Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft
File:                     0Iw24m8k-51RTztAqON6mgS1gCU.mft (raw, json)
Hash identifier:          f4MwfkkNVm5dHFGxAK8rWLuWoSZHsE28VQhTmqAhfYk=
Subject key identifier:   A2:75:D4:26:CF:7E:BD:31:B8:78:2D:B2:2C:C1:09:BD:45:46:D9:2A
Authority key identifier: D0:8C:36:E2:6F:24:FB:9D:51:4F:3B:40:A8:E3:7A:9A:04:B5:80:25
Certificate issuer:       /CN=A913E03C/serialNumber=D08C36E26F24FB9D514F3B40A8E37A9A04B58025
Certificate serial:       34D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Iw24m8k-51RTztAqON6mgS1gCU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft
Manifest number:          34D3
Signing time:             Sun 02 Nov 2025 14:56:09 +0000
Manifest this update:     Sun 02 Nov 2025 14:56:08 +0000
Manifest next update:     Sun 09 Nov 2025 14:56:08 +0000
Files and hashes:         1: 0Iw24m8k-51RTztAqON6mgS1gCU.crl (hash: fVdRS89OP8irD/M71TPgNj8Sk+fefySY9HZL4tCtKRk=)
                          2: 1D790596F25D11EF8C5D7036C4F9AE02.roa (hash: 0c5mooek/SI4tHJlanxjMJ+LPip9Hy2VF66plGlTaFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.crl
                          rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Iw24m8k-51RTztAqON6mgS1gCU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 14:56:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13524 (0x34d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E03C, serialNumber=D08C36E26F24FB9D514F3B40A8E37A9A04B58025
        Validity
            Not Before: Nov  2 14:56:08 2025 GMT
            Not After : Nov  9 14:56:08 2025 GMT
        Subject: CN=69077108-1680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1d:b2:6c:5e:13:2d:9e:27:a2:e6:06:17:9b:
                    72:ec:5c:d9:94:65:8d:6c:e1:f9:a3:1e:19:9c:78:
                    1c:71:9b:cb:f3:74:85:24:b8:de:48:d5:64:92:06:
                    df:15:f6:34:c7:74:de:30:15:8a:d6:94:2a:a0:2e:
                    9d:df:b4:46:7c:27:43:91:26:0d:49:36:49:54:23:
                    54:a1:fb:b5:ac:62:5e:c8:44:56:57:bb:49:f9:92:
                    e4:4c:4a:fd:ac:34:b2:f5:52:ec:fe:f7:91:2b:ca:
                    e1:d6:56:55:d6:dc:c9:24:ea:66:f5:36:d3:a8:fe:
                    49:e6:5f:8d:4a:e1:54:b7:e8:e3:5a:18:2d:f9:a5:
                    86:06:d9:6d:5e:d3:83:82:a6:cd:53:92:50:2c:88:
                    21:a5:24:ed:89:2b:66:a2:2f:be:aa:23:9c:09:3d:
                    2a:72:b4:c4:3c:bf:74:26:16:3b:72:cc:34:60:44:
                    91:6d:43:3a:4a:6a:4e:05:a9:c9:93:72:c8:36:30:
                    91:ff:d0:13:17:9e:e6:fd:1c:48:27:ce:fb:b4:2e:
                    3a:c4:dd:f3:66:83:91:92:ad:a7:48:fd:bd:51:78:
                    87:e9:0b:62:e3:c9:90:8a:db:e6:a0:d0:f0:89:3e:
                    7d:94:5e:02:1e:01:43:c3:d6:be:39:e5:95:80:0f:
                    6d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:75:D4:26:CF:7E:BD:31:B8:78:2D:B2:2C:C1:09:BD:45:46:D9:2A
            X509v3 Authority Key Identifier:
                keyid:D0:8C:36:E2:6F:24:FB:9D:51:4F:3B:40:A8:E3:7A:9A:04:B5:80:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Iw24m8k-51RTztAqON6mgS1gCU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E03C/B6E0F4AA1D9A11E28921298808B02CD2/0Iw24m8k-51RTztAqON6mgS1gCU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:8e:05:78:2b:a9:5f:be:b1:5a:c6:36:c3:f0:7d:93:15:13:
         f5:e5:ec:66:0a:a6:1f:3a:30:d7:5f:b6:33:5a:c7:09:28:93:
         2b:3a:17:fc:ed:b9:f9:06:52:f8:2f:c7:1b:7e:f9:99:59:52:
         58:54:bb:85:44:7e:ec:7d:06:50:8e:bd:98:8e:9b:5b:7b:11:
         93:6b:1b:01:65:99:13:ab:d2:32:f8:62:ba:c5:33:1b:3c:2f:
         90:b2:a7:78:2b:62:80:cb:10:33:97:92:fb:18:b4:c1:f8:6e:
         ce:aa:fc:5a:68:2c:ba:73:88:fb:a5:f3:1a:6f:a5:b4:f9:68:
         0f:28:76:a4:61:53:0a:fd:64:68:bb:2b:cd:ae:1d:7a:46:bd:
         2c:2f:01:df:4d:a9:d6:a7:55:9f:80:bf:d6:ec:cd:33:b7:0e:
         92:3c:29:3b:92:05:bb:a8:6d:b0:a4:99:d3:d1:ca:29:6c:3a:
         53:f1:7f:3d:2c:f0:59:20:92:52:1d:9b:fd:8d:a9:4d:d6:f0:
         64:bb:90:23:80:43:f3:a3:12:f9:ea:4b:e8:46:e8:f5:c5:5e:
         ff:e3:2e:8d:c4:79:ef:fb:7a:8f:ae:c1:41:79:56:af:b2:94:
         23:61:1c:19:97:0c:3a:07:93:f5:08:05:e1:f9:3b:e8:41:c7:
         33:1d:8d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 02:14:58 2025 by rpki-client