Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
File:                     4JyfckW5hJiukjOxmA17T0xzjQ8.mft (raw, json)
Hash identifier:          TaBAFcDCapQ4p6BwC2tpP26KDyDxa4hQkFDS7mOX4oA=
Subject key identifier:   53:FB:7A:41:3D:29:BF:32:7D:21:BE:31:27:19:28:39:85:3A:BC:00
Authority key identifier: E0:9C:9F:72:45:B9:84:98:AE:92:33:B1:98:0D:7B:4F:4C:73:8D:0F
Certificate issuer:       /CN=A914287F/serialNumber=E09C9F7245B98498AE9233B1980D7B4F4C738D0F
Certificate serial:       076C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
Manifest number:          0766
Signing time:             Fri 08 Aug 2025 22:00:46 +0000
Manifest this update:     Fri 08 Aug 2025 22:00:45 +0000
Manifest next update:     Fri 15 Aug 2025 22:00:45 +0000
Files and hashes:         1: 4JyfckW5hJiukjOxmA17T0xzjQ8.crl (hash: mhjyv+AEU1TRjTSE3F3bihyxVNSRsAnrpOGc6wCMU2c=)
                          2: 45CED05E2D2511EBAA63DE82C4F9AE02.roa (hash: MMDW5GKNwb6UBpTQg+bN7/Wer/8y34uE+hwA4JCHhWg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.crl
                          rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1900 (0x76c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914287F, serialNumber=E09C9F7245B98498AE9233B1980D7B4F4C738D0F
        Validity
            Not Before: Aug  8 22:00:45 2025 GMT
            Not After : Aug 15 22:00:45 2025 GMT
        Subject: CN=6896738e-2f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:bb:24:5c:8b:ba:5d:8d:24:3a:96:0a:92:e4:
                    8c:48:1d:14:6e:4f:f8:db:ab:2d:28:84:1c:35:a9:
                    6b:7e:0a:fd:e6:6b:cc:42:6f:a6:d9:62:7c:7d:30:
                    ab:a7:af:de:4d:79:e4:e1:68:bb:a3:99:30:e7:bd:
                    70:fc:d1:aa:7e:27:47:0a:c7:cd:bc:52:31:86:e7:
                    b5:e1:a2:1f:0a:db:6e:33:74:05:de:db:75:cc:65:
                    75:79:b0:7e:43:ba:b6:a0:6e:b9:ac:95:1e:07:e4:
                    70:8c:f3:eb:50:dd:8a:38:a4:b8:94:df:ed:32:1e:
                    ba:ec:c5:6e:8a:cd:81:70:86:1a:fd:10:14:ed:af:
                    21:0e:64:0a:58:47:fe:c2:3a:6b:d6:50:94:d2:39:
                    eb:23:92:c6:ab:3b:85:9f:29:f9:34:bc:50:26:ab:
                    ee:14:9f:f1:7e:1d:a2:bf:c0:bc:8f:29:7e:87:72:
                    8a:35:39:f9:e4:ea:7b:40:22:11:52:6e:c5:b0:56:
                    54:98:b0:be:21:75:91:3e:c5:54:2a:b1:e9:7d:1c:
                    44:b1:c5:16:2b:c8:69:3a:03:98:b1:96:29:6c:66:
                    5b:d5:1c:b7:5d:bd:da:fc:05:ac:a6:64:79:3e:e9:
                    f4:d8:47:fa:c6:5d:ed:95:44:31:bf:37:89:1c:d1:
                    db:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FB:7A:41:3D:29:BF:32:7D:21:BE:31:27:19:28:39:85:3A:BC:00
            X509v3 Authority Key Identifier:
                keyid:E0:9C:9F:72:45:B9:84:98:AE:92:33:B1:98:0D:7B:4F:4C:73:8D:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JyfckW5hJiukjOxmA17T0xzjQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914287F/64489EE02D2311EB91918480C4F9AE02/4JyfckW5hJiukjOxmA17T0xzjQ8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:8a:78:ab:45:80:f6:01:43:76:27:ca:90:a0:1e:83:b4:9c:
         1b:4c:08:56:48:c7:3c:f1:2c:28:ff:b8:93:97:a5:ff:bd:ea:
         6b:08:05:b6:68:49:63:11:bf:c6:d0:6d:4c:cc:f3:a2:5a:4b:
         bb:31:1c:8a:48:94:75:82:cb:b6:56:0c:0d:12:3b:0a:db:7a:
         87:a0:9a:10:a2:3d:b4:62:ac:1a:19:b7:80:33:8d:a8:28:4d:
         87:70:15:72:8c:1b:6d:9a:5b:42:79:e6:f0:01:97:5a:0f:65:
         53:96:d0:aa:94:b2:98:49:58:3c:3a:c1:a7:e3:7c:a9:17:95:
         04:7f:94:1d:d7:41:27:c8:55:1d:0d:85:17:a5:05:68:d6:86:
         1e:bf:a2:eb:b0:13:1a:ad:9e:8b:cf:14:3c:c2:28:f0:30:c7:
         6c:a2:47:7c:2c:6f:93:9b:a6:10:e3:f2:71:4c:5b:80:9b:be:
         8a:1a:6b:42:1e:2d:da:b0:db:e9:ef:da:66:a6:35:7d:8b:bb:
         71:6a:56:70:83:70:89:61:9a:fb:de:3b:03:7d:62:98:af:3b:
         3b:b3:72:fc:a6:0e:3e:9b:a7:fe:9b:22:85:b0:18:cb:d3:a2:
         31:6b:e4:be:e0:18:a8:3d:73:4e:58:58:44:82:a4:34:f8:95:
         87:c2:82:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:18:33 2025 by rpki-client