Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
File:                     4jfSzTuh8bknVF8kSZKHKtCvwwU.mft (raw, json)
Hash identifier:          rNFaWAUkFmQTFdWj2dU0aeHeH6DAoPSEP+Yyl+f6r/Q=
Subject key identifier:   08:8A:10:8A:3B:2D:5E:45:34:7A:8C:8F:A2:22:E9:25:4A:A0:ED:75
Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05
Certificate issuer:       /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305
Certificate serial:       0911
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
Manifest number:          08F8
Signing time:             Sun 10 Aug 2025 20:24:13 +0000
Manifest this update:     Sun 10 Aug 2025 20:24:13 +0000
Manifest next update:     Sun 17 Aug 2025 20:24:13 +0000
Files and hashes:         1: 4jfSzTuh8bknVF8kSZKHKtCvwwU.crl (hash: kjn460VWWOGKArp+3XPDs11Knu+cf7WBQbAVDfZmjPc=)
                          2: 4C5CCE6EB46A11EAB5A01176C4F9AE02.roa (hash: YmROt2RnH3UdNIAXBylk68JRdbwoGmgzkhxTYT8yZZA=)
                          3: 9FCAD654781E11EB808A544BC4F9AE02.roa (hash: jI9GJ3mUj7/g+UDfOOrVVqKbgOohmwcRp94iSUpENxA=)
                          4: 4B3A4250B46A11EAB5A01176C4F9AE02.roa (hash: 65R5M+eBFk+Sri4/ilXTe6yj4G3UYq+q394nSZKR7qQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl
                          rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2321 (0x911)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912512F, serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305
        Validity
            Not Before: Aug 10 20:24:13 2025 GMT
            Not After : Aug 17 20:24:13 2025 GMT
        Subject: CN=6898ffed-014e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:34:ce:d8:45:0b:42:59:ef:6c:cd:80:e0:f6:
                    eb:96:2f:2b:78:d9:6b:16:ee:02:08:aa:1d:0d:76:
                    f5:7e:eb:a2:cb:63:44:e2:14:70:e1:a6:36:3c:4a:
                    e7:75:eb:c0:00:30:dd:b1:18:a6:09:05:c5:b2:97:
                    fe:6a:09:0e:04:ca:0e:62:3b:d1:fc:53:24:3b:67:
                    c2:b9:14:0d:6a:1b:09:13:84:ed:5c:c1:cf:5d:f9:
                    e4:4e:77:b1:00:53:11:37:68:ea:39:88:b4:b3:ec:
                    13:47:59:b3:47:1a:21:e7:82:ca:ed:ed:c4:de:02:
                    98:cb:7f:77:37:b8:37:88:b7:6c:0e:db:16:bb:fa:
                    ae:6c:af:2d:0e:18:6b:65:28:cb:b7:23:b2:0c:72:
                    b9:7a:52:b7:3e:a3:b7:ca:33:93:70:02:c1:af:1a:
                    36:66:1f:e6:f2:f1:9e:02:96:84:ef:04:bf:c8:39:
                    6a:43:a1:00:d0:d0:29:2b:50:48:60:11:f7:00:a7:
                    b6:1a:eb:b7:3e:74:a8:b2:7c:cb:35:e2:f2:6c:57:
                    57:e6:71:15:24:88:83:ae:f6:7a:8e:9f:15:d7:eb:
                    0c:80:d2:84:d8:af:ae:c3:99:a9:99:b2:1f:9f:72:
                    08:90:51:74:b4:24:60:ab:3f:22:27:b4:3e:f6:d6:
                    c4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8A:10:8A:3B:2D:5E:45:34:7A:8C:8F:A2:22:E9:25:4A:A0:ED:75
            X509v3 Authority Key Identifier:
                keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:4b:a2:a6:76:1c:11:e3:d1:c1:65:ab:52:ab:b0:11:c3:e9:
         cb:c5:2f:f9:a1:30:9e:a3:43:5d:b2:f7:75:a9:76:77:65:fd:
         74:17:db:1d:33:97:68:41:f0:13:1e:24:52:c5:5b:d3:95:8e:
         fb:2f:1d:4e:56:53:2b:61:8b:c6:2d:58:0f:9b:93:62:0b:24:
         97:93:7c:dd:5d:13:33:d3:6f:03:91:c7:6e:6b:0d:10:7f:1c:
         26:ea:12:84:f4:14:03:b8:45:10:18:6f:8c:c2:4e:a5:31:5e:
         ef:5c:f1:b8:84:6d:ba:bc:4c:56:91:51:98:23:17:6f:ef:d0:
         0d:69:b2:01:4d:d7:75:02:9f:d4:0e:43:a3:1b:3f:ce:9f:5c:
         b9:4b:a3:f0:ce:a8:a5:0f:53:4b:87:5e:fa:10:03:ec:b6:68:
         ba:0d:f3:4e:f7:b1:c9:da:07:eb:14:38:0a:8e:92:2b:02:6c:
         ae:e5:02:a8:2b:f6:d0:0b:09:93:d7:b3:8d:c2:c5:6f:41:9a:
         d1:72:c3:49:28:b7:bf:0f:e7:68:e4:0a:5e:97:e4:12:16:6c:
         76:ca:c1:93:30:d2:d6:11:31:3e:5e:45:0c:5c:76:87:ab:ba:
         5f:16:17:34:af:dc:10:1e:a2:44:bc:2e:a2:4b:b4:b5:57:4c:
         b0:b6:23:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:02:51 2025 by rpki-client