Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft
File:                     MjnArILZQnKmoJ37KpCmZzCbOHM.mft (raw, json)
Hash identifier:          1MB1odNGW+fUnuRUG/eYP2Fg/x5KpXRUTism+Csy+as=
Subject key identifier:   4B:C2:FE:34:09:FC:96:03:AE:5F:86:90:18:39:75:C9:FB:25:71:5E
Authority key identifier: 32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73
Certificate issuer:       /CN=A9152643/serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873
Certificate serial:       0470
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft
Manifest number:          046C
Signing time:             Sat 09 Aug 2025 00:38:00 +0000
Manifest this update:     Sat 09 Aug 2025 00:38:00 +0000
Manifest next update:     Sat 16 Aug 2025 00:38:00 +0000
Files and hashes:         1: MjnArILZQnKmoJ37KpCmZzCbOHM.crl (hash: 3ESeRlgw7CkjiEes8mICR5G5uUFS3m1MVUtaOoszkHk=)
                          2: 36837F32574A11EC911FAC86C4F9AE02.roa (hash: +23ZbgbMoVqy8WS3A424MrxHSnobech3EJ/pMbqrIKI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl
                          rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1136 (0x470)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152643, serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873
        Validity
            Not Before: Aug  9 00:38:00 2025 GMT
            Not After : Aug 16 00:38:00 2025 GMT
        Subject: CN=68969868-00ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:52:ca:4e:96:4f:c0:1d:0e:b9:e6:22:75:07:
                    a1:00:74:18:b3:24:76:6c:86:5f:fa:be:dd:67:ed:
                    e7:53:f0:94:ad:73:37:1d:54:f0:28:2e:e6:8d:3c:
                    4c:02:68:e7:8d:a6:c7:54:5a:e6:a4:54:4e:db:9d:
                    3e:e3:dd:6f:a0:ea:1a:db:fd:2d:b7:e9:c9:fb:70:
                    a9:2e:0c:fb:a4:f0:d8:16:c6:bc:11:20:89:80:48:
                    e8:82:93:8d:5b:df:34:d1:62:3c:10:42:8c:a5:79:
                    32:55:aa:29:c0:aa:76:e9:47:d9:f0:62:f7:81:c4:
                    59:7c:57:59:2e:1f:e0:4b:a8:b2:bc:b3:e3:1f:b5:
                    3d:02:aa:7e:ef:93:cf:89:00:02:4d:ff:5a:f9:2f:
                    03:ed:bb:ed:33:85:d4:5b:d2:fc:05:1e:58:42:94:
                    54:7b:47:f4:cc:b9:f5:7c:6e:1b:31:ec:c1:ba:9d:
                    5e:53:9a:e4:d0:e0:d2:f3:8e:3b:c6:9d:8f:d6:8c:
                    60:86:d4:e5:f7:c5:1d:bb:05:43:43:86:32:a3:db:
                    dd:e3:9d:0f:0a:2a:33:dd:36:a5:25:60:76:7a:7f:
                    a0:0a:20:89:79:e3:ef:a4:17:5f:83:48:93:5b:8c:
                    6e:01:4e:d6:cb:f5:0f:63:98:2e:b1:53:f6:36:39:
                    88:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C2:FE:34:09:FC:96:03:AE:5F:86:90:18:39:75:C9:FB:25:71:5E
            X509v3 Authority Key Identifier:
                keyid:32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:0a:4a:b3:4b:52:eb:97:31:c8:93:a7:cd:68:29:4c:f0:3c:
         4e:56:6c:52:c6:77:4a:14:48:50:6d:4c:9d:ee:06:c9:84:c9:
         71:71:ae:9f:a4:bd:37:85:a4:70:f2:d2:b5:ec:8d:69:5f:e5:
         11:61:38:92:72:6a:8a:22:d3:92:50:70:31:23:48:19:5b:4c:
         95:c7:b1:6c:f2:c6:ea:96:c4:7b:45:0b:50:ea:e1:66:fe:86:
         8b:e1:1c:1e:41:bf:b1:c8:6a:a7:05:12:18:8d:d9:04:17:75:
         91:52:8f:00:d7:91:94:24:36:d8:af:35:40:e0:02:d9:ba:2c:
         b6:68:54:b5:4b:ea:a2:13:fe:12:57:29:fa:da:d7:dd:36:32:
         af:04:26:47:66:61:9c:68:ea:d3:ee:6a:b7:c0:92:36:48:dc:
         9b:fb:21:6a:3d:fb:59:73:9f:fc:e9:e1:e0:ce:8b:41:4f:cf:
         fb:ef:9b:78:e7:41:db:b6:8c:8d:c5:84:bb:05:e0:4a:cc:33:
         45:02:9c:df:82:f2:69:cb:50:c1:83:89:fb:7e:a6:0a:b6:71:
         16:a4:36:8b:2e:eb:5d:9f:f6:08:3f:3e:ff:cc:de:7c:70:44:
         8b:0e:66:ff:63:bd:f2:ab:d5:28:d2:9b:92:31:84:a7:0d:6d:
         16:df:e9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:47:31 2025 by rpki-client