:dc:b7:d0:3c:aa:78:
                    95:39:cf:92:af:9a:49:d4:c4:64:b2:ef:22:72:6d:
                    4d:32:80:be:fd:2b:6e:2b:a8:24:1c:69:b8:4c:96:
                    55:35:96:f0:5c:4d:d5:f0:bf:ce:a0:2d:13:0f:f0:
                    fc:d3:fc:b0:9d:dc:22:4c:2b:8c:7f:71:da:21:ae:
                    65:46:16:e6:23:2c:97:e1:54:3c:41:b7:e6:28:c6:
                    43:76:cd:d3:d1:f9:04:c2:16:5e:12:1a:50:72:17:
                    e7:b1:6e:8b:34:5f:ee:3b:e8:4d:27:38:34:b3:22:
                    ff:a9:24:e7:6b:57:ca:04:5a:9e:4c:87:cc:71:97:
                    f1:cb:cf:22:bd:f1:b7:db:e4:92:fe:fb:6e:62:03:
                    98:b6:d8:1f:e5:61:3c:c7:dc:3c:7b:ae:de:79:50:
                    72:13:78:c1:d4:37:20:4f:40:84:ab:a3:05:f7:e9:
                    e2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6A:A5:EE:30:93:3D:FF:83:F0:8F:FA:52:38:DF:E0:B7:78:E0:2B
            X509v3 Authority Key Identifier:
                keyid:13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:03:c1:46:ce:80:9e:23:e1:25:83:3a:b0:56:9a:d2:a6:dd:
         b9:5f:a8:a2:f6:f8:26:7c:4e:6f:7c:d9:46:7b:c1:9e:b6:5a:
         94:1c:9e:45:49:59:1e:4d:ca:b2:c2:e7:54:e6:4f:f5:de:ab:
         03:68:1e:4e:1c:1d:e2:0a:c9:68:65:38:a2:2e:8d:8a:fa:f5:
         78:2c:0c:8d:25:1c:14:4d:41:37:ba:3c:e0:98:46:3f:7a:ee:
         51:d4:6c:52:77:b0:5b:6a:a7:05:d4:07:3f:6a:5b:72:9b:96:
         03:ed:aa:9c:07:68:41:81:08:a8:fd:a8:b3:c4:ba:4c:70:c7:
         04:aa:ba:0d:08:35:84:11:9c:08:0d:ce:ce:81:b0:6a:be:f8:
         5d:ee:3f:6f:70:61:b4:8a:dd:a8:cf:2c:79:63:24:ea:b3:2d:
         98:b2:9c:da:5b:0d:10:a8:9e:d2:d0:79:e0:71:50:9d:0c:17:
         1c:06:5a:f3:d5:3d:5b:c2:bc:96:e4:9c:6d:62:12:fa:f2:f3:
         74:ce:70:ab:41:88:87:09:fa:b4:3c:ff:ea:6d:25:4d:c8:e9:
         a8:49:e1:65:70:54:22:04:0c:ac:67:40:a4:83:83:46:ce:00:
         d3:b1:72:3d:9e:a5:36:05:5a:24:b2:c1:ba:ad:5f:b7:a9:73:
         d7:91:56:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:33:52 2025 by rpki-client