Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
File:                     t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft (raw, json)
Hash identifier:          3aOKQPJ8iM8/SEZ/jfa54oQ6t7RUKe9bUTknO3Dx3Gs=
Subject key identifier:   E0:ED:F2:77:C9:9F:EA:A7:20:0D:3B:B6:BC:8B:6D:B3:70:63:41:10
Authority key identifier: B7:59:09:2A:69:18:F4:5E:AC:D0:DC:FD:F9:71:D0:D3:FA:50:21:AA
Certificate issuer:       /CN=A9149680/serialNumber=B759092A6918F45EACD0DCFDF971D0D3FA5021AA
Certificate serial:       07BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
Manifest number:          07B8
Signing time:             Sun 10 Aug 2025 21:16:39 +0000
Manifest this update:     Sun 10 Aug 2025 21:16:39 +0000
Manifest next update:     Sun 17 Aug 2025 21:16:39 +0000
Files and hashes:         1: t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl (hash: sQmvOYl6QX7OQy/Dhg2eV7CNtuWz1jfjmniILRhXHys=)
                          2: 4EF261AE0BA211EB99DE471BC4F9AE02.roa (hash: elCspCf7kpxqe/1sy2Dq4/SmTn/Yog4Qi7W5Fjs7BFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl
                          rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1983 (0x7bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149680, serialNumber=B759092A6918F45EACD0DCFDF971D0D3FA5021AA
        Validity
            Not Before: Aug 10 21:16:39 2025 GMT
            Not After : Aug 17 21:16:39 2025 GMT
        Subject: CN=68990c37-cdd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:69:02:67:e1:b9:c5:a5:de:1f:29:25:05:f8:
                    71:14:ab:43:e5:43:1b:db:5e:53:9d:a2:b0:48:7d:
                    7a:9a:c0:3d:98:0a:25:b1:32:61:0d:a2:91:a1:c8:
                    86:9e:13:f4:7a:94:e1:89:81:82:d6:7a:4f:6d:83:
                    86:af:f6:a4:4c:77:92:56:d7:6c:b7:86:ca:8d:bc:
                    62:15:18:50:1d:2c:a9:7b:97:54:35:9b:f1:61:a1:
                    87:eb:dd:d7:fd:02:a1:0e:50:1b:68:70:d2:49:10:
                    85:ce:ac:1c:ad:ed:f9:ad:28:33:4c:ec:38:eb:bf:
                    c3:95:02:13:1d:d0:57:59:d3:bf:f7:5a:48:c1:bf:
                    c2:e5:54:5c:0a:86:90:98:88:4a:d8:f2:02:66:32:
                    7c:83:03:81:29:80:d1:7e:c0:22:70:a0:0f:17:f8:
                    c7:24:2d:f2:6e:70:51:0e:65:11:71:64:2d:d2:71:
                    3a:a3:72:ed:25:5a:e5:18:9f:1e:51:33:72:78:86:
                    ee:16:02:46:58:8d:4f:eb:cb:d1:06:87:8d:b2:fb:
                    4e:1b:04:5c:54:b3:ba:4b:d8:78:04:8a:30:6c:9a:
                    b4:9f:6c:38:32:fe:58:27:58:62:31:29:6a:22:96:
                    91:02:ca:f5:43:bb:27:00:53:ce:6d:c4:f1:98:de:
                    f8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:ED:F2:77:C9:9F:EA:A7:20:0D:3B:B6:BC:8B:6D:B3:70:63:41:10
            X509v3 Authority Key Identifier:
                keyid:B7:59:09:2A:69:18:F4:5E:AC:D0:DC:FD:F9:71:D0:D3:FA:50:21:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:6c:7b:6d:bc:5d:2d:5b:4b:b7:00:fb:65:ed:80:6b:b6:38:
         18:eb:81:fa:5e:b5:8a:a3:c1:2b:23:23:8a:ce:74:20:a8:ca:
         9d:54:1f:f2:45:a4:9f:24:89:e8:88:5c:35:b1:f4:36:1f:74:
         db:ff:41:67:f5:33:c9:10:0e:a4:7c:a3:b6:a9:9a:ea:a1:0e:
         bd:0d:9a:f0:ef:2b:56:56:1b:0f:24:cf:58:3c:ef:63:e6:8b:
         3b:fb:81:e1:e1:a6:07:a7:01:47:7d:a6:dd:67:f3:26:78:9e:
         be:1e:b9:8c:93:c0:79:e8:ab:4d:fe:9d:07:2f:11:8e:6e:1d:
         de:48:ce:4a:ec:3b:42:b5:06:ac:c6:bc:90:d2:7b:10:0e:11:
         54:40:70:eb:e8:64:b0:6c:3c:36:2f:7c:50:24:88:81:0f:51:
         7d:64:e5:0d:4c:94:48:10:dc:d3:42:9c:5f:df:76:1f:9e:87:
         93:c1:20:4a:c5:b0:a5:a5:0e:50:80:5b:8a:be:d3:a3:cf:2a:
         5e:e4:9e:26:c3:e1:db:b2:b2:f8:56:7a:1f:93:8f:38:e3:64:
         4c:f3:0c:a5:10:3c:d2:17:9a:9a:61:07:a0:67:33:01:25:1b:
         03:2e:41:0c:5e:e9:8f:d6:22:4d:06:13:36:37:87:60:6b:72:
         42:f9:8a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:51:21 2025 by rpki-client