Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft
File:                     x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft (raw, json)
Hash identifier:          CsKg0fZIsaRul/S0ZkGwDP4DRk0OhsXbXNGtyWP8rpc=
Subject key identifier:   AA:51:E7:30:6C:F0:10:3E:F5:C2:ED:8C:06:73:F8:EB:66:42:48:D9
Authority key identifier: C7:AD:63:B1:47:E4:99:54:D6:57:51:EF:FC:62:73:F1:C7:70:52:CD
Certificate issuer:       /CN=A912434D/serialNumber=C7AD63B147E49954D65751EFFC6273F1C77052CD
Certificate serial:       16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x61jsUfkmVTWV1Hv_GJz8cdwUs0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft
Manifest number:          16
Signing time:             Mon 11 Aug 2025 08:16:34 +0000
Manifest this update:     Mon 11 Aug 2025 08:16:34 +0000
Manifest next update:     Mon 18 Aug 2025 08:16:34 +0000
Files and hashes:         1: x61jsUfkmVTWV1Hv_GJz8cdwUs0.crl (hash: Nnq3y7EvsBXOefAZ7CpZSiKez5oc/7Gzazf2o/YzYGY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.crl
                          rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x61jsUfkmVTWV1Hv_GJz8cdwUs0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 Aug 2025 08:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912434D, serialNumber=C7AD63B147E49954D65751EFFC6273F1C77052CD
        Validity
            Not Before: Aug 11 08:16:34 2025 GMT
            Not After : Aug 18 08:16:34 2025 GMT
        Subject: CN=6899a6e2-8837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ef:dd:aa:b3:7d:ae:85:33:32:3f:e9:07:f6:
                    d5:40:6e:9b:d1:58:1e:9f:91:1f:ca:89:29:ad:51:
                    cf:9d:db:50:9e:d8:53:ad:27:e3:ff:03:9f:b0:aa:
                    77:32:fa:e6:27:da:d3:1e:77:3e:b7:b8:4a:56:0d:
                    52:db:bd:ab:a1:73:64:70:d5:cb:b2:ab:bc:59:9b:
                    85:d1:c6:04:e5:04:bb:b7:9a:e2:1b:23:6d:f0:1a:
                    5f:e9:78:a2:4e:bd:5d:03:45:56:ce:5f:eb:d8:20:
                    62:ee:88:0e:7b:f8:22:e4:10:ce:d7:4c:8a:33:c0:
                    0a:cb:8d:83:1c:5c:32:ec:5e:31:22:7a:ba:de:81:
                    5d:86:30:f2:01:a9:d3:87:84:34:40:eb:2c:48:f5:
                    49:0b:40:c7:d3:01:69:26:44:24:ba:08:25:4a:88:
                    d4:27:88:82:0d:a0:00:bc:b2:64:9b:9a:fb:c8:de:
                    3d:ae:84:80:83:2b:be:88:d8:15:33:e2:58:d9:ed:
                    41:4d:39:06:28:5c:e3:a2:51:82:3e:8e:92:9d:8b:
                    6d:14:e0:9e:ac:10:cc:34:b7:2f:2d:b3:86:c7:ce:
                    c1:13:f3:ff:b6:ae:19:e6:1f:2e:76:6f:ba:cb:6f:
                    da:cb:cc:59:ab:65:be:21:7f:ce:2f:f8:85:8a:ff:
                    7c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:51:E7:30:6C:F0:10:3E:F5:C2:ED:8C:06:73:F8:EB:66:42:48:D9
            X509v3 Authority Key Identifier:
                keyid:C7:AD:63:B1:47:E4:99:54:D6:57:51:EF:FC:62:73:F1:C7:70:52:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x61jsUfkmVTWV1Hv_GJz8cdwUs0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d4:18:06:11:ba:7d:e4:e1:1c:f4:02:47:89:96:ff:71:9d:
         76:36:b8:6d:35:80:ad:8d:58:14:45:fc:c7:68:73:61:9d:52:
         0e:ae:09:a8:ce:e0:74:f9:e7:16:c7:11:68:a8:91:e0:33:05:
         68:18:22:ea:ea:31:22:66:89:e8:f2:c9:1a:25:3e:c6:5f:30:
         35:1c:42:bd:72:be:2d:db:98:98:d6:77:2c:d6:99:8b:39:41:
         8c:7a:71:1c:a5:5f:28:56:46:d4:25:e5:7d:14:dd:aa:cc:f5:
         46:58:f4:95:8a:bb:bb:11:e2:f2:b0:81:8b:26:5d:b7:0d:3f:
         f3:c8:4f:3e:68:91:ac:d8:89:3c:61:9f:65:d0:32:b0:a2:62:
         44:85:66:99:76:25:fb:fa:ce:20:82:1f:3a:8b:52:a4:af:55:
         8b:40:96:71:58:da:18:da:01:17:9e:a9:41:04:62:a6:f2:ad:
         8c:1d:19:32:ea:42:59:04:07:82:bd:8f:de:89:3b:0c:48:09:
         3e:83:64:14:92:b5:f0:46:75:c4:87:30:9c:a1:18:76:54:a3:
         7c:39:16:b5:bf:82:ff:55:53:1a:7f:37:a5:66:60:89:a6:ce:
         e4:a8:34:7c:9a:f7:f5:f4:04:d2:82:13:21:60:e7:39:50:d1:
         ac:ef:35:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:27:31 2025 by rpki-client