Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
File:                     mQaocNrdFPbUuobyzCweXkcN6LI.mft (raw, json)
Hash identifier:          4OhDh6VqZpG+BcglMEy1OAhClLNGOWyQjCRCwf1reeQ=
Subject key identifier:   42:11:56:36:E9:AD:D5:47:03:C8:C8:AC:1D:3A:7E:37:21:BC:07:97
Authority key identifier: 99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2
Certificate issuer:       /CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
Certificate serial:       01E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
Manifest number:          01D8
Signing time:             Tue 05 Aug 2025 03:20:21 +0000
Manifest this update:     Tue 05 Aug 2025 03:20:21 +0000
Manifest next update:     Tue 12 Aug 2025 03:20:21 +0000
Files and hashes:         1: mQaocNrdFPbUuobyzCweXkcN6LI.crl (hash: SV35RS00wXfHKZvoBYW+WsPa9GbYGLCmxRZx8m7uN8c=)
                          2: B24758AE772311EFA5510A63C4F9AE02.roa (hash: 7G0BMVUvyd16Cn1kPop9OQuW3GDQmIvZTooAvUo69iU=)
                          3: 62F0214E4E4F11EEB53AAA72C4F9AE02.roa (hash: nyG124tiVkImPGU3rqTUWRaCP3DJ/CIWqzndBgQMaZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl
                          rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 03:20:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 487 (0x1e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130416, serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
        Validity
            Not Before: Aug  5 03:20:21 2025 GMT
            Not After : Aug 12 03:20:21 2025 GMT
        Subject: CN=68917875-a836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:06:71:a6:28:ac:13:b8:64:6c:3c:d9:10:5a:
                    74:a6:b5:84:e2:57:63:c2:38:4b:53:6a:56:14:75:
                    a0:94:8a:b9:7a:83:09:f4:51:f7:a4:7b:6b:96:f1:
                    9d:85:bd:7b:37:ba:de:17:6d:63:ef:5e:8d:2f:de:
                    a9:e6:41:31:15:a7:81:40:b0:28:e7:c0:92:aa:5e:
                    a6:3b:58:2d:6e:ba:14:99:d7:16:de:c2:94:2c:10:
                    bf:0f:fd:de:c4:57:3b:fe:b7:8d:5f:f9:ba:3d:26:
                    6f:3d:36:4f:08:ca:47:ba:15:f7:84:56:4a:e2:71:
                    9e:a1:33:76:be:07:ac:18:cb:4e:51:3f:c1:37:72:
                    bc:01:a2:7c:a4:a8:b5:3c:29:1f:da:ba:bd:07:e6:
                    71:39:77:7d:29:0d:ab:c7:b0:e0:c1:fd:e0:39:fc:
                    97:5b:7a:11:fb:f4:2b:c3:79:8f:82:8f:ab:73:77:
                    29:61:17:d9:7f:50:86:87:9b:9a:56:d1:95:42:72:
                    2e:77:cb:f0:a7:b7:ee:a5:37:e3:16:56:8f:b7:a1:
                    81:55:30:5a:d6:d9:ec:f0:a6:bd:92:59:7f:97:38:
                    c8:83:66:ee:10:ba:86:8b:d6:ac:87:89:34:61:83:
                    5b:bc:c7:3e:2e:45:d8:9d:0e:7b:cf:a1:33:62:2b:
                    c2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:11:56:36:E9:AD:D5:47:03:C8:C8:AC:1D:3A:7E:37:21:BC:07:97
            X509v3 Authority Key Identifier:
                keyid:99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:db:20:fc:33:98:f3:04:3d:18:28:91:46:ee:19:ff:9a:e7:
         47:d6:05:f5:76:78:bd:97:c0:7b:ca:f3:e7:12:34:cb:56:e8:
         8f:a9:90:e3:83:f9:9f:1d:27:4d:fd:21:9c:7a:38:8a:6a:14:
         ee:3e:ef:7a:84:5c:a0:57:52:9c:b9:6a:0f:a5:82:da:39:5d:
         10:af:68:23:e8:04:a6:27:b4:31:ea:30:48:2a:b0:4e:26:b9:
         0c:de:24:a2:c3:ab:29:29:ce:86:7b:af:52:4f:b4:97:09:20:
         6e:3a:26:3a:c7:a4:94:73:0c:1b:2c:38:7b:82:0a:91:b8:55:
         78:0c:a4:53:4b:d2:8a:50:b3:31:72:77:6d:40:65:0a:22:8a:
         a6:1f:a6:e4:8a:65:d0:1f:de:a6:1f:9d:e1:df:6f:fc:9a:a1:
         1b:17:90:76:d3:7c:b3:e0:04:01:d6:b5:c6:af:41:d2:68:e5:
         cb:6d:aa:b5:1a:0f:39:93:26:36:c4:85:47:25:bf:ed:09:af:
         e1:4f:6a:45:3e:09:ca:d1:1d:1f:66:6b:56:78:1f:87:66:4f:
         cf:c0:bd:3c:71:61:ce:8a:fc:80:e8:19:77:e8:91:0c:9b:d3:
         cc:b7:00:b8:7b:2c:7d:b0:f7:70:6b:86:04:6e:52:70:54:f7:
         fc:6b:0f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:49:54 2025 by rpki-client