Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
File:                     -lmybsZZeADDV53XBz-ktoWnwtI.mft (raw, json)
Hash identifier:          DxS2kM10qAqip9yielzX0cQpE0XIBLD1sepmolHXsoQ=
Subject key identifier:   8A:9B:CC:E4:37:9B:7F:6D:8A:88:81:E5:1E:CC:78:F6:01:A4:1F:18
Authority key identifier: FA:59:B2:6E:C6:59:78:00:C3:57:9D:D7:07:3F:A4:B6:85:A7:C2:D2
Certificate issuer:       /CN=A9131B38/serialNumber=FA59B26EC6597800C3579DD7073FA4B685A7C2D2
Certificate serial:       0415
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
Manifest number:          040F
Signing time:             Wed 13 Aug 2025 00:54:22 +0000
Manifest this update:     Wed 13 Aug 2025 00:54:21 +0000
Manifest next update:     Wed 20 Aug 2025 00:54:21 +0000
Files and hashes:         1: -lmybsZZeADDV53XBz-ktoWnwtI.crl (hash: 9DopZH7KASUjMNmH3O5vNPzKYp+cuCz6J0Xhyqo3Iww=)
                          2: 445C8236B69311EC9650A57CC4F9AE02.roa (hash: /iDRAphVdSgU2e36vGmGSufKHFaLvSp39p6b7uKMJro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.crl
                          rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 23:37:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1045 (0x415)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131B38, serialNumber=FA59B26EC6597800C3579DD7073FA4B685A7C2D2
        Validity
            Not Before: Aug 13 00:54:21 2025 GMT
            Not After : Aug 20 00:54:21 2025 GMT
        Subject: CN=689be23e-fd3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3f:c4:7c:27:bb:d9:f8:9a:64:18:9e:3e:cd:
                    1a:95:15:f0:96:3a:eb:11:f0:eb:53:7a:b8:3e:4b:
                    87:94:33:64:b8:c6:1a:44:9e:81:28:a8:2a:21:10:
                    ef:a2:02:14:24:88:1f:9d:53:91:87:da:31:28:d2:
                    d1:9d:5f:8f:d9:c1:49:ed:c2:91:21:78:ef:3b:86:
                    35:0b:9d:b2:19:d6:fb:d8:90:12:0a:71:b6:6d:6d:
                    62:eb:86:da:0d:31:04:6a:21:51:0c:49:fb:e2:00:
                    83:f4:31:ae:88:f8:c3:6a:5d:8b:12:04:d1:0c:fe:
                    28:7c:63:5b:74:a7:c2:80:a7:d8:cf:b4:de:f9:d5:
                    8a:1d:62:b3:a3:e0:b9:77:1d:6d:10:e0:93:a2:cd:
                    00:19:a5:8a:c7:4a:3c:39:9f:99:6c:37:64:7b:9f:
                    e7:8e:57:9d:c4:f1:8e:1b:3f:25:a2:aa:0d:a1:f0:
                    14:1e:b7:db:a1:1d:a1:40:b5:f7:40:3f:c7:b3:48:
                    90:7c:5e:89:f1:f3:8c:7f:84:4f:6c:4b:18:2c:9d:
                    8b:c1:28:8a:a6:26:69:d8:44:73:09:d6:e8:75:37:
                    c9:96:39:ca:8a:02:03:53:e1:0d:c3:7b:49:c5:fe:
                    07:6c:c7:14:ca:94:aa:55:2c:8a:cf:ab:f8:f4:c4:
                    f2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9B:CC:E4:37:9B:7F:6D:8A:88:81:E5:1E:CC:78:F6:01:A4:1F:18
            X509v3 Authority Key Identifier:
                keyid:FA:59:B2:6E:C6:59:78:00:C3:57:9D:D7:07:3F:A4:B6:85:A7:C2:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:58:18:ac:f1:72:7d:dc:55:d4:be:3a:5e:86:08:8f:08:36:
         38:f5:7e:6c:6d:75:90:60:8b:2c:8e:af:dd:f1:fd:28:ad:72:
         fd:9e:39:4f:97:48:97:ba:58:ba:98:60:46:9c:b2:2c:81:13:
         7e:bd:92:e4:27:2c:c5:60:55:d8:ba:16:e3:16:24:f8:a8:2c:
         06:63:23:52:5a:57:72:83:8c:d8:72:f9:b8:64:5b:34:3a:36:
         66:c1:66:7d:9a:2b:9b:51:36:02:4e:af:5c:e4:66:80:7f:76:
         62:a5:70:fa:3d:88:e0:c7:69:d0:08:f5:af:ae:63:f7:5c:8c:
         25:15:87:f4:db:f3:10:35:fe:d8:7e:66:2f:c7:2a:2f:80:e7:
         2a:40:bb:6d:fd:68:46:78:2d:33:95:ed:86:f0:87:58:07:5d:
         1e:6e:e3:ff:7f:29:8e:23:44:04:85:41:e8:e8:94:31:76:64:
         78:c1:a1:3e:bb:64:ce:ff:f7:20:10:9c:bd:4c:bd:43:c3:50:
         51:49:64:b8:cf:1d:08:85:30:6f:1a:50:31:54:8c:b8:65:37:
         66:d7:c0:96:2e:68:e6:91:30:6a:d3:09:1c:2e:4f:a2:96:76:
         a7:78:f3:43:37:f8:e4:ce:c3:31:3e:58:3e:19:30:b7:d5:0a:
         b5:95:90:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:15:23 2025 by rpki-client