Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft
File:                     b_pdsVnUCjoXLbx09cMrVVF5ea8.mft (raw, json)
Hash identifier:          4PHiBB/SfQNOTzbARNzZn1LSTaZ9Zn66ac0okIBiXV4=
Subject key identifier:   06:3A:7F:2A:7F:E8:31:EE:BE:86:57:6C:7A:3C:5E:EF:14:24:07:77
Authority key identifier: 6F:FA:5D:B1:59:D4:0A:3A:17:2D:BC:74:F5:C3:2B:55:51:79:79:AF
Certificate issuer:       /CN=A913C627/serialNumber=6FFA5DB159D40A3A172DBC74F5C32B55517979AF
Certificate serial:       0894
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft
Manifest number:          0877
Signing time:             Fri 08 Aug 2025 21:03:35 +0000
Manifest this update:     Fri 08 Aug 2025 21:03:35 +0000
Manifest next update:     Fri 15 Aug 2025 21:03:35 +0000
Files and hashes:         1: b_pdsVnUCjoXLbx09cMrVVF5ea8.crl (hash: iHLxd6m8JTMaruxaeNbSAImD4oZRowgA+tyclCGlWNw=)
                          2: FFB3EF94F53C11EEA5B4623BC4F9AE02.roa (hash: qCV1CGEKKAAFyjh2aY/pv/O3Ul0oy0qB9pbyOTWaQu4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.crl
                          rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2196 (0x894)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C627, serialNumber=6FFA5DB159D40A3A172DBC74F5C32B55517979AF
        Validity
            Not Before: Aug  8 21:03:35 2025 GMT
            Not After : Aug 15 21:03:35 2025 GMT
        Subject: CN=68966627-35c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:51:56:75:1b:b3:e3:97:17:36:84:90:6d:0c:
                    60:20:f6:64:9d:02:9a:f0:cd:88:ba:06:84:7c:50:
                    b5:3c:93:ed:7b:a8:93:3c:8d:f1:9d:b3:98:bf:23:
                    7e:74:4c:3b:09:8d:a0:2f:3f:91:d0:55:c5:26:d8:
                    3c:54:60:e8:db:26:dd:e0:87:48:3a:8d:ba:4c:95:
                    44:24:48:39:14:cb:37:07:8d:e7:55:db:2b:b7:d1:
                    55:6f:f3:1e:50:a1:be:4f:9f:1f:a3:ec:18:c3:d8:
                    32:eb:e5:70:ca:a2:7f:32:54:88:fc:52:09:5b:74:
                    f3:1e:f6:c5:62:19:54:9d:ac:05:1e:60:2b:8d:b7:
                    f7:e4:17:12:b1:97:49:e6:03:f8:c5:5d:82:19:49:
                    e9:75:3d:f0:ca:aa:02:b1:86:a3:7b:f0:ba:bd:c9:
                    d0:a1:2e:0b:ad:59:e8:b3:06:42:e5:2e:b3:70:af:
                    33:36:a3:3f:58:4d:ff:f8:cb:29:00:dd:8c:53:ad:
                    63:a3:4c:a1:03:44:9c:42:51:2c:e7:33:a4:55:db:
                    75:4c:a5:81:7d:fe:69:da:eb:cb:20:5c:40:29:c4:
                    84:13:38:08:ab:6f:9a:ed:4b:55:1a:65:48:f0:d1:
                    96:0d:5c:cd:21:0c:1e:e6:c1:f5:d5:c4:28:6a:b6:
                    ff:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3A:7F:2A:7F:E8:31:EE:BE:86:57:6C:7A:3C:5E:EF:14:24:07:77
            X509v3 Authority Key Identifier:
                keyid:6F:FA:5D:B1:59:D4:0A:3A:17:2D:BC:74:F5:C3:2B:55:51:79:79:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:8c:7f:05:95:bb:e1:7c:01:7e:71:8e:1d:ed:fa:a1:5c:31:
         b9:f5:45:8f:0a:5f:7b:50:7d:1a:b7:18:b3:dc:78:90:a8:3e:
         6b:31:a6:27:fc:fe:ae:55:a7:c4:81:b9:b1:8b:be:cf:38:67:
         d9:32:f2:cb:04:9c:e7:16:ac:f8:6c:0f:c2:bd:bf:27:83:1c:
         62:2c:b0:0f:c0:c6:b9:76:23:27:e1:ad:1e:5c:15:f1:83:82:
         c1:48:e4:a7:f3:58:1c:e8:79:c8:c0:53:84:cf:01:df:58:fa:
         fa:8a:2b:d0:45:40:61:4e:4a:fb:5c:e1:e7:3c:cc:0b:37:cd:
         69:d5:1e:55:24:9c:72:5f:67:87:da:96:4d:27:42:1d:8b:0e:
         c8:53:81:32:7c:03:af:67:7c:1a:55:24:49:9c:5c:94:a5:18:
         a9:68:ed:e4:12:dd:65:ee:e3:a3:b1:c0:b9:a0:98:0d:92:2b:
         7c:7e:64:66:1c:c5:a5:7f:7e:03:22:f6:ad:69:2b:15:d1:be:
         88:ff:42:df:41:53:17:c2:6b:e5:b6:09:ae:cc:b0:48:72:49:
         c3:36:10:67:1b:de:eb:28:b3:c8:e5:8c:d9:9d:80:66:c4:09:
         5a:1e:25:f8:37:54:3a:a2:e7:f9:0e:ca:d0:24:0c:ff:ce:e9:
         87:3b:c4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:42:51 2025 by rpki-client