Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.mft
File:                     kDo4Q2eaCxBdykhcPWSPPREnL7c.mft (raw, json)
Hash identifier:          vikXlI4bf3EmSbOzmWjkmKKPw6pbKwkPbwkle+X+hiE=
Subject key identifier:   25:A8:CA:13:61:7E:2B:68:70:39:DD:CC:45:59:60:CF:FB:A5:7C:43
Authority key identifier: 90:3A:38:43:67:9A:0B:10:5D:CA:48:5C:3D:64:8F:3D:11:27:2F:B7
Certificate issuer:       /CN=A914E488/serialNumber=903A3843679A0B105DCA485C3D648F3D11272FB7
Certificate serial:       0267
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDo4Q2eaCxBdykhcPWSPPREnL7c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.mft
Manifest number:          0263
Signing time:             Sat 09 Aug 2025 02:18:40 +0000
Manifest this update:     Sat 09 Aug 2025 02:18:39 +0000
Manifest next update:     Sat 16 Aug 2025 02:18:39 +0000
Files and hashes:         1: kDo4Q2eaCxBdykhcPWSPPREnL7c.crl (hash: 5kFRgvkDXbe2EafOYkISnxOfmsOF4Djo51R37/CZAYw=)
                          2: 606EB6AE240911EDBFA59C27C4F9AE02.roa (hash: NNo4SAwO23W3h7iwFhvtQVGgAhn5LQhxSRbEa+xKr7I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.crl
                          rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDo4Q2eaCxBdykhcPWSPPREnL7c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 615 (0x267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E488, serialNumber=903A3843679A0B105DCA485C3D648F3D11272FB7
        Validity
            Not Before: Aug  9 02:18:39 2025 GMT
            Not After : Aug 16 02:18:39 2025 GMT
        Subject: CN=6896b000-5d73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1b:59:1f:11:ae:2a:34:00:f5:28:09:03:e6:
                    0d:91:7c:24:88:b2:e1:c3:63:ed:12:44:1c:12:38:
                    b4:6e:0a:67:4f:76:9a:ad:36:4a:79:38:42:08:f7:
                    07:c5:ea:63:82:0c:37:4e:32:13:1d:a0:6e:4e:33:
                    2e:24:53:c0:3b:34:39:83:92:ae:a1:ad:e2:5d:b2:
                    5c:c7:b5:47:e8:76:b9:2a:08:f9:c6:b7:0b:bc:c2:
                    25:7c:a7:97:92:81:c4:4d:cf:c6:94:e7:c7:6d:8d:
                    3e:d9:d7:66:d9:81:c0:a2:e2:52:bb:1c:f3:72:85:
                    68:2e:ba:83:c4:5b:f3:23:f6:07:3e:8d:4d:8f:8f:
                    41:56:91:20:a4:9c:65:26:3a:eb:9b:33:f8:e4:0e:
                    16:88:a2:86:22:32:d1:60:cd:fd:80:29:59:ad:af:
                    47:20:ec:87:7f:3a:78:ab:3c:d0:20:ef:cd:54:e0:
                    f2:3d:30:0b:e9:48:ca:f2:a3:a8:2f:fd:d4:33:33:
                    88:74:fe:97:ff:8a:43:fc:0f:3d:23:2b:fc:c1:aa:
                    9c:3e:78:17:7f:74:5e:4b:b7:b1:38:c9:aa:1c:4d:
                    14:d4:8c:76:d9:81:1c:6c:e5:7b:55:5c:de:1f:a6:
                    5d:98:47:be:83:60:08:98:35:d6:ec:a0:4f:5b:d1:
                    91:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A8:CA:13:61:7E:2B:68:70:39:DD:CC:45:59:60:CF:FB:A5:7C:43
            X509v3 Authority Key Identifier:
                keyid:90:3A:38:43:67:9A:0B:10:5D:CA:48:5C:3D:64:8F:3D:11:27:2F:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDo4Q2eaCxBdykhcPWSPPREnL7c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:79:b6:7c:d0:30:c0:4f:b6:59:7a:a6:21:e4:7e:a5:04:ca:
         27:4a:88:58:08:ca:8c:4c:05:bd:25:17:e2:c7:fc:52:8c:ff:
         2c:c5:0e:b9:de:29:d5:90:ff:5a:87:b1:34:25:0a:10:73:00:
         82:86:87:7a:f0:c7:77:ea:74:ec:5b:98:1e:6f:90:52:42:fc:
         ba:c5:ec:ae:13:81:c1:87:55:97:19:26:95:4c:2b:44:6d:b0:
         38:b3:61:b6:2b:cb:0a:5c:62:1a:60:2d:c2:63:84:f8:ef:0d:
         f8:f1:2f:46:1f:05:82:f4:73:03:8e:79:59:87:3c:2f:a5:ac:
         92:9e:26:bf:04:60:c8:ad:82:37:94:12:33:8e:15:ac:bc:31:
         c8:12:da:d2:e4:46:98:c1:d3:4f:1f:42:ef:8c:91:1b:cf:e1:
         d8:b6:27:e8:83:f9:37:8f:09:72:dd:82:f3:9f:1b:ac:3a:e2:
         6c:b5:e7:37:07:3a:ea:0b:d2:e1:f8:7e:c4:45:79:ed:91:30:
         df:6f:0e:23:d3:1f:76:48:c2:73:73:49:7e:e1:32:b4:b6:f9:
         3f:81:1f:02:4b:46:1e:be:a9:84:f6:0b:ec:15:72:2b:01:a4:
         57:09:6a:dd:29:6b:de:9f:7e:70:40:97:aa:2a:25:4f:e2:86:
         e6:dc:fc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:57:07 2025 by rpki-client