Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft
File:                     w97H_d1FyVFyYIZPqe68_nuLz1c.mft (raw, json)
Hash identifier:          2jvoIUSVLLxQ9B+AeAhJQ+kLARYm/BpvT6SdxZi0/fo=
Subject key identifier:   A9:4B:32:E8:F7:A5:4A:E7:07:18:7C:76:D1:EB:90:85:49:C0:0C:70
Authority key identifier: C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57
Certificate issuer:       /CN=A9159234/serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57
Certificate serial:       058A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft
Manifest number:          057C
Signing time:             Fri 08 Aug 2025 23:45:37 +0000
Manifest this update:     Fri 08 Aug 2025 23:45:36 +0000
Manifest next update:     Fri 15 Aug 2025 23:45:36 +0000
Files and hashes:         1: w97H_d1FyVFyYIZPqe68_nuLz1c.crl (hash: 8rWtfu+qgKwNW+0A/ZI23zsvaD32qnp3m2otiafsibM=)
                          2: B58C9578378011ECA9E26B5AC4F9AE02.roa (hash: ZDchGQlVuJ+QjHKNA7YoG+7MDRY2/kTvBgBCNq57J7M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl
                          rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1418 (0x58a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159234, serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57
        Validity
            Not Before: Aug  8 23:45:36 2025 GMT
            Not After : Aug 15 23:45:36 2025 GMT
        Subject: CN=68968c20-574f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e7:31:9b:1c:8d:ce:73:c0:53:ac:29:7e:7d:
                    ff:d0:9f:e0:5c:83:5d:a3:a7:d2:38:8e:38:96:e6:
                    97:e7:26:84:0c:56:3f:1d:60:be:a2:a0:35:4f:a7:
                    83:16:df:11:1d:00:c3:d8:75:ed:21:64:6c:e4:2b:
                    b9:4a:28:55:39:a4:e4:87:12:d9:69:03:2f:40:40:
                    64:d3:ba:9b:82:2f:50:26:d1:12:6f:7b:d8:da:89:
                    79:4f:f1:0c:83:d4:eb:a5:57:ba:c5:9c:ca:8e:57:
                    ea:9e:a9:87:73:8b:d7:4e:8e:6b:11:cd:04:53:a9:
                    b0:92:52:38:2a:5f:3e:a6:87:a0:8a:41:83:4c:70:
                    d9:7a:89:67:72:b3:3f:6a:dd:a3:b1:20:78:ca:80:
                    04:fc:b9:2a:18:dd:66:c1:bf:79:21:f6:bc:ec:2b:
                    18:d6:ec:d5:f4:00:49:1c:0b:73:93:45:4d:ba:73:
                    6d:94:d9:5c:dd:18:cb:d0:0a:7d:3e:92:d6:bf:b7:
                    4b:f3:05:00:c1:5d:67:c1:71:dc:e0:f0:6a:78:a2:
                    e0:5c:10:38:16:4a:54:7b:6f:f3:fd:1b:b8:ed:2d:
                    fe:e8:1a:cd:09:03:0f:dd:cb:b1:76:c3:62:87:80:
                    6c:3b:f9:75:68:58:bf:14:f9:16:92:f8:9f:96:81:
                    73:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4B:32:E8:F7:A5:4A:E7:07:18:7C:76:D1:EB:90:85:49:C0:0C:70
            X509v3 Authority Key Identifier:
                keyid:C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:30:81:16:fa:7a:72:b2:25:8e:64:79:73:c6:55:02:be:0e:
         0a:eb:7c:2f:a1:86:d2:4e:ae:e2:0d:4b:3d:c2:c2:de:83:ad:
         e1:3c:87:ea:f0:3d:ab:ee:92:2a:0a:02:78:51:08:d0:55:39:
         d6:cf:1d:61:8c:09:9e:3a:ed:39:f1:b0:2e:6f:1d:ae:de:d4:
         93:97:4e:d3:02:ed:57:ba:e6:00:1d:43:b8:ae:88:de:b0:8e:
         4b:28:a1:f8:fc:43:b3:77:f9:c0:5d:af:74:85:f7:e5:c5:dd:
         05:9e:dd:f4:93:8c:6a:90:bf:72:21:00:e2:38:76:46:e1:5e:
         48:c0:58:1c:3a:cf:e7:e9:50:05:c5:9c:91:58:71:a3:e6:6d:
         6c:ba:ea:73:fd:8e:a9:34:83:f0:f6:3a:8b:58:d7:97:e4:fa:
         f5:3d:62:f3:19:5f:f2:91:74:a8:58:aa:cd:df:ee:6d:ab:96:
         b8:33:73:3d:81:9b:16:fd:8d:50:a0:c8:11:69:41:0f:f6:f9:
         c0:a5:d3:31:e2:e1:e3:0a:30:94:78:56:c5:fd:cd:90:28:4b:
         cc:d1:91:e3:46:86:4b:40:ec:1a:d3:c7:ab:26:ee:54:84:14:
         53:64:56:65:41:b1:a3:a1:ac:5e:ed:fb:bf:7c:9e:82:d6:19:
         74:9e:96:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:19:22 2025 by rpki-client