Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft
File:                     m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft (raw, json)
Hash identifier:          pvgCbmuwhOx23+9bBn0kzo0Rz1H8FCifThPIs1HJwH4=
Subject key identifier:   5B:41:5B:B1:7F:87:99:F7:31:18:49:B4:26:41:12:17:85:16:3A:EE
Authority key identifier: 9B:A3:95:1C:CB:5D:83:A9:F3:DC:4A:75:BE:A0:1F:F5:AF:D7:1F:FF
Certificate issuer:       /CN=A9115854/serialNumber=9BA3951CCB5D83A9F3DC4A75BEA01FF5AFD71FFF
Certificate serial:       0E3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft
Manifest number:          0E2C
Signing time:             Sat 02 Aug 2025 17:58:15 +0000
Manifest this update:     Sat 02 Aug 2025 17:58:15 +0000
Manifest next update:     Sat 09 Aug 2025 17:58:15 +0000
Files and hashes:         1: m6OVHMtdg6nz3Ep1vqAf9a_XH_8.crl (hash: qNbLDhdhL05GFn6Gg3qqO4B2mBqDfTXo3PYS0hrr14w=)
                          2: 80C4CAC6AE5311E983E98A4FC4F9AE02.roa (hash: zo9mu3CIKHxn5JBCXZx0YbgatQ9CRvKR2Y0tN2tuG84=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.crl
                          rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 17:58:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3644 (0xe3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115854, serialNumber=9BA3951CCB5D83A9F3DC4A75BEA01FF5AFD71FFF
        Validity
            Not Before: Aug  2 17:58:15 2025 GMT
            Not After : Aug  9 17:58:15 2025 GMT
        Subject: CN=688e51b7-22b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8a:92:4c:6d:2c:8b:24:26:c3:9a:06:94:69:
                    a9:28:2c:d5:ee:80:72:d7:e4:f3:5d:ee:3b:9f:6a:
                    39:f7:85:3d:b8:61:35:84:d0:b3:6c:f8:a2:24:1c:
                    8b:bd:39:64:b9:56:06:f4:f0:5c:78:17:f7:47:29:
                    00:fe:cb:9d:0c:68:a7:2d:83:e0:ab:67:63:e4:41:
                    e6:e0:4e:27:ba:b4:c9:3a:35:a3:1e:a2:d0:41:06:
                    c1:7c:b2:de:bd:ec:28:ed:81:15:8f:4c:29:fa:76:
                    a5:a6:05:93:5b:82:af:db:f4:46:42:4b:f1:e8:eb:
                    2d:5f:a8:d7:f1:49:94:91:dd:18:97:bb:f6:ec:89:
                    5f:b9:23:96:e1:24:b9:db:99:9c:17:1f:64:1b:bb:
                    5e:1d:15:55:b2:76:65:73:98:e3:44:6a:3d:2d:c6:
                    7b:3d:6b:c9:97:96:45:f6:93:a8:e1:e8:ea:fe:79:
                    c4:aa:0c:d5:2f:45:17:2b:8f:c9:50:09:27:54:36:
                    b6:43:90:be:58:5b:18:1d:fc:f9:49:a3:9e:65:11:
                    c7:a4:3c:af:45:98:6a:ca:5f:b8:7f:10:6e:1e:35:
                    72:77:ab:15:89:a4:08:26:fb:54:b2:23:90:ab:50:
                    18:f7:0f:b8:47:52:c9:50:b2:2b:a5:e5:50:ea:b9:
                    d7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:41:5B:B1:7F:87:99:F7:31:18:49:B4:26:41:12:17:85:16:3A:EE
            X509v3 Authority Key Identifier:
                keyid:9B:A3:95:1C:CB:5D:83:A9:F3:DC:4A:75:BE:A0:1F:F5:AF:D7:1F:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:14:fa:9f:5a:10:25:0d:dd:3f:b2:19:18:2f:29:79:2f:22:
         94:fc:83:63:1b:c0:66:30:68:51:9b:49:3b:ef:3e:12:a7:41:
         67:de:dc:de:52:de:00:48:17:35:a6:51:e1:52:0f:d3:4d:be:
         db:64:53:c2:ef:5c:f1:45:12:b2:14:20:bf:91:c2:92:02:eb:
         b2:d7:39:16:cd:12:3a:3d:75:cd:1b:3b:61:6f:0d:29:c6:41:
         d5:4b:d2:17:7f:0a:07:eb:32:15:fa:98:33:fb:be:f6:6d:91:
         7e:1b:a2:da:9a:2e:92:32:c3:d4:90:96:b0:eb:f3:58:9f:1d:
         7c:3d:9e:7a:31:42:8b:4b:bd:91:8f:3b:b7:33:eb:98:ef:06:
         0e:58:4c:8a:15:46:59:0f:e8:58:c6:aa:c5:06:a1:0c:c1:50:
         70:40:51:fa:0f:1f:8f:f2:b2:0f:b8:50:0b:4b:66:11:4b:08:
         06:9d:c0:c8:af:7f:bb:73:75:0f:35:ee:3a:22:29:ec:a9:df:
         20:59:7b:61:13:da:c6:cd:23:6d:7a:bc:22:e6:30:a0:af:41:
         07:38:13:cb:92:62:c7:02:9f:24:01:68:06:16:b8:ca:e8:15:
         e3:6d:75:c7:1c:44:69:23:6a:4b:8c:ce:15:8a:bd:78:73:cd:
         57:30:5b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:02:46 2025 by rpki-client