Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft
File:                     r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft (raw, json)
Hash identifier:          YUI9yIs8xzBClaUli5DUkUgYY11I7JbItp4nt28MkNM=
Subject key identifier:   C7:4D:5C:A9:B0:A5:90:41:12:13:63:A2:F3:BC:B2:3A:28:9B:27:85
Authority key identifier: AF:85:78:8B:8C:52:D1:28:D5:34:0A:75:09:5B:8F:0F:11:77:9C:48
Certificate issuer:       /CN=A919F53A/serialNumber=AF85788B8C52D128D5340A75095B8F0F11779C48
Certificate serial:       0770
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft
Manifest number:          076B
Signing time:             Thu 18 Sep 2025 21:51:57 +0000
Manifest this update:     Thu 18 Sep 2025 21:51:57 +0000
Manifest next update:     Thu 25 Sep 2025 21:51:57 +0000
Files and hashes:         1: r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl (hash: bVpFKKg6ahuUOiVDUZr0WntJ2acPosG8sl/NUjTbfgg=)
                          2: 72BCBB042FC211EBB8550B0AC4F9AE02.roa (hash: kntkOaZrAaOx4SVIiImPb0s+dVekp3sawuWhb73K14Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl
                          rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 21:51:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1904 (0x770)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F53A, serialNumber=AF85788B8C52D128D5340A75095B8F0F11779C48
        Validity
            Not Before: Sep 18 21:51:57 2025 GMT
            Not After : Sep 25 21:51:57 2025 GMT
        Subject: CN=68cc7efd-2a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:20:f7:ce:d6:62:7a:a0:59:c1:bf:18:f5:41:
                    cc:62:46:d0:af:45:dd:67:87:84:ea:ec:a2:54:7a:
                    22:84:54:3c:f0:96:4a:17:6c:a5:ac:07:57:23:86:
                    f6:08:13:93:72:58:ff:4e:93:ba:fa:41:9f:ad:54:
                    dd:b5:65:10:6e:cc:90:bf:6f:2f:e6:e3:e5:ab:c9:
                    0b:73:63:25:e8:dc:8f:1f:13:cb:b0:bf:cd:ee:f2:
                    09:3d:ef:6c:87:cc:1a:b5:8b:cc:5c:03:b3:e1:04:
                    3d:28:11:03:1f:a7:bf:6e:e5:17:12:b2:26:1f:1a:
                    d4:56:3e:f4:bc:93:f8:11:28:ec:7b:5a:e3:19:ca:
                    ee:84:00:0e:2a:e0:33:fd:d4:14:d9:93:59:94:55:
                    30:fe:6a:e3:82:1f:ac:4d:4e:09:a2:61:eb:c4:bf:
                    27:bb:0e:fd:19:51:ba:28:32:cb:99:ed:e5:f6:3c:
                    02:fd:7f:db:71:69:64:3d:24:b5:0c:01:b4:90:9e:
                    5d:0b:ee:59:bf:9f:c4:9c:1d:e9:1e:3f:97:6a:ae:
                    e5:88:fd:4b:c5:6a:f2:ef:6d:e3:f8:64:9d:d0:35:
                    e7:d9:23:ed:7b:e1:fd:62:20:97:6a:15:0c:ee:bc:
                    fc:70:1f:52:7b:c8:98:d5:0e:d1:0d:c5:37:a8:a9:
                    0f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:4D:5C:A9:B0:A5:90:41:12:13:63:A2:F3:BC:B2:3A:28:9B:27:85
            X509v3 Authority Key Identifier:
                keyid:AF:85:78:8B:8C:52:D1:28:D5:34:0A:75:09:5B:8F:0F:11:77:9C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:0a:e6:fa:ea:2d:3b:ed:f0:75:c6:bb:68:a9:c0:df:1c:51:
         c8:fb:39:44:95:4c:f3:9c:8a:16:72:06:8a:a4:b9:b6:d8:fe:
         12:d2:a7:4e:d5:77:05:28:b8:11:e1:62:cf:28:30:30:82:e0:
         c7:bc:7c:4a:0f:84:f3:ac:17:6a:45:68:11:58:6e:7a:2d:cd:
         9e:ab:ee:45:e3:a5:08:0b:18:73:59:c9:48:1c:31:11:cc:62:
         54:a9:00:9a:5b:1d:34:18:b2:6f:70:37:94:57:34:d5:93:f6:
         1f:66:cf:a8:45:00:c3:12:b7:1a:a0:ee:d0:45:d2:f2:3f:79:
         28:a0:3d:0e:7e:0f:56:fe:67:af:2e:32:46:e0:e1:20:7d:4f:
         6f:9c:bc:7a:fe:70:63:5b:9d:f3:6d:f3:6a:fe:81:64:3a:9a:
         7a:51:17:b5:c8:64:6a:ee:c5:9c:da:62:a8:4c:ec:cb:46:b9:
         cb:44:41:df:74:17:69:d3:9d:65:ad:ba:9d:f9:7d:80:45:41:
         7e:d2:b3:88:14:33:00:e1:4b:c2:d0:21:21:0d:ef:cd:bb:95:
         44:d7:18:c6:71:f8:ca:b6:de:01:66:57:dc:dd:bf:d7:93:e6:
         a9:63:93:aa:7c:b2:06:46:78:2f:c0:20:a6:50:42:6d:b1:43:
         46:20:58:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 18:19:35 2025 by rpki-client