Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.mft
File:                     j8P43lI68p2yShWQ_UCgRHWuCiU.mft (raw, json)
Hash identifier:          JjGbtiWqgkffmKIFF5i68vTbUNTHdrOSkDQpmSnDTe0=
Subject key identifier:   39:FA:F4:04:66:3F:E3:AD:A5:68:72:51:D2:97:9E:E6:D2:35:68:26
Authority key identifier: 8F:C3:F8:DE:52:3A:F2:9D:B2:4A:15:90:FD:40:A0:44:75:AE:0A:25
Certificate issuer:       /CN=A911AB93/serialNumber=8FC3F8DE523AF29DB24A1590FD40A04475AE0A25
Certificate serial:       1E6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8P43lI68p2yShWQ_UCgRHWuCiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.mft
Manifest number:          1F7F
Signing time:             Fri 08 Aug 2025 16:12:33 +0000
Manifest this update:     Fri 08 Aug 2025 16:12:32 +0000
Manifest next update:     Fri 15 Aug 2025 16:12:32 +0000
Files and hashes:         1: j8P43lI68p2yShWQ_UCgRHWuCiU.crl (hash: xJTQaoXQ7aoy5bKcGY5uOcq56nqJVDl7zzez+Lab0yk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.crl
                          rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8P43lI68p2yShWQ_UCgRHWuCiU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7786 (0x1e6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AB93, serialNumber=8FC3F8DE523AF29DB24A1590FD40A04475AE0A25
        Validity
            Not Before: Aug  8 16:12:32 2025 GMT
            Not After : Aug 15 16:12:32 2025 GMT
        Subject: CN=689621f0-7bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:89:b6:44:6d:83:3a:bc:1d:62:7b:e2:28:fa:
                    96:b2:63:5d:a6:a4:80:aa:c3:a0:e7:17:3b:ef:4c:
                    9e:cf:6e:bd:00:b9:a9:7b:1f:4e:dd:88:79:99:a7:
                    a8:67:01:00:70:67:98:82:77:d1:61:e0:62:a0:25:
                    79:f1:b2:7f:23:00:af:b2:02:66:8f:80:b9:f6:82:
                    55:39:b1:ff:36:04:72:9d:ce:62:3b:9c:96:8e:1c:
                    21:45:c7:0a:72:0a:8d:3d:1a:43:61:b9:dc:2b:7a:
                    c5:77:dd:ec:65:8c:9b:c6:a1:35:30:07:40:fd:b9:
                    c0:5f:af:0d:0d:45:d1:17:4a:fc:57:d2:19:fe:d8:
                    6b:74:94:b1:c0:54:75:69:ae:89:7c:c9:a8:3e:cf:
                    d3:08:13:8f:6f:e2:64:9c:35:db:c0:b9:dd:2b:b2:
                    1a:72:17:03:d2:8b:87:42:b9:fc:46:62:33:d0:97:
                    a8:1f:02:6e:4e:20:db:78:54:a1:76:8d:ce:45:e8:
                    86:36:2d:dc:2f:7c:ee:88:8f:ea:57:6d:95:a6:fc:
                    ea:78:80:09:29:07:ae:5a:8b:5d:c0:45:e6:cb:28:
                    30:1b:2d:cd:77:fb:df:0a:f4:16:6b:da:05:41:53:
                    a2:27:52:88:f1:8e:75:8e:7a:f5:ec:6d:7f:c2:e4:
                    88:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FA:F4:04:66:3F:E3:AD:A5:68:72:51:D2:97:9E:E6:D2:35:68:26
            X509v3 Authority Key Identifier:
                keyid:8F:C3:F8:DE:52:3A:F2:9D:B2:4A:15:90:FD:40:A0:44:75:AE:0A:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8P43lI68p2yShWQ_UCgRHWuCiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AB93/8D303946818B11E6BF1CB657C4F9AE02/j8P43lI68p2yShWQ_UCgRHWuCiU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:87:d3:b5:c1:7c:66:5c:98:c4:9f:11:2c:a3:33:17:1a:57:
         14:3e:ca:e6:4f:f9:09:49:11:2e:c2:71:ac:e1:f6:c6:cc:5f:
         90:0c:14:77:3e:05:54:64:15:29:59:b1:7a:57:5f:1d:d0:88:
         92:59:ab:1d:cc:cd:9d:6c:db:50:25:f2:11:0b:5c:86:a9:76:
         c2:7e:78:75:91:34:af:ae:61:44:16:7f:c9:ee:b3:a4:cb:0f:
         38:8b:8e:12:9f:ec:9e:74:58:38:a9:94:02:a7:d0:a8:98:11:
         a6:a0:aa:db:bf:c6:ef:59:7c:6f:17:c8:61:28:79:d6:f0:71:
         ca:a0:c3:03:4d:1a:f7:f6:55:74:2e:cf:0d:29:f1:8b:33:1b:
         f6:82:49:52:5e:6a:1e:6e:a0:8b:f4:01:4a:64:42:c0:54:46:
         31:20:66:16:fe:86:d1:b9:b4:7b:16:43:ec:b0:f1:f1:21:04:
         82:1b:40:d5:6a:71:7e:de:68:3a:6b:9b:2d:7e:06:66:fd:6f:
         f4:a4:c6:d5:25:20:bd:43:5a:78:01:85:ec:cc:17:d6:2d:38:
         6d:2b:a5:3b:7c:45:a4:c6:fd:cb:82:d6:14:f9:cc:55:22:1a:
         00:31:0e:23:e4:19:4b:d4:d7:42:03:f4:8e:6b:60:36:0e:e4:
         c2:0d:9b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:26:53 2025 by rpki-client