Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
File:                     zGkjHByhW84A7o1F08z_3kUtS5I.mft (raw, json)
Hash identifier:          BDi0twubMMBHs4iAELWCZdLBLMO87kHtqCMMUIo9Muc=
Subject key identifier:   39:44:79:17:5E:B7:31:BF:80:3C:EC:24:F8:BF:06:18:EC:D4:D6:8C
Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92
Certificate issuer:       /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92
Certificate serial:       14E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
Manifest number:          14BF
Signing time:             Fri 08 Aug 2025 17:02:15 +0000
Manifest this update:     Fri 08 Aug 2025 17:02:15 +0000
Manifest next update:     Fri 15 Aug 2025 17:02:15 +0000
Files and hashes:         1: zGkjHByhW84A7o1F08z_3kUtS5I.crl (hash: kn888IKJh4O7V0iYn+7/TDUle+ECZn8ODJrxRGjdg3E=)
                          2: 186C59282D8B11EAA862AD56C4F9AE02.roa (hash: UtrqO+yyN3jQsZkVGkE+EUMbuUP0oNyEiC15gg1DC58=)
                          3: 59D3C5822AF711EE8EDEA185C4F9AE02.roa (hash: MomDGDWZ7/59k4xIjitSMBPT+iM+rJRkaviOBJD4QO4=)
                          4: 1086CEC42ACA11EE88AEAE19C4F9AE02.roa (hash: xOWh/5c3MDcOPKKPOs5E2JDhcK3EitSd5z0mZVQAmn4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl
                          rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5344 (0x14e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144436, serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92
        Validity
            Not Before: Aug  8 17:02:15 2025 GMT
            Not After : Aug 15 17:02:15 2025 GMT
        Subject: CN=68962d97-ce9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6c:c8:2d:be:e2:58:13:4d:ce:ba:cf:8e:df:
                    d2:6a:e3:68:da:b6:e4:40:11:4c:be:bf:cf:de:9e:
                    05:87:2f:94:48:29:4d:24:9c:55:9a:c2:1d:c7:fe:
                    ba:5b:03:19:79:aa:5c:5a:bf:72:13:40:f4:00:7e:
                    91:d5:34:c3:1f:54:0d:01:19:ff:c9:7a:4d:3b:e9:
                    68:75:25:11:a1:ce:2b:f3:8e:05:0a:43:74:4c:d8:
                    e0:19:4c:ba:9b:b8:37:e8:b9:14:6a:cd:78:26:14:
                    c4:78:cd:34:77:84:71:3b:60:d7:a4:3c:cb:b8:0a:
                    ab:9e:bf:71:0c:f8:9e:d8:c9:6e:5c:40:7e:ac:a2:
                    90:72:ea:19:3f:ce:cc:39:f3:0a:dc:24:98:62:b5:
                    b2:7d:0f:f4:97:d4:80:bb:1c:3d:03:08:75:1e:64:
                    a4:94:6c:cf:01:fa:be:33:d2:de:5d:b6:b3:64:02:
                    e2:76:31:f1:cf:d9:eb:38:bc:00:72:f0:e1:ba:88:
                    96:2f:77:7b:ce:e1:66:f6:76:fa:04:9b:35:62:bc:
                    38:9b:5b:a3:4a:2b:a6:63:c9:8c:0f:6e:8d:b5:56:
                    9e:e7:54:d7:c6:d7:d4:f1:70:71:07:74:64:ee:45:
                    8d:82:e6:b4:e3:f5:a5:65:ad:0b:f3:0c:38:0d:17:
                    d3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:44:79:17:5E:B7:31:BF:80:3C:EC:24:F8:BF:06:18:EC:D4:D6:8C
            X509v3 Authority Key Identifier:
                keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:14:29:23:a2:db:de:57:02:86:11:2f:b1:56:30:66:fd:3b:
         c3:cc:15:ed:35:f9:87:e8:54:46:2d:4d:48:b4:e3:df:9d:70:
         27:48:1e:17:9e:52:e6:c2:a0:c7:fa:9c:77:24:81:5b:9c:5b:
         8a:6f:7c:2d:23:d5:bc:dd:d7:68:51:a0:6b:c4:c4:bf:38:a9:
         d5:93:7c:76:f2:ab:80:2b:33:1a:a2:07:76:99:5c:bf:81:90:
         e8:93:61:96:07:e7:ef:55:b0:b7:d2:98:dc:95:de:09:54:9c:
         3e:c2:75:bd:97:05:f2:a7:d8:d6:ed:02:d0:e7:54:a6:e8:ff:
         c8:06:90:f3:f4:ea:2c:e6:de:62:8c:32:83:90:b2:68:ad:17:
         11:5f:a1:82:00:ed:53:de:56:8c:8a:1a:21:a5:21:10:e3:76:
         34:3f:f0:3d:d4:f6:c4:51:69:2e:a8:e3:62:56:6a:b9:f3:32:
         8c:50:75:60:ce:73:57:9c:56:16:af:2b:ed:91:3e:a9:3b:eb:
         c6:73:90:5d:2e:dd:3b:fd:e6:30:18:b2:02:6e:fb:97:24:de:
         a7:25:3a:a9:b3:69:d3:8a:a2:0a:06:0a:37:a7:e0:ec:b6:e5:
         f5:98:c6:90:64:d3:d3:b2:dc:4c:89:13:00:b5:b5:3a:5b:63:
         72:da:4f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 14:00:22 2025 by rpki-client