Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
File:                     23zlI-hAt3_J4Zb1jxSXas5BVL4.mft (raw, json)
Hash identifier:          G1uXPK8DpPyrS+zJVHf3r4NdJd44bSU9xfI3YOBWRDQ=
Subject key identifier:   B7:AD:91:FC:74:C4:F7:83:1A:1A:92:C7:51:73:1F:85:DE:DE:15:8F
Authority key identifier: DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE
Certificate issuer:       /CN=A912542C/serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
Certificate serial:       0699
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
Manifest number:          067F
Signing time:             Sun 10 Aug 2025 22:33:22 +0000
Manifest this update:     Sun 10 Aug 2025 22:33:22 +0000
Manifest next update:     Sun 17 Aug 2025 22:33:22 +0000
Files and hashes:         1: 23zlI-hAt3_J4Zb1jxSXas5BVL4.crl (hash: BZwqMAmjlpORF/Kq8Np2q6W4VNgsbudObivF3QoxiUU=)
                          2: F0FFCBCCF9C911EDAF704E7FC4F9AE02.roa (hash: xD+NCFUusyV8948kjGogzh90vclALi1BI0w1G6upBJY=)
                          3: 1E9D1268B3E011ED98356A75C4F9AE02.roa (hash: q2NpAKCFs4OqUi3rj9uEiN/8qjO9vGuIBeFLXS5ulLQ=)
                          4: 36A82D708CAA11EB9ED48C70C4F9AE02.roa (hash: LYI+Uxituq3xp6IH8KDfFMmbgDovt1mhBIYkZG0TTig=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl
                          rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1689 (0x699)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912542C, serialNumber=DB7CE523E840B77FC9E196F58F14976ACE4154BE
        Validity
            Not Before: Aug 10 22:33:22 2025 GMT
            Not After : Aug 17 22:33:22 2025 GMT
        Subject: CN=68991e32-cf6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4a:63:81:84:85:f7:b5:b2:d1:94:36:34:8d:
                    d4:9f:a5:b7:b3:92:60:61:35:13:c8:9e:f4:fb:ba:
                    d7:4c:a3:f7:fe:bd:3f:8c:ee:1a:9e:16:41:b8:18:
                    de:17:dc:44:ac:bf:c3:08:60:c2:9b:39:9e:39:c6:
                    94:d7:46:0e:72:f8:dc:49:fd:b5:a3:2b:fe:b8:31:
                    f1:2b:4e:0a:bf:d2:03:12:6e:10:81:9b:c1:24:f9:
                    d8:28:a8:12:bc:37:f7:d7:c4:94:fa:40:55:70:00:
                    6e:10:b9:71:45:ff:c2:5b:3a:5d:df:49:c4:bc:75:
                    84:39:13:48:71:2b:95:37:41:83:a7:ea:cb:49:ce:
                    3f:89:7c:71:57:58:3d:4d:5a:88:4e:88:d0:6d:a9:
                    3a:6c:ab:96:90:2c:6a:93:59:2f:1b:bd:9e:6a:03:
                    6b:fe:46:5a:ef:30:1d:80:12:2c:ad:84:7c:c6:5b:
                    9f:15:6c:e8:ee:38:25:c6:e3:b7:56:f4:57:42:e1:
                    f5:1c:13:93:b7:bd:69:bc:8a:55:ec:b2:60:1e:8d:
                    d0:56:11:73:4f:57:ac:0d:08:df:c7:4f:8d:45:6d:
                    bb:1d:a5:5a:d1:9b:58:c8:39:1c:70:c9:5a:72:6a:
                    b4:db:a3:f2:cc:fd:44:8a:a6:f6:c6:2d:5e:0f:ab:
                    54:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AD:91:FC:74:C4:F7:83:1A:1A:92:C7:51:73:1F:85:DE:DE:15:8F
            X509v3 Authority Key Identifier:
                keyid:DB:7C:E5:23:E8:40:B7:7F:C9:E1:96:F5:8F:14:97:6A:CE:41:54:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23zlI-hAt3_J4Zb1jxSXas5BVL4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912542C/1B63466E8CA811EBA2BD0A6BC4F9AE02/23zlI-hAt3_J4Zb1jxSXas5BVL4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c7:69:5e:e8:41:6d:a0:f6:52:5e:03:bf:37:45:ba:7c:31:
         e6:5e:0a:93:94:bb:a7:a6:07:bd:2e:bc:e9:3e:d7:5a:80:e3:
         c4:f9:8f:88:83:cc:c9:4b:22:52:ad:ca:5a:da:99:55:16:31:
         be:0b:58:3c:12:38:49:b5:88:07:9d:08:f9:5d:47:fe:0d:dc:
         2b:a0:da:37:43:ef:13:bf:6c:9e:cb:1e:56:c7:75:03:9d:0d:
         79:9a:68:92:d2:da:5a:fc:84:59:6b:45:1e:35:95:a3:b3:cc:
         cd:2d:dd:2d:df:55:fa:31:43:cd:1f:b5:ed:3e:d9:fc:f6:29:
         64:57:60:22:e7:31:52:13:ab:8e:c5:0f:f3:1b:47:71:fb:2c:
         25:6b:85:40:7c:03:d1:ea:3c:96:60:92:e0:ad:52:01:bc:8b:
         2c:63:06:8e:8c:1c:18:86:e0:77:46:4c:e3:31:a1:9d:be:d7:
         df:b0:f9:c5:ac:ac:93:d5:d2:e6:2d:83:9b:1b:2e:d6:fe:49:
         ed:3a:49:6c:06:dd:65:b6:ff:1f:6a:4b:d8:4e:41:5b:57:50:
         10:c2:dd:35:7c:08:79:89:8e:0f:2d:c9:67:b0:da:40:05:84:
         11:04:40:06:1f:4d:cb:dc:9b:00:88:54:ba:b1:61:d9:db:f4:
         f7:0c:15:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:53:36 2025 by rpki-client