Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
File:                     pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft (raw, json)
Hash identifier:          lipsm7mjpkRLPPzZbDS6R8cquzMVqKLrW5uRRN0rHUI=
Subject key identifier:   6C:5A:A6:D0:AF:F9:F3:3A:02:EF:60:F5:BD:19:D3:8A:5F:92:1B:62
Authority key identifier: A5:17:41:DC:19:CB:93:90:40:26:76:A0:3A:1F:DA:EB:E0:E7:F2:BC
Certificate issuer:       /CN=A911DCFB/serialNumber=A51741DC19CB9390402676A03A1FDAEBE0E7F2BC
Certificate serial:       055D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
Manifest number:          0557
Signing time:             Wed 06 Aug 2025 23:52:14 +0000
Manifest this update:     Wed 06 Aug 2025 23:52:13 +0000
Manifest next update:     Wed 13 Aug 2025 23:52:13 +0000
Files and hashes:         1: pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl (hash: d2UVaT1OgJg3K69d6ArGN9M0rZBtbC7sRh6ZKK13JyY=)
                          2: 4CBECA5CF9C311EBBA064C70C4F9AE02.roa (hash: CnaozKo0w+oDNLtVLnsapD7Ti4dTXp4OsMG95HJSOiM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl
                          rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 23:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1373 (0x55d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DCFB, serialNumber=A51741DC19CB9390402676A03A1FDAEBE0E7F2BC
        Validity
            Not Before: Aug  6 23:52:13 2025 GMT
            Not After : Aug 13 23:52:13 2025 GMT
        Subject: CN=6893eaae-4ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:72:27:81:6f:f9:f5:20:35:c8:59:03:4e:0d:
                    ae:db:e8:67:24:8a:20:e2:a1:1e:61:9e:86:94:8e:
                    37:f7:b1:c7:a9:15:a8:5f:d1:92:46:1a:d5:47:e0:
                    ee:c3:dc:08:d9:73:b8:f7:fb:69:7a:d2:03:9f:7d:
                    a9:cb:20:01:7e:51:62:dc:1f:f9:b0:b0:e2:be:33:
                    5c:42:31:78:96:0d:42:b0:ed:0f:4f:b4:47:24:46:
                    46:f9:c3:3b:15:b3:a7:ef:cb:3a:14:c1:a7:ad:b0:
                    d2:ed:18:9d:d9:1d:db:28:a8:49:ad:90:e9:9e:03:
                    4d:33:42:a4:f9:93:51:7e:04:13:a5:32:b1:99:ed:
                    66:74:5f:f6:33:07:38:12:b0:9d:8e:80:90:f1:ca:
                    54:9d:47:58:b0:04:89:18:fc:0f:4e:4f:74:67:43:
                    62:3c:60:4f:94:fc:dd:d4:c0:57:3a:bf:49:b8:61:
                    a9:ac:3c:e5:2f:ee:29:6f:4a:0b:94:f1:a3:f4:f8:
                    b5:1b:fe:41:ee:ba:76:59:ef:d3:34:34:41:d8:15:
                    ca:c2:41:84:bc:43:db:b1:b6:2a:eb:c4:ee:b1:4f:
                    d5:c8:0b:76:e6:44:08:22:84:31:cc:c6:7e:a2:db:
                    60:ee:e3:98:57:80:5e:7f:f3:68:f3:bb:1b:27:fb:
                    e3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5A:A6:D0:AF:F9:F3:3A:02:EF:60:F5:BD:19:D3:8A:5F:92:1B:62
            X509v3 Authority Key Identifier:
                keyid:A5:17:41:DC:19:CB:93:90:40:26:76:A0:3A:1F:DA:EB:E0:E7:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pRdB3BnLk5BAJnagOh_a6-Dn8rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DCFB/AAEA0DC0F9BF11EB80245E6AC4F9AE02/pRdB3BnLk5BAJnagOh_a6-Dn8rw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:ba:9d:c7:05:c5:a6:66:85:d0:82:14:22:a4:94:8e:e3:65:
         cc:37:6e:d8:6a:f5:74:e7:cb:da:85:89:20:48:f5:92:0f:df:
         df:78:05:80:b3:31:c0:7c:b0:a2:b2:9f:c9:76:34:ee:03:53:
         68:6c:a7:7e:24:2e:21:9b:b3:f5:d3:f0:12:67:01:e1:09:73:
         ca:63:10:cc:f6:e5:33:49:7f:c1:ff:35:ad:b6:45:0a:a5:df:
         a7:1c:69:a8:44:1a:9c:2e:8c:ba:86:71:0f:a8:9e:07:f8:30:
         d6:04:35:fd:14:f0:5c:5a:66:2c:b6:ad:67:e6:05:ef:19:25:
         00:a2:cf:a8:3b:c7:9d:da:68:ba:68:b1:b8:86:3b:a0:75:3b:
         45:41:cf:a0:ca:5f:e7:ea:cd:f6:51:7a:1c:5d:a0:8b:c5:a9:
         53:51:0c:d9:32:0b:a3:81:83:61:19:33:74:b3:f4:93:bb:3a:
         a2:1a:a9:9b:1d:92:e6:4b:22:91:a3:b3:d2:63:49:ef:ce:13:
         04:3e:3b:02:c6:0f:13:1e:47:4a:60:44:26:77:75:68:03:8e:
         70:92:ed:44:0f:ef:93:20:4d:c7:00:c9:36:8a:6b:65:a0:46:
         13:d5:6f:6f:8b:97:6b:d4:0e:7b:56:9f:d0:f7:f8:c7:9a:b7:
         13:9e:84:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:39:36 2025 by rpki-client