Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft
File:                     w2z13iUzm5FFblzCMXJIs26kW30.mft (raw, json)
Hash identifier:          jMV2lQmxfswIqdSP2PRyuyQMI7MWuwofZ0CPMSSWLFU=
Subject key identifier:   DC:13:F6:A1:19:4D:D4:88:E8:DA:E6:17:1C:F2:73:70:E5:9E:15:E4
Authority key identifier: C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D
Certificate issuer:       /CN=A914E070/serialNumber=C36CF5DE25339B91456E5CC2317248B36EA45B7D
Certificate serial:       0126
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft
Manifest number:          0123
Signing time:             Sat 09 Aug 2025 05:09:09 +0000
Manifest this update:     Sat 09 Aug 2025 05:09:08 +0000
Manifest next update:     Sat 16 Aug 2025 05:09:08 +0000
Files and hashes:         1: w2z13iUzm5FFblzCMXJIs26kW30.crl (hash: CLU8l+ZdYNZ7Zu7lnDpbOafgyCyuWvSqkfF0oVMKvt4=)
                          2: 5AD6391EBC1111EE92B7B02DC4F9AE02.roa (hash: pN1OWdiGw4OEkjeO/p/GHkPUsCswdzeq2aXMmLYYqcw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl
                          rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E070, serialNumber=C36CF5DE25339B91456E5CC2317248B36EA45B7D
        Validity
            Not Before: Aug  9 05:09:08 2025 GMT
            Not After : Aug 16 05:09:08 2025 GMT
        Subject: CN=6896d7f4-1d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:02:61:bc:fe:34:50:38:01:80:a3:5e:b6:1c:
                    97:c6:a1:09:67:5c:94:ee:8b:da:73:69:05:88:a7:
                    20:23:3e:90:25:4c:79:fc:b3:74:75:5c:42:da:58:
                    57:4c:f7:7d:a0:ec:5f:c0:75:6a:0b:74:0e:ce:33:
                    aa:c2:8b:20:be:9c:c6:21:38:2d:e0:16:42:9b:61:
                    2a:bf:90:e3:7d:d7:c5:98:9d:ba:67:6f:6e:83:78:
                    72:b7:b1:cd:86:d6:39:83:14:3f:49:3d:0a:91:0e:
                    6b:cd:48:05:1d:ed:35:5e:3f:b6:df:91:93:5d:b0:
                    39:d7:ce:cc:9b:d6:c2:55:26:41:02:a6:8d:b8:0e:
                    0b:4f:e2:17:0a:f6:5e:0c:bd:0f:ea:d5:0b:56:7f:
                    40:d6:30:99:09:84:40:ce:9d:0f:70:06:f2:de:5d:
                    46:6b:e4:36:e8:c3:19:f3:70:73:d6:d7:d7:52:54:
                    a9:c5:f6:87:23:a7:aa:a5:82:45:0c:75:40:12:f3:
                    67:ca:c8:32:85:64:48:37:f6:05:a7:59:e6:ca:32:
                    08:7a:f7:d6:95:07:60:94:07:14:4e:24:9d:9b:5b:
                    fb:86:e1:01:44:60:a7:06:ca:f8:16:33:a9:48:0c:
                    b6:fc:a2:a2:63:e9:84:bb:5e:07:98:e4:90:eb:fa:
                    44:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:13:F6:A1:19:4D:D4:88:E8:DA:E6:17:1C:F2:73:70:E5:9E:15:E4
            X509v3 Authority Key Identifier:
                keyid:C3:6C:F5:DE:25:33:9B:91:45:6E:5C:C2:31:72:48:B3:6E:A4:5B:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w2z13iUzm5FFblzCMXJIs26kW30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E070/808B4D6CBC1011EE8BEB137AC4F9AE02/w2z13iUzm5FFblzCMXJIs26kW30.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:1d:4c:02:3f:72:5d:c5:32:6c:78:29:5e:ff:c8:6b:7d:94:
         d5:05:6d:a8:79:c1:46:2c:48:bd:d1:28:7d:14:d8:b9:95:78:
         20:3e:ff:01:e3:02:f5:b5:88:fc:64:ad:b5:68:19:41:90:36:
         e1:39:e7:a4:6d:16:4b:9e:0c:19:10:1d:65:d2:00:c8:82:fd:
         93:eb:f8:32:9c:e0:7f:02:eb:b9:06:f0:66:fb:ee:28:7b:85:
         f5:2b:0a:8c:8e:e5:3d:1a:71:78:f2:1a:8b:e3:bb:86:f1:5d:
         d0:d0:d0:ba:53:9e:5b:dc:8b:5b:5e:99:f6:a0:2d:13:6c:9b:
         37:36:df:6a:88:53:a0:73:30:2f:35:8a:ab:ff:dd:1c:78:8e:
         c8:08:38:bc:d2:52:b4:8e:24:28:40:be:01:3f:48:2a:8e:b1:
         72:c9:56:1d:2d:16:e7:cb:ad:35:ec:de:57:38:66:83:49:5d:
         24:f7:11:cd:31:94:90:dc:7b:5e:f5:db:84:a8:0b:aa:f6:bc:
         93:3f:0d:cd:04:d9:a6:c9:11:c7:8c:e9:fc:89:33:d5:9a:8e:
         f3:76:de:e1:b5:3e:8d:71:60:29:44:99:dd:5a:5f:66:cc:60:
         24:82:38:c5:ff:96:6b:e2:5e:f3:87:12:f1:f6:d3:57:5c:af:
         31:2b:b1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:55:13 2025 by rpki-client