Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
File:                     4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft (raw, json)
Hash identifier:          MpUcC5LPgfe4SAwjxGVoH14/4RuYcWdQLh79m5nmwCg=
Subject key identifier:   32:56:6B:01:CC:74:AC:7F:25:AD:3A:E5:5A:6B:E3:C0:38:DC:DC:54
Authority key identifier: E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
Certificate issuer:       /CN=A914E600/serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Certificate serial:       A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
Manifest number:          A5
Signing time:             Tue 05 Aug 2025 06:44:34 +0000
Manifest this update:     Tue 05 Aug 2025 06:44:33 +0000
Manifest next update:     Tue 12 Aug 2025 06:44:33 +0000
Files and hashes:         1: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl (hash: chBvawlj4fB/hYG72cqYdnSKWCkP63fdqXmNjzfiYC8=)
                          2: D86268E877F111EFADAB6362C4F9AE02.roa (hash: vFQI0/WMzcqMUL954AE6vlA2OPOfqfsgIiFbV+UqtL4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl
                          rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 06:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E600, serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
        Validity
            Not Before: Aug  5 06:44:33 2025 GMT
            Not After : Aug 12 06:44:33 2025 GMT
        Subject: CN=6891a851-f06d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bc:bc:12:e8:fd:2e:33:ec:37:e7:2d:ae:c1:
                    69:62:d9:12:1a:1d:ab:63:81:a3:cb:89:00:d4:cb:
                    d3:22:e4:c8:01:60:bc:bd:97:11:2b:d6:00:3e:ad:
                    ce:14:41:d7:a3:76:bc:74:2e:48:70:83:f2:33:b7:
                    5c:4a:93:99:f3:2d:ea:37:8a:85:50:85:02:16:87:
                    d7:95:77:82:60:0f:f8:f1:dd:c3:5c:2c:e2:11:28:
                    82:72:84:e6:5c:3a:ea:a6:af:6a:94:8d:94:18:c7:
                    e1:5d:fe:ab:d6:72:32:5c:b8:fc:b7:f8:db:1e:ce:
                    46:04:f3:39:37:4f:32:64:1c:16:30:2b:97:ce:87:
                    3f:02:3d:9c:d4:10:67:8c:77:b4:55:cc:01:27:d0:
                    1f:67:6d:17:17:50:b7:5c:3e:58:36:9f:53:a8:03:
                    2a:c5:b5:1b:de:d4:b2:80:54:07:f4:9c:f6:bd:e3:
                    66:49:5a:4d:2d:ca:df:5a:97:d6:85:18:a7:01:d4:
                    69:89:44:17:5e:32:5e:75:4c:c9:c7:58:15:07:fe:
                    3c:4c:bf:30:b0:7d:84:b2:37:68:71:e8:42:eb:61:
                    2c:33:a5:a5:f6:7f:06:f4:89:52:32:be:1e:c6:f2:
                    79:03:a1:70:ce:09:1a:6b:34:41:20:1a:b6:53:15:
                    7e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:56:6B:01:CC:74:AC:7F:25:AD:3A:E5:5A:6B:E3:C0:38:DC:DC:54
            X509v3 Authority Key Identifier:
                keyid:E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:07:64:17:46:13:a0:2e:8f:e1:e7:ca:f3:5c:38:c0:ad:8a:
         d3:10:88:28:57:b4:bc:3b:b8:27:5b:e7:78:be:9a:b8:9d:78:
         43:65:ae:d8:1c:ed:2b:f7:3a:fa:d4:9a:8b:ae:a7:50:6c:73:
         50:67:7d:ba:8e:05:a7:9d:02:a6:97:06:14:69:85:93:d4:04:
         3f:a6:ba:8d:29:61:70:bb:83:38:ba:37:db:93:16:c3:81:08:
         dc:71:ad:8b:d1:4d:97:d4:cd:24:01:6f:78:80:3f:f0:2b:d5:
         4f:b7:47:05:6a:b2:59:4f:18:cb:6a:74:61:a7:3a:7d:e1:06:
         38:8e:4d:95:56:88:95:c4:3f:a4:2f:fa:80:9e:e0:fc:9c:50:
         1a:ef:04:70:97:f6:63:39:62:6b:83:99:52:d4:92:22:b5:c3:
         79:fe:33:55:27:9b:c0:a9:6a:6a:dd:9a:8e:ea:45:f6:25:f7:
         ed:5d:06:26:b0:bc:ee:cb:f0:54:6d:17:4e:00:a3:27:9d:b3:
         d9:19:b0:64:07:c9:e0:61:2d:7f:a4:87:d1:8b:24:6f:1c:55:
         65:d7:6f:a8:92:ca:13:69:17:91:9b:78:99:0a:5f:be:b5:1f:
         e6:c8:ea:0b:89:9e:a3:52:e9:0d:2e:68:d4:b1:a1:5e:48:55:
         3b:27:e1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:03:03 2025 by rpki-client