Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
File:                     R8vvcL1VuVMzMbi8wumClWOizpQ.mft (raw, json)
Hash identifier:          UdanGYqcI7e7T2/WJTqjdTfb/Ve9fpM0EiIXVOeQuKQ=
Subject key identifier:   4E:54:4C:A2:13:E8:8E:F4:67:25:11:96:CA:A5:4D:16:45:BB:2F:30
Authority key identifier: 47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94
Certificate issuer:       /CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
Certificate serial:       065C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
Manifest number:          0648
Signing time:             Fri 08 Aug 2025 23:06:30 +0000
Manifest this update:     Fri 08 Aug 2025 23:06:29 +0000
Manifest next update:     Fri 15 Aug 2025 23:06:29 +0000
Files and hashes:         1: R8vvcL1VuVMzMbi8wumClWOizpQ.crl (hash: vUtyNBtDhXSmRBYv2p1ulS+heicskJohPpXaEy9Vsfc=)
                          2: 440BBCC8D50411EB8AB09711C4F9AE02.roa (hash: qO/kt1cMyB8zrA4ykFY3E6NDvsrSs/t7vGIuj96fEPU=)
                          3: 0C65AFCECE8511ECAEF2C52BC4F9AE02.roa (hash: 5VW5u5nV4cWkOhmuhHmaXAMAI+xByp0pPJ4g2dPBTqE=)
                          4: 2C9AF3A2659411EDA3257D0AC4F9AE02.roa (hash: l5U4Aj0G/of9H3Qhhfeqyo1Zivkl+XdCF8RMvmc+X6E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl
                          rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1628 (0x65c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A1D, serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94
        Validity
            Not Before: Aug  8 23:06:29 2025 GMT
            Not After : Aug 15 23:06:29 2025 GMT
        Subject: CN=689682f6-9873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:55:60:54:21:81:ee:08:ad:f8:cc:35:1a:2b:
                    d4:a5:07:9d:50:0a:4e:43:df:7b:da:f1:90:93:fd:
                    99:63:bc:bb:5e:84:35:6e:7c:fa:62:45:43:ae:bb:
                    90:e9:b2:c0:e5:f2:0b:62:a6:f5:46:03:bb:b0:39:
                    8e:9e:30:5a:2f:55:6e:02:3a:74:4f:0e:b2:ad:f9:
                    5f:31:bb:3d:9c:7d:fb:c3:8b:7d:36:88:f1:ae:54:
                    58:ed:c9:24:8b:91:d0:9e:df:31:93:e3:b1:f9:ce:
                    e2:30:fe:d0:05:24:0a:4d:2f:28:d1:83:7c:a5:ba:
                    d3:57:81:55:13:d3:53:22:aa:34:c2:19:63:3b:fc:
                    e4:65:35:6d:f3:b7:97:e5:25:99:ec:96:30:59:80:
                    9a:25:af:a2:e6:f6:7a:0e:9c:c7:a7:d8:bc:34:68:
                    a7:93:cc:18:3a:93:55:6d:68:de:5b:44:14:b2:cd:
                    85:70:2e:12:87:e5:3f:73:ec:4f:13:36:7d:de:17:
                    7f:1b:a1:68:e5:11:19:a2:3b:1a:4a:64:b3:98:26:
                    99:ce:ca:7c:26:7d:69:cd:19:39:ee:59:ba:af:5e:
                    88:86:1f:cf:8b:2f:59:be:66:fa:db:ac:0a:f2:2c:
                    da:b7:8c:0e:39:b7:b4:d0:0b:52:2f:c1:71:f3:4c:
                    2e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:54:4C:A2:13:E8:8E:F4:67:25:11:96:CA:A5:4D:16:45:BB:2F:30
            X509v3 Authority Key Identifier:
                keyid:47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:32:07:7c:30:72:26:dd:cc:64:d8:2a:fd:24:ad:33:f2:46:
         12:c2:88:d5:f1:33:38:bc:a2:40:b1:d9:96:70:17:38:c7:70:
         5d:ee:6e:95:67:4c:a7:0e:d2:08:2c:14:a1:36:42:61:c4:ca:
         76:74:e6:b7:9a:d5:4f:fc:33:be:fe:de:8e:34:3c:4b:5e:38:
         b7:b7:7a:11:af:2e:f6:5a:c0:bd:fd:c8:1e:87:83:03:17:3b:
         a4:64:46:16:3a:ea:b6:6d:b3:8a:5a:24:09:6d:da:7b:7b:ad:
         0d:06:33:14:cf:08:d0:3f:d3:c3:2d:a1:c9:28:c2:88:41:ec:
         21:45:02:24:c7:f2:da:17:e2:5a:15:88:56:fb:60:45:f2:63:
         8b:5d:ab:fe:3b:c7:eb:2c:e2:19:30:5a:a4:49:e9:8f:83:4d:
         cc:7e:c1:3a:9f:32:9e:67:10:2c:5f:24:22:3e:2d:95:a6:b6:
         c4:46:24:be:29:fa:8b:3d:55:20:a6:8b:46:8b:80:14:27:4b:
         cd:2e:b5:5d:83:fc:31:2d:c5:51:92:3d:74:d3:72:e3:2f:b7:
         9f:b1:cc:55:8a:10:f7:76:bd:9b:c2:ad:23:f1:fa:1f:e3:f4:
         6f:5f:39:ea:27:c2:da:2c:1f:c1:8f:4f:c7:3b:67:8b:d9:9b:
         cf:80:7f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:39:31 2025 by rpki-client