Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
File:                     t88LJwp_2x1xeui5edHuD_iL1E8.mft (raw, json)
Hash identifier:          /OJ7Irx6wscFdg5Yj+mwXzgRCUQ3nAyMddduJL2242I=
Subject key identifier:   CF:FE:0C:26:EB:43:60:FA:E4:23:E9:D1:EE:76:5B:02:36:F8:9B:A9
Authority key identifier: B7:CF:0B:27:0A:7F:DB:1D:71:7A:E8:B9:79:D1:EE:0F:F8:8B:D4:4F
Certificate issuer:       /CN=A915B50D/serialNumber=B7CF0B270A7FDB1D717AE8B979D1EE0FF88BD44F
Certificate serial:       8F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t88LJwp_2x1xeui5edHuD_iL1E8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
Manifest number:          8C
Signing time:             Sun 15 Jun 2025 05:39:14 +0000
Manifest this update:     Sun 15 Jun 2025 05:39:14 +0000
Manifest next update:     Sun 22 Jun 2025 05:39:14 +0000
Files and hashes:         1: t88LJwp_2x1xeui5edHuD_iL1E8.crl (hash: KpSTXBRhLaooCB3kt9ct2wcwuAtYpssx7GNPygRf5/4=)
                          2: 85CDB6087C1211EF8E490677C4F9AE02.roa (hash: KFCUhuojUE9z3vG4Nxdn/HgqQMitwPXfCwdmjU8xUaI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.crl
                          rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t88LJwp_2x1xeui5edHuD_iL1E8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B50D, serialNumber=B7CF0B270A7FDB1D717AE8B979D1EE0FF88BD44F
        Validity
            Not Before: Jun 15 05:39:14 2025 GMT
            Not After : Jun 22 05:39:14 2025 GMT
        Subject: CN=684e5c82-1482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3c:81:53:e2:75:5a:23:85:d5:b7:17:1d:29:
                    fb:1d:fe:e4:cc:60:a7:4d:60:aa:ec:21:9e:4e:d5:
                    43:e6:b9:4b:62:3c:00:d4:d8:a3:4b:c6:d1:55:32:
                    7c:5a:70:0c:5d:c4:ba:ab:ba:72:c0:83:8b:e4:89:
                    80:82:b0:e1:c3:49:8e:a8:ed:b3:ae:36:8f:1e:98:
                    c8:bc:b6:f5:3e:10:cc:4f:11:05:dc:9c:79:b9:0e:
                    9f:a1:d1:7f:d0:df:bc:cf:14:08:8c:93:0a:7c:f1:
                    6d:28:85:d6:c4:35:08:cc:cc:59:fb:7e:69:8b:98:
                    d3:48:34:fa:ed:bd:ff:fb:ad:14:3a:68:00:4c:52:
                    c6:c3:c4:fe:c4:53:62:11:de:3b:9d:44:7e:ce:e8:
                    d3:9f:41:f3:8b:40:e3:42:73:ff:e8:2a:f5:1a:6f:
                    4c:2a:4e:5b:db:a3:e6:cc:50:a4:29:22:3c:67:a3:
                    f9:b7:88:05:df:e1:32:83:76:13:c9:d4:79:42:1b:
                    09:90:ce:7b:e1:db:89:e6:5f:f8:ac:77:0c:b5:6b:
                    b3:51:53:90:af:72:4c:c6:08:98:89:b0:ba:70:1a:
                    dc:9c:07:02:39:35:5a:49:36:5e:30:65:d1:9f:97:
                    98:8e:36:10:6d:b1:fc:19:5e:44:a4:a1:1a:68:2e:
                    70:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FE:0C:26:EB:43:60:FA:E4:23:E9:D1:EE:76:5B:02:36:F8:9B:A9
            X509v3 Authority Key Identifier:
                keyid:B7:CF:0B:27:0A:7F:DB:1D:71:7A:E8:B9:79:D1:EE:0F:F8:8B:D4:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t88LJwp_2x1xeui5edHuD_iL1E8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:8f:6c:e4:c3:c4:1b:d5:5c:a4:d1:0b:a4:2c:e5:48:4f:c4:
         b3:91:ab:18:ec:f0:c5:68:26:1f:a7:27:89:26:40:a2:30:75:
         dc:e2:81:99:a7:1b:91:eb:88:aa:34:b7:e4:93:d7:6c:5f:5a:
         8f:01:f9:2a:2a:69:79:0e:ca:22:ad:34:a0:d8:10:6d:f4:17:
         9d:21:6f:60:f5:1b:09:ff:bf:5d:af:9a:95:17:dc:ba:ff:70:
         4b:4b:88:ee:31:1d:99:2f:55:9a:e1:4d:93:bc:8b:b4:4e:da:
         44:69:3a:b0:6a:ea:7a:4f:3e:8f:84:59:b7:44:f6:18:88:6f:
         7e:83:ae:e7:ed:fd:ea:9a:38:03:8a:e9:6b:47:81:11:9f:5a:
         c1:44:bc:b3:ef:e8:bc:8b:b8:e3:7c:24:2b:11:9c:fc:f5:6c:
         47:2c:01:d5:28:89:82:ae:f2:ac:db:aa:e8:fb:f5:6f:8e:ff:
         18:7a:71:66:5e:e1:e9:c1:dc:f7:21:2f:97:3f:32:89:10:3c:
         a8:9b:c8:79:60:88:ef:f9:3a:84:1b:4c:a6:bb:56:af:1d:80:
         80:3b:4a:9e:d9:10:2a:6e:c3:66:f3:c4:44:d0:b2:ff:4e:9a:
         59:d1:3a:46:cf:1c:ee:ed:60:63:5d:2b:65:de:5e:73:00:71:
         66:30:12:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:22:29 2025 by rpki-client