Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft
File:                     j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft (raw, json)
Hash identifier:          xgMk6AcW82lZw7H40d8he2DaUndIE0lMAWMmRv0D4aw=
Subject key identifier:   F8:DF:49:71:54:B8:4D:CE:FF:2A:69:BD:78:00:9D:45:37:13:4E:22
Authority key identifier: 8F:E5:A7:C9:98:FB:8B:78:AC:33:1E:AE:83:BC:17:86:23:EE:3C:9E
Certificate issuer:       /CN=A913EF1D/serialNumber=8FE5A7C998FB8B78AC331EAE83BC178623EE3C9E
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft
Manifest number:          0102
Signing time:             Mon 11 Aug 2025 05:17:34 +0000
Manifest this update:     Mon 11 Aug 2025 05:17:34 +0000
Manifest next update:     Mon 18 Aug 2025 05:17:34 +0000
Files and hashes:         1: j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl (hash: j2UvVMV2AahO2kjQFHYm9JbemZBb/kX/gdAwRu/1jTw=)
                          2: 1AE7ED46ECE711EEB12F9A1FC4F9AE02.roa (hash: Ux7MrDkQdEj+Gtfnp0Wmpu2t6Z1MtA7yxD7lmndlZrU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl
                          rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EF1D, serialNumber=8FE5A7C998FB8B78AC331EAE83BC178623EE3C9E
        Validity
            Not Before: Aug 11 05:17:34 2025 GMT
            Not After : Aug 18 05:17:34 2025 GMT
        Subject: CN=68997cee-62d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:85:7a:54:46:23:1d:ea:67:2d:45:0b:a1:84:
                    a7:da:07:a7:a6:bd:06:2d:dc:22:db:e1:55:ca:8c:
                    3f:02:a5:d3:e7:c4:f4:a4:a5:46:be:f8:95:4b:b5:
                    e4:60:0f:4a:cd:bf:5a:7c:ec:aa:b2:d7:cf:dc:d3:
                    84:ab:80:2d:30:da:d3:e1:c4:df:4a:75:01:01:e2:
                    57:ff:4e:c6:4c:3e:c3:3c:12:8d:c7:01:8b:07:e3:
                    5c:b0:2a:ef:a5:c0:70:3d:2b:fa:cc:1e:aa:28:98:
                    55:a6:b2:dd:a0:ef:ac:13:3d:4f:7a:7d:41:68:3b:
                    0d:10:98:88:7d:2b:28:12:a4:1f:3a:d0:42:5e:37:
                    79:7d:98:23:aa:64:c5:3c:af:5a:8e:f4:fc:1c:53:
                    7b:a4:f8:8d:dc:ae:40:f1:34:c1:39:b8:cf:ac:39:
                    14:7c:06:7e:f2:26:37:8f:ad:68:ae:f9:a8:b5:7d:
                    81:68:14:4e:88:1d:d3:25:e5:cc:4c:57:1b:01:c3:
                    53:1e:24:3a:62:e6:c5:a2:3b:a4:dc:0e:54:d7:2f:
                    52:9c:3d:f7:ef:d2:e4:4e:17:95:6a:b4:a5:84:1c:
                    d2:b7:1c:c2:04:58:b2:46:ca:34:ae:6f:fa:99:63:
                    74:87:32:ec:db:f4:22:54:a1:ca:7e:74:8d:41:c2:
                    bd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DF:49:71:54:B8:4D:CE:FF:2A:69:BD:78:00:9D:45:37:13:4E:22
            X509v3 Authority Key Identifier:
                keyid:8F:E5:A7:C9:98:FB:8B:78:AC:33:1E:AE:83:BC:17:86:23:EE:3C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:b5:56:d1:e3:a5:d4:25:8f:b7:b4:86:e3:56:45:96:18:75:
         a5:92:42:1d:9b:17:8c:76:40:15:60:07:c1:7d:a2:03:ee:2f:
         cf:3d:66:da:1a:60:7c:02:73:26:44:8b:52:b3:cc:e7:40:94:
         78:4c:b1:cf:e7:be:26:1d:50:aa:57:ec:72:89:db:9d:49:8b:
         8b:79:49:ab:8d:4b:ff:a3:b9:ed:57:3a:59:a7:9c:03:85:e6:
         c8:33:6c:92:55:90:5c:4f:93:c3:82:03:eb:cd:0f:ac:6d:f3:
         a8:6f:2e:82:0b:fc:27:97:0f:25:53:79:23:a7:77:12:c6:30:
         8e:6c:ac:c7:13:68:45:a1:95:13:8b:c4:4c:da:9d:f8:e0:85:
         05:e2:cd:ac:62:97:51:ac:e8:2f:0d:aa:6c:39:13:69:40:d3:
         15:3f:16:fb:51:fd:9d:8c:64:73:e7:41:54:0d:d1:b6:1e:4d:
         88:d7:46:5e:4f:55:92:c8:6c:ac:35:29:c2:9d:e1:f9:0d:ef:
         90:b3:86:6e:42:16:0f:39:4c:ad:15:ec:f5:8e:cd:df:20:ad:
         c5:ae:ed:6c:34:58:52:7f:80:59:31:e9:a5:40:8a:f2:a3:fc:
         71:38:a8:57:67:f2:1f:d4:f1:70:cd:76:84:1c:aa:58:2d:44:
         4a:2f:a4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:55:12 2025 by rpki-client