Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft
File:                     r1VYG6En4gkKClRi_nvOcGFvLNw.mft (raw, json)
Hash identifier:          CaDDM4x2pUpAz2kp42GwcAnu/TpARHQIpoBP/LdyR44=
Subject key identifier:   D0:94:C0:50:68:CC:7B:2B:2A:1A:D1:D0:17:3C:0A:84:2A:2B:5F:D4
Authority key identifier: AF:55:58:1B:A1:27:E2:09:0A:0A:54:62:FE:7B:CE:70:61:6F:2C:DC
Certificate issuer:       /CN=A914B758/serialNumber=AF55581BA127E2090A0A5462FE7BCE70616F2CDC
Certificate serial:       033E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft
Manifest number:          0334
Signing time:             Mon 11 Aug 2025 01:19:17 +0000
Manifest this update:     Mon 11 Aug 2025 01:19:17 +0000
Manifest next update:     Mon 18 Aug 2025 01:19:17 +0000
Files and hashes:         1: r1VYG6En4gkKClRi_nvOcGFvLNw.crl (hash: dZM9VWQOE1o7CG7gG+X9ONlmQWE/RtQg0fSh3rOtje4=)
                          2: 1B22E756D37711EC9A8FF526C4F9AE02.roa (hash: gy37y3m86p91aNaJLGl/OcCXrwdEyv/PB6GXlm+9olg=)
                          3: 1CA2FA08D37711EC9A8FF526C4F9AE02.roa (hash: 5YLYcly93145UErNSmHTZCyYs7eD4zU0w+fdftiuni0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.crl
                          rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 Aug 2025 01:19:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 830 (0x33e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B758, serialNumber=AF55581BA127E2090A0A5462FE7BCE70616F2CDC
        Validity
            Not Before: Aug 11 01:19:17 2025 GMT
            Not After : Aug 18 01:19:17 2025 GMT
        Subject: CN=68994515-d587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b7:4c:5c:e8:80:48:a0:e9:a6:95:08:8c:50:
                    9b:61:21:ae:e3:04:d6:22:fe:52:3b:e0:a2:ee:fa:
                    19:59:c0:d8:be:80:54:f6:56:89:a5:42:a6:2a:5f:
                    a3:5e:52:7e:1a:6c:c0:f7:80:2d:f3:c1:6f:68:0b:
                    08:47:ff:5d:25:3e:bf:c3:0b:a9:52:52:04:32:5b:
                    8b:09:2f:16:1e:b2:43:44:b5:22:67:5f:62:a3:b2:
                    06:67:cf:33:c5:17:5a:3b:f1:21:00:e0:2c:23:43:
                    07:bf:4e:ab:95:d4:79:dd:24:04:9d:35:9b:ad:4b:
                    80:11:28:21:58:89:99:15:07:18:05:d6:f0:b2:bf:
                    e6:c1:71:01:13:85:34:ab:8f:d3:a3:9e:19:98:ae:
                    fa:b3:5c:8b:62:70:70:a9:67:f3:2c:d1:bc:87:ad:
                    a3:3e:3a:91:c0:4b:24:71:16:09:68:d3:4b:b7:f6:
                    91:60:25:65:1c:8d:0b:ef:27:31:e1:ae:ab:da:7a:
                    54:cf:ea:bb:15:e4:6d:92:94:4e:d6:c8:d1:72:56:
                    4a:d4:88:25:5f:ff:15:5c:e8:0f:5f:e3:48:82:56:
                    46:61:04:42:6d:ed:0f:e1:20:59:7d:61:e8:41:7f:
                    a3:1c:93:6f:c1:f1:ec:b1:a3:8d:a9:a4:61:fc:1c:
                    7d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:94:C0:50:68:CC:7B:2B:2A:1A:D1:D0:17:3C:0A:84:2A:2B:5F:D4
            X509v3 Authority Key Identifier:
                keyid:AF:55:58:1B:A1:27:E2:09:0A:0A:54:62:FE:7B:CE:70:61:6F:2C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:08:9d:66:cf:c6:b9:6a:88:59:e8:c3:3c:3e:10:e0:15:e0:
         19:39:ab:04:ba:52:57:cf:17:a1:04:72:3d:fd:90:01:a6:78:
         0b:78:41:3f:81:00:20:81:47:58:a0:21:60:3c:66:9d:f7:ea:
         a9:62:d0:d3:07:f6:da:28:2f:e8:15:66:34:bb:9a:e2:20:a7:
         24:e8:12:40:44:f5:57:4e:79:2b:b7:6e:5d:02:40:57:45:b2:
         f7:d6:c7:ab:b3:0e:eb:c0:4f:9a:bb:6c:0f:12:3a:a0:fb:5a:
         f5:ec:f5:43:43:57:27:33:44:cf:c7:97:84:5f:42:8d:92:9b:
         15:11:25:9d:9c:1d:ac:82:8c:81:b7:a2:af:e1:f0:db:6d:62:
         00:18:b9:4b:ea:0a:8c:2c:12:76:11:1e:b2:18:0f:60:4b:d2:
         26:63:4a:f9:c0:5f:0c:f7:48:6b:33:e4:87:69:f0:d7:25:cf:
         f2:25:0a:c1:8d:fb:40:d5:65:b6:f8:d2:30:23:7d:98:aa:c5:
         e9:c3:08:08:dd:2c:2e:ba:23:ca:b0:dd:98:3a:39:c4:96:da:
         ff:99:67:a0:26:90:83:04:88:f8:63:57:60:8a:e0:b9:f3:f4:
         b5:aa:35:e8:6a:66:ca:f5:dd:9a:27:b7:2d:65:05:13:3c:4d:
         90:63:5f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:59:49 2025 by rpki-client