Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft
File:                     mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft (raw, json)
Hash identifier:          gqP/3vJd+W3qHNnMb4JtE59H/Z4LoQPvMhJfZgklDJQ=
Subject key identifier:   81:0B:F1:5B:09:5A:8D:16:1F:95:59:F4:BE:8B:5F:32:49:50:91:47
Authority key identifier: 99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7
Certificate issuer:       /CN=A915F598/serialNumber=9976FB716D2FA39BBD473C6B34F1F3BD681A53E7
Certificate serial:       3487
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft
Manifest number:          3486
Signing time:             Fri 08 Aug 2025 15:23:26 +0000
Manifest this update:     Fri 08 Aug 2025 15:23:25 +0000
Manifest next update:     Fri 15 Aug 2025 15:23:25 +0000
Files and hashes:         1: mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl (hash: SMxalOJevnHeTWGu0nM6dCIwVF8438RJ3ibrOjKGf88=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl
                          rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13447 (0x3487)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F598, serialNumber=9976FB716D2FA39BBD473C6B34F1F3BD681A53E7
        Validity
            Not Before: Aug  8 15:23:25 2025 GMT
            Not After : Aug 15 15:23:25 2025 GMT
        Subject: CN=6896166e-2cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:98:10:19:0c:20:ce:8d:fc:65:31:40:7f:d6:
                    f2:8c:ca:c1:15:50:97:38:7a:c2:3f:70:0e:15:f2:
                    be:dd:8f:cf:17:32:70:dd:15:59:64:16:a7:f3:56:
                    70:3c:0e:d9:10:01:e5:d8:23:ee:aa:d2:04:33:f5:
                    a3:63:4f:23:c9:62:58:59:3e:ae:c4:57:15:98:ec:
                    ff:6c:fa:91:64:6e:97:56:da:b3:77:d7:0f:33:19:
                    b6:00:ab:a4:85:7f:eb:a9:ca:b4:f8:d4:f5:24:01:
                    de:23:c5:f5:96:39:87:a5:12:a9:09:ce:e8:e2:46:
                    f4:38:3e:7c:7b:ab:17:fa:f2:ff:ab:b0:6f:50:5f:
                    68:31:4b:50:b5:4a:e5:e9:bf:58:4e:81:14:58:92:
                    91:52:dd:5b:0b:cf:08:3f:8b:26:07:24:e8:2b:90:
                    33:f8:16:50:62:20:f5:9b:81:17:23:7a:4f:e6:66:
                    0c:7d:b2:a0:b7:49:51:a6:c9:28:9d:64:00:72:12:
                    b1:32:13:c7:d8:71:45:14:7d:6b:fa:68:ca:5e:0f:
                    57:12:32:c4:61:b9:f1:00:4b:dd:af:38:5e:b4:73:
                    2f:f5:92:f0:c4:0f:5c:22:a8:8b:26:68:42:0c:82:
                    e2:70:1d:c5:f6:1f:a1:35:44:fd:5b:f6:24:2c:41:
                    c5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0B:F1:5B:09:5A:8D:16:1F:95:59:F4:BE:8B:5F:32:49:50:91:47
            X509v3 Authority Key Identifier:
                keyid:99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:3a:50:2d:67:e5:b9:2e:9c:7b:78:94:b5:2e:a8:bd:bb:a2:
         fd:4a:18:fa:3a:56:a9:f3:5f:72:11:7f:c4:4d:61:e0:df:1f:
         7a:eb:b5:d6:09:58:c1:de:7a:65:3e:6f:73:19:f2:7a:04:89:
         e7:d7:f3:9e:02:39:d4:95:a4:b1:cd:d8:c4:c8:80:01:3d:38:
         e9:10:39:4b:b4:cb:ad:8e:93:d8:56:a3:8d:2a:d8:b4:08:31:
         77:3a:4c:d9:1d:69:57:1f:01:23:af:e0:91:76:88:ad:71:54:
         db:66:e8:6c:d5:32:79:f7:55:c8:7b:74:39:e9:79:85:aa:99:
         68:65:58:9f:ff:00:50:7c:9a:47:06:7c:0d:60:52:bd:0b:ae:
         3f:f4:05:c3:99:81:c0:ed:e2:03:57:40:59:71:3a:56:0a:c7:
         fe:5d:97:0d:bf:1c:da:f0:ca:a9:85:0c:42:b7:d0:00:ba:1e:
         58:be:05:a9:e5:d1:db:11:01:6a:08:43:1b:99:a6:69:42:82:
         ec:22:21:66:f3:c1:ac:44:29:ec:f6:b7:9f:96:d6:a7:7c:c6:
         52:60:a5:2d:f7:4c:c7:a7:d6:ed:15:25:aa:02:66:19:74:5d:
         91:0f:38:d0:c7:10:0d:e1:46:5c:7b:70:a9:a5:d3:a2:bc:d0:
         b6:d7:f5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:10:47 2025 by rpki-client