Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
File:                     NAQf45nAdllht5_hJGlBcocgc7s.mft (raw, json)
Hash identifier:          EeN+3nsUCxo8ikyzfrE3Slnj1hebsNNEGE359wM/cKY=
Subject key identifier:   80:49:D1:6E:B4:AA:AE:C2:FD:D2:4E:B8:FC:B3:9C:5B:93:20:2D:F1
Authority key identifier: 34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB
Certificate issuer:       /CN=A913FD96/serialNumber=34041FE399C0765961B79FE124694172872073BB
Certificate serial:       0AE3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
Manifest number:          0ADC
Signing time:             Fri 08 Aug 2025 19:41:16 +0000
Manifest this update:     Fri 08 Aug 2025 19:41:16 +0000
Manifest next update:     Fri 15 Aug 2025 19:41:16 +0000
Files and hashes:         1: NAQf45nAdllht5_hJGlBcocgc7s.crl (hash: 50LPoJzV+xWNNvhJPYwLpnn+ud9SXE1vMcbiBWYmKvM=)
                          2: FC3B44CE519A11EAB1229A87C4F9AE02.roa (hash: PexI7Ux7URSg3e/gBgi7b1d+EMkFgIyBhb6944l9JRA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl
                          rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2787 (0xae3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FD96, serialNumber=34041FE399C0765961B79FE124694172872073BB
        Validity
            Not Before: Aug  8 19:41:16 2025 GMT
            Not After : Aug 15 19:41:16 2025 GMT
        Subject: CN=689652dc-3957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7b:52:c8:5d:35:12:e8:8c:41:98:8c:f7:c7:
                    e4:6b:c0:6a:8c:b4:52:4a:df:df:de:77:d7:29:84:
                    3a:df:2c:33:51:1a:62:c9:b9:67:5e:98:5a:8d:0d:
                    a4:04:2d:82:b8:da:47:10:9c:d5:71:e0:94:ca:c9:
                    fe:9d:34:6a:43:6c:e5:16:06:7e:34:49:2a:cd:96:
                    27:6c:65:c7:85:63:2d:1d:4e:f2:8e:6e:93:56:b0:
                    64:38:46:33:11:f1:8a:0c:40:be:a9:a7:53:b4:2a:
                    c2:0b:bd:9b:b3:22:76:7b:4e:1d:7b:70:97:83:ee:
                    e4:52:8b:55:38:59:c5:f9:76:82:cc:c3:a5:8d:c2:
                    ad:7a:5a:8c:e2:f2:10:63:61:2b:9d:1d:b2:0d:49:
                    89:bc:15:14:40:c3:96:7b:d2:72:d8:d1:c2:3b:ee:
                    70:2a:e4:14:8f:c4:03:1a:ab:29:2c:b3:f9:fd:e4:
                    03:dd:37:dd:8e:79:ae:12:8c:8e:1e:a4:7b:2b:67:
                    66:f1:20:83:0f:36:dd:0e:36:09:ef:df:9a:b2:ec:
                    b3:07:7d:c8:c8:c8:05:29:60:b3:98:3a:8d:a1:57:
                    90:80:1a:28:32:37:fb:75:60:2a:72:ba:8f:93:80:
                    bb:1b:2b:b8:c1:f9:32:13:e7:d1:d1:75:dc:ab:db:
                    82:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:49:D1:6E:B4:AA:AE:C2:FD:D2:4E:B8:FC:B3:9C:5B:93:20:2D:F1
            X509v3 Authority Key Identifier:
                keyid:34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:fe:7e:91:62:1a:8d:fb:cd:9e:7e:50:80:bc:4f:70:85:e8:
         a0:33:e0:3e:81:d4:79:50:2b:07:24:c1:93:69:6a:bc:f8:0e:
         b4:29:0b:74:0b:4f:3e:eb:6d:09:01:8c:25:fe:a8:1a:8a:bd:
         52:5e:9f:5d:40:43:ca:a2:7e:43:a1:99:71:77:df:70:18:b0:
         a1:2a:38:3f:2f:5a:d1:4c:b0:52:0e:b5:4f:42:eb:5f:e8:af:
         f4:da:1e:cc:12:fa:62:05:86:2a:46:72:d5:ba:25:f7:fa:76:
         c3:11:cf:bd:af:2d:f1:94:ae:04:88:8d:0d:39:ed:cb:4f:22:
         52:87:4d:68:5c:21:47:ec:b2:ed:50:03:5f:eb:17:80:80:29:
         b1:64:3a:92:7a:4e:d6:0e:da:56:1b:95:4e:7a:c2:e8:45:4f:
         9f:aa:62:3a:0b:9d:94:4e:19:55:74:7d:8c:b9:54:e6:ef:21:
         16:13:a4:9d:c6:ec:2f:4f:0b:bd:3f:a9:a9:be:98:c3:86:0b:
         aa:c4:07:64:3b:8c:25:a0:00:be:12:15:ed:25:bf:9a:48:7b:
         81:01:ea:62:aa:14:61:9c:bf:ff:b6:0b:c9:56:50:86:75:51:
         fb:df:29:83:37:72:1e:b0:48:16:5c:3a:9e:4e:65:d8:b1:a2:
         1d:c2:cc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:43:06 2025 by rpki-client