Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
File:                     30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft (raw, json)
Hash identifier:          cZfrqr6imDHAO6onZBv4ldT1JLS8HtvYd6hLuQNqdDM=
Subject key identifier:   4D:F3:EF:32:11:76:17:15:A2:5B:D1:E2:57:D1:FC:DD:3B:CD:51:EE
Authority key identifier: DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93
Certificate issuer:       /CN=A9118479/serialNumber=DF4069F246E9FEA97B0ABE3A5FEC778E53931793
Certificate serial:       34AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
Manifest number:          34AE
Signing time:             Tue 12 Aug 2025 15:03:08 +0000
Manifest this update:     Tue 12 Aug 2025 15:03:07 +0000
Manifest next update:     Tue 19 Aug 2025 15:03:07 +0000
Files and hashes:         1: 30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl (hash: jU1vbT/eX2zI8FmtXDGAEUGnF7TbvFLka5kXW7j0mv4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl
                          rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 15:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13486 (0x34ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118479, serialNumber=DF4069F246E9FEA97B0ABE3A5FEC778E53931793
        Validity
            Not Before: Aug 12 15:03:07 2025 GMT
            Not After : Aug 19 15:03:07 2025 GMT
        Subject: CN=689b57ab-2358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:06:9d:43:d1:b2:9a:04:3a:bc:c5:f7:4b:74:
                    d9:01:2f:28:3c:37:f4:cf:6b:5f:c5:a0:f7:f3:ed:
                    2d:2f:2c:cb:e2:52:0f:8e:7c:86:72:65:c6:59:ab:
                    d1:54:a7:29:50:e8:36:e4:a9:87:ee:11:ff:f6:27:
                    06:0c:9d:5f:02:cc:dd:a9:f4:86:59:41:d1:d9:a3:
                    a1:0a:36:c5:c8:ea:6e:b9:fe:c1:ef:8d:9d:04:4d:
                    bb:c8:1c:55:30:a5:32:54:14:0f:bf:db:f5:b1:23:
                    e7:bc:1b:cf:ea:9e:83:b9:5c:a3:df:2f:a0:1c:ff:
                    94:15:43:a7:58:ec:ac:4b:bf:0f:b5:10:06:e7:77:
                    1a:51:f1:e6:fe:d4:60:fe:f4:d2:03:f1:4b:86:4d:
                    ae:f8:0c:d2:3e:d8:ba:17:51:08:07:58:32:08:f3:
                    2f:1a:1d:3d:29:de:03:ab:5f:a1:45:37:30:7e:62:
                    bc:74:48:90:9a:25:b6:10:fb:75:a2:f6:ec:22:f4:
                    0b:51:e2:d4:2c:6e:d0:73:76:0e:e2:16:78:a2:23:
                    c2:47:ca:8c:e8:84:93:98:4b:26:66:d6:09:b1:1c:
                    9b:81:57:3e:78:34:e9:d1:18:ef:ed:8f:12:90:60:
                    3f:b1:c2:5c:9f:ea:59:35:07:8f:56:cd:30:1c:02:
                    cb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F3:EF:32:11:76:17:15:A2:5B:D1:E2:57:D1:FC:DD:3B:CD:51:EE
            X509v3 Authority Key Identifier:
                keyid:DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:df:2e:f2:61:6a:99:88:25:cc:b3:b7:70:7f:24:3b:98:d2:
         90:9a:19:89:9c:9f:4d:fa:0a:c9:54:00:a4:cb:a3:a5:0f:92:
         5c:8b:fc:62:1a:8b:3f:8f:82:d3:53:51:b4:9b:3a:db:37:f2:
         1c:1c:80:c9:d8:16:c0:4e:86:7c:41:89:25:2b:35:57:02:fe:
         69:87:24:22:47:83:24:ca:cf:1f:f1:7d:d4:81:28:42:cf:5b:
         9e:79:0a:6c:98:ff:a9:49:79:43:47:45:e3:cf:5d:b5:f9:d1:
         5e:30:76:53:cc:ca:1c:ea:af:ae:b2:ef:de:02:1a:81:7c:5a:
         04:16:2e:43:5e:e8:59:dc:05:c3:66:74:aa:d2:79:35:8a:25:
         4a:3d:1a:ea:26:c6:49:e0:8f:fa:b1:80:bd:04:0d:ad:b2:24:
         40:6e:e2:72:22:a8:3f:03:e3:cb:ba:25:96:ee:54:f0:22:5d:
         a8:af:8b:c4:8c:1d:10:91:11:a8:ee:ef:97:95:97:6b:62:4b:
         09:f3:dc:ee:56:d2:2d:2e:d9:96:00:1c:58:23:9b:5a:b7:e9:
         8e:3e:79:da:ff:b3:e7:c8:73:8c:a2:37:c5:c3:d3:f6:b8:6e:
         3f:3e:c1:33:a5:a5:09:09:ee:9a:b6:08:2c:47:78:ea:74:f0:
         0c:b1:26:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:33:04 2025 by rpki-client