Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
File:                     scNHRW5UpGYuEJfs0zSsEcAs4As.mft (raw, json)
Hash identifier:          ABLNXR/tytosDSU2ygUrMNfuY7QWe0QSc75gpE/95L4=
Subject key identifier:   46:DC:EA:13:8D:AB:A5:DD:42:99:AF:6D:BC:E0:39:DA:3C:6E:54:7C
Authority key identifier: B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B
Certificate issuer:       /CN=A9160438/serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B
Certificate serial:       06F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
Manifest number:          06E3
Signing time:             Fri 08 Aug 2025 22:24:11 +0000
Manifest this update:     Fri 08 Aug 2025 22:24:10 +0000
Manifest next update:     Fri 15 Aug 2025 22:24:10 +0000
Files and hashes:         1: scNHRW5UpGYuEJfs0zSsEcAs4As.crl (hash: CVRhkEexxcGYmbEBS48aCSsy5YnkP/VGLDH1K8kb98Y=)
                          2: 31D902165E7311EB8B143F3BC4F9AE02.roa (hash: OYtL36rrodU22MW3AXpoCDtJg7l4ViMqS4bFk3tK5VQ=)
                          3: 31137FAA5E7311EB8B143F3BC4F9AE02.roa (hash: ivarDOVLEK1o/i2e326AVwZq4fhbkuq+7lnjx1EVCHE=)
                          4: 3263B6905E7311EB8B143F3BC4F9AE02.roa (hash: gBF4oLr31oWPGA7GjogpSpsWc/XlGgo5urUgCfPiOZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl
                          rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1782 (0x6f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160438, serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B
        Validity
            Not Before: Aug  8 22:24:10 2025 GMT
            Not After : Aug 15 22:24:10 2025 GMT
        Subject: CN=6896790b-4e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:55:d4:78:9e:c9:78:06:d3:5f:17:3d:19:78:
                    c4:5c:c4:60:e0:0c:b2:5c:25:ef:95:a5:e0:4d:d7:
                    cf:5e:f4:1b:84:53:1b:45:35:6b:a0:5a:31:84:a0:
                    df:5d:42:d3:b5:0f:e2:06:50:2a:7a:42:57:d2:ca:
                    1b:2f:60:df:2d:ca:06:8c:d1:2a:9b:05:1f:9d:9a:
                    28:8e:c7:74:d6:5c:65:3b:1e:06:02:a8:47:c1:6c:
                    c7:ce:d5:da:5c:4a:06:09:54:45:eb:1c:fa:0c:47:
                    45:f9:b6:8f:91:3c:d0:0f:2e:4f:3a:0a:16:26:9f:
                    c8:60:a3:77:4e:79:54:97:9c:53:f2:4f:3c:73:c6:
                    32:10:64:39:e3:07:e2:54:b9:f6:bb:3f:bc:e5:4e:
                    f4:2b:bb:3e:c5:73:dc:0b:6a:b6:68:07:ec:a9:2c:
                    61:96:2f:1f:4b:47:f4:01:4d:66:92:f4:da:1e:41:
                    fe:10:ca:29:e5:f5:a1:95:b1:4d:e5:c2:ec:0e:5c:
                    6c:63:ba:bb:a4:70:e7:9a:00:fe:83:fc:6a:6a:28:
                    51:3e:26:e2:08:d2:1a:80:22:fc:40:40:e7:81:e7:
                    86:c3:35:0c:07:a1:16:e9:ca:d9:02:2c:27:0c:75:
                    38:d7:2c:18:52:ea:51:ed:1b:82:e9:40:85:60:14:
                    0f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DC:EA:13:8D:AB:A5:DD:42:99:AF:6D:BC:E0:39:DA:3C:6E:54:7C
            X509v3 Authority Key Identifier:
                keyid:B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:16:6e:10:7e:75:a0:0b:4d:0c:05:34:7b:db:d5:ef:4a:11:
         87:75:c1:56:f8:f1:1b:92:7c:62:cd:98:75:ff:89:7e:d0:e8:
         06:9d:3d:e8:1c:ef:82:a0:e1:f5:35:a0:3f:42:4f:34:4b:e7:
         ed:70:1e:55:ad:1c:40:54:83:08:16:dc:fc:48:fa:79:db:fd:
         7c:c8:82:7a:30:4b:8d:ad:e7:f1:34:52:cd:56:0b:27:30:26:
         28:ed:22:ef:55:15:1e:0a:0b:bf:f2:20:f1:8a:18:83:95:2e:
         36:80:23:ad:45:47:c8:bc:0d:fe:6a:56:09:0b:9a:ac:e7:bf:
         db:95:23:12:48:df:e5:87:06:90:ed:18:42:27:3a:79:8e:86:
         c2:01:55:f3:54:1d:ba:a5:ee:3f:af:c9:d4:3b:18:c5:84:ac:
         9f:82:41:35:3b:67:47:10:cf:35:ad:27:bb:b3:8e:4a:0a:2e:
         2b:f2:4a:e1:18:ac:41:89:eb:d4:4b:22:74:44:5a:5e:96:c9:
         03:13:4d:25:a8:65:7c:9c:2f:7c:fb:8d:59:24:0f:d1:6f:87:
         c2:8e:25:a8:38:7f:aa:2e:1c:1e:d2:56:ed:34:12:f6:8d:6d:
         ce:6c:82:70:bc:62:2a:54:4a:33:a5:b4:98:05:05:b4:52:90:
         92:9e:b5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:17:49 2025 by rpki-client