Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
File:                     Kprva8EpkUyguRBcknHerznbyGY.mft (raw, json)
Hash identifier:          Sbuqs6wFUtw2uYUANec+Gw1VXOjft220cb5HvAr3CHo=
Subject key identifier:   A6:7D:9B:23:B1:54:23:B8:EC:AD:54:F8:F0:D6:1F:25:8A:42:04:7B
Authority key identifier: 2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66
Certificate issuer:       /CN=A9147C4C/serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
Certificate serial:       08F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
Manifest number:          08D6
Signing time:             Fri 08 Aug 2025 20:47:45 +0000
Manifest this update:     Fri 08 Aug 2025 20:47:45 +0000
Manifest next update:     Fri 15 Aug 2025 20:47:45 +0000
Files and hashes:         1: Kprva8EpkUyguRBcknHerznbyGY.crl (hash: wl3+ZZZfBCNFi50lP8Gyo9EdBxG41MCaXSpCAOrXjUs=)
                          2: 6211D40A941F11EEA7C3E86FC4F9AE02.roa (hash: rwFUZotDCsUcE5y4SWo5vzPQMph+ISXIRs0BW/9TgJc=)
                          3: 9FB96E16929A11EE8CC5D033C4F9AE02.roa (hash: /WRRbCj0rNywmLtoXv249Ng7AC0zIvGMMjOEBzIrMR0=)
                          4: 62CDEE42941F11EEA7C3E86FC4F9AE02.roa (hash: xYtI619wwIDUtAgGOcO2nVAHPmu/uf2fEsNcyxLWYV8=)
                          5: 48E4C546941F11EE8517B26FC4F9AE02.roa (hash: u9rGnfekIAlkNgYfnuzbJex52uZyoGapNCA6gJzdd2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl
                          rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2290 (0x8f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147C4C, serialNumber=2A9AEF6BC129914CA0B9105C9271DEAF39DBC866
        Validity
            Not Before: Aug  8 20:47:45 2025 GMT
            Not After : Aug 15 20:47:45 2025 GMT
        Subject: CN=68966271-110d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e2:af:3e:b5:6c:4a:74:56:bd:8c:f1:40:31:
                    53:6b:d7:52:bf:82:d0:e0:e3:3f:ed:3a:1f:4b:14:
                    79:80:d1:4f:07:b3:ee:1d:e1:de:05:c4:e6:92:dc:
                    c8:65:8c:4e:30:a4:a6:d2:3e:f7:5c:2d:3c:6d:c8:
                    44:b7:95:4c:1b:c0:99:35:03:17:3c:51:13:60:52:
                    59:d9:8e:49:0b:b1:13:b0:f9:1c:e4:c0:ab:f5:ce:
                    f0:f2:e2:b1:46:1f:49:f8:07:f6:8d:b9:54:fc:c0:
                    96:cf:38:9c:38:5f:80:4a:4b:43:c0:27:2c:d8:0f:
                    4a:f9:bf:65:1b:81:b0:24:d5:0b:7c:4d:68:71:d4:
                    70:5e:6e:57:7c:6d:05:20:90:b0:ab:c8:c8:52:2b:
                    b9:e7:e3:cb:fb:97:f3:22:97:82:48:7c:c1:fa:07:
                    81:fc:7b:77:0a:ac:3f:99:7f:39:88:3b:d7:8d:8d:
                    6f:87:95:41:6a:1b:17:c6:99:e8:28:17:b2:62:1d:
                    4b:68:6d:4d:2b:81:fd:db:e5:30:55:00:b5:88:05:
                    99:5d:1c:f1:6b:45:f6:eb:3d:0c:79:c5:52:a9:01:
                    44:a8:8a:bf:1b:08:06:67:7a:3c:8b:2a:bc:e7:8b:
                    90:2e:75:da:f9:bc:e6:08:50:d1:26:05:ae:21:e1:
                    88:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7D:9B:23:B1:54:23:B8:EC:AD:54:F8:F0:D6:1F:25:8A:42:04:7B
            X509v3 Authority Key Identifier:
                keyid:2A:9A:EF:6B:C1:29:91:4C:A0:B9:10:5C:92:71:DE:AF:39:DB:C8:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kprva8EpkUyguRBcknHerznbyGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147C4C/CCB20354B9E211EABC554B83C4F9AE02/Kprva8EpkUyguRBcknHerznbyGY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:9a:57:16:31:a6:53:6b:51:bb:84:5c:ac:b1:55:3e:5b:61:
         65:6b:d5:88:69:d5:23:5a:dd:a8:ff:53:de:74:7f:5f:a1:a9:
         f4:8b:c3:2c:39:2e:4f:8a:1c:e6:b8:c1:e9:46:53:2f:a4:f3:
         ed:29:17:93:af:30:4f:20:64:c7:7c:72:06:8a:6f:3a:8a:73:
         b2:4c:f5:c1:a9:fa:5f:bb:1f:53:c4:aa:fb:e7:32:12:0e:e6:
         5d:69:b4:fe:e9:2a:4f:12:7c:38:57:c7:cf:01:da:02:05:fc:
         07:62:d6:3a:c8:2a:96:28:49:ab:c0:0c:7c:a2:71:ff:a6:f9:
         2f:60:9c:91:47:af:25:75:4d:77:50:e2:af:36:15:6e:a2:5d:
         a8:a4:0f:ac:93:b3:50:c9:92:1c:84:d0:e6:a6:66:d2:88:8a:
         2e:84:3a:9e:06:04:8c:72:09:35:df:12:51:0d:71:c0:5b:13:
         1d:0b:5d:9e:78:d0:b8:26:45:6f:37:c2:38:99:fc:7e:d9:70:
         05:ae:4f:49:d0:b8:00:9a:d6:e4:2b:7d:68:9d:6f:5c:59:39:
         92:05:11:5c:ff:c7:54:87:e6:14:06:0a:c7:6f:5f:16:c6:70:
         38:74:c5:44:ed:2d:13:ce:36:3e:d6:33:c1:1b:4f:46:64:9a:
         cf:db:14:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:38:50 2025 by rpki-client