Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
File:                     3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft (raw, json)
Hash identifier:          SpmTM5u7VIeRBvkYYRPWq4Qw6h1b+RcAjeU8b6lOVn0=
Subject key identifier:   FB:A7:28:78:C5:91:89:27:E4:C0:76:40:B2:BC:61:60:99:9F:98:7C
Authority key identifier: DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81
Certificate issuer:       /CN=A915D8F3/serialNumber=DE87B667697D46F45505EAA123BAF686DB220781
Certificate serial:       0106
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
Manifest number:          0102
Signing time:             Sat 09 Aug 2025 05:27:34 +0000
Manifest this update:     Sat 09 Aug 2025 05:27:34 +0000
Manifest next update:     Sat 16 Aug 2025 05:27:34 +0000
Files and hashes:         1: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl (hash: 2FI8kZqZctsaZp4Gpb+RO1T+Nq8NrBMWregC0yKS4do=)
                          2: D47D55EEE5BB11EE8B36C249C4F9AE02.roa (hash: 8mrj6WG5h96Mu545OyQl3U5aMKI1r2gwobV+i2Zi3aE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl
                          rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D8F3, serialNumber=DE87B667697D46F45505EAA123BAF686DB220781
        Validity
            Not Before: Aug  9 05:27:34 2025 GMT
            Not After : Aug 16 05:27:34 2025 GMT
        Subject: CN=6896dc46-ef8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:67:ef:13:4e:19:0e:8f:fb:8c:61:41:89:d0:
                    6b:c7:27:fb:a0:af:16:b2:06:00:4a:2d:6f:3b:2b:
                    d0:52:37:fd:db:af:ff:50:d9:be:05:36:0f:1e:da:
                    c8:94:e1:9e:bd:35:44:54:52:95:98:c6:d7:19:05:
                    69:40:32:45:c8:7c:11:4b:91:43:b8:20:fa:71:18:
                    31:e0:58:23:54:52:fe:ed:1c:bf:c8:22:71:5d:57:
                    f4:9f:28:9d:13:ec:5f:77:eb:5d:2b:f0:79:db:51:
                    1e:87:23:30:a5:7d:75:f0:70:49:67:b1:8a:c3:e3:
                    10:2b:42:48:30:0a:87:9e:d5:02:86:0c:84:57:9c:
                    34:32:11:ab:71:ee:8d:55:85:7f:ba:c9:09:f7:36:
                    00:67:0f:74:a0:ce:21:d0:3b:73:d0:0f:c3:cf:a9:
                    cc:3a:d6:7a:b1:1f:55:89:68:7a:95:72:49:4b:72:
                    84:b3:fc:6f:65:77:d6:bd:34:a7:17:0a:a7:6b:53:
                    ba:c2:52:97:8d:d8:44:ce:e0:e9:2b:4f:b2:7c:2c:
                    00:93:4b:09:ff:7c:ee:ba:1d:79:62:22:10:54:b4:
                    75:c7:09:d1:89:d7:48:30:99:af:bc:a7:c1:da:4b:
                    12:39:bb:a1:64:f8:3b:52:8d:c5:0f:c0:67:b4:45:
                    23:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A7:28:78:C5:91:89:27:E4:C0:76:40:B2:BC:61:60:99:9F:98:7C
            X509v3 Authority Key Identifier:
                keyid:DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:6a:38:4c:b3:c6:d9:43:5c:23:25:c1:32:6d:2d:91:3b:22:
         48:bb:00:1d:91:61:2c:a4:5d:aa:4a:53:a9:90:b9:cf:9e:93:
         02:c7:6c:9e:05:21:bc:49:1a:2c:49:0f:dc:4a:1a:ae:fb:66:
         83:7e:a7:39:e6:98:d9:22:be:f0:a0:57:e0:56:d3:9e:af:f6:
         1f:50:59:ec:aa:1d:de:50:8b:13:2f:1b:0a:ad:18:19:3c:34:
         00:ea:f1:e6:f4:aa:5d:aa:ad:a9:8d:e5:6d:41:46:44:68:30:
         1b:1c:61:32:69:98:46:f8:09:f6:2a:d8:38:56:67:68:48:21:
         3e:14:9e:35:09:a4:c3:0f:1b:db:a8:a3:5d:e0:4a:af:19:c3:
         05:d2:73:be:77:f0:74:52:19:5d:10:2c:7b:c5:77:7c:1a:99:
         42:69:d6:e7:6a:c5:07:13:ba:8a:3b:2f:5d:3f:a2:f8:0d:91:
         1e:20:0d:11:c7:02:58:00:df:0c:48:d7:c5:8e:28:68:7a:76:
         b8:51:15:16:6f:92:43:96:3f:33:9f:65:a0:25:cf:5b:cf:20:
         2d:a1:9f:5c:77:32:d7:34:a3:77:eb:61:b3:c8:c8:e2:d9:cb:
         82:d9:17:cb:de:89:37:a7:dd:16:05:3b:3f:9a:3a:37:d5:c3:
         6a:c5:32:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:51:36 2025 by rpki-client