Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
File:                     G0PzVWVtEI4w0YQ03rV5PPagGjA.mft (raw, json)
Hash identifier:          4VZ3e89SfEn7+100sK1UhLyQGE555jaf4gQJ2NObSME=
Subject key identifier:   73:71:3F:A7:EE:96:D6:37:00:BB:90:8F:8C:C7:8B:8E:F4:84:5C:6E
Authority key identifier: 1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30
Certificate issuer:       /CN=A916B0EA/serialNumber=1B43F355656D108E30D18434DEB5793CF6A01A30
Certificate serial:       0C5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
Manifest number:          148E
Signing time:             Tue 12 Aug 2025 18:44:37 +0000
Manifest this update:     Tue 12 Aug 2025 18:44:37 +0000
Manifest next update:     Tue 19 Aug 2025 18:44:37 +0000
Files and hashes:         1: G0PzVWVtEI4w0YQ03rV5PPagGjA.crl (hash: jrsf+GWv7byZ69aFzpUFy5BQoGRlsNzsmMp42E20ROs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.crl
                          rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 18:44:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3164 (0xc5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B0EA, serialNumber=1B43F355656D108E30D18434DEB5793CF6A01A30
        Validity
            Not Before: Aug 12 18:44:37 2025 GMT
            Not After : Aug 19 18:44:37 2025 GMT
        Subject: CN=689b8b95-3795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:be:3c:19:94:66:10:c6:3d:91:2a:23:1e:6b:
                    8b:43:f2:55:7c:6c:5e:ea:8b:db:e9:9c:e2:32:6c:
                    a3:0e:d1:17:76:0d:6a:5a:79:c8:a6:c8:a7:ea:48:
                    28:f3:64:8a:72:36:56:75:52:d9:fc:af:7a:f1:e5:
                    56:ab:15:35:57:ac:7f:79:15:0f:3f:fc:80:13:e3:
                    fc:39:bd:f9:8d:dc:4b:47:47:62:b8:b5:f1:71:96:
                    fa:83:a0:a0:80:e2:8c:de:6e:73:d8:b8:26:f4:87:
                    91:a1:e8:70:d0:27:45:75:15:d1:09:d0:ef:f2:fc:
                    13:49:fa:be:6a:64:04:9e:f3:8d:1a:96:cb:54:35:
                    50:90:cb:eb:1c:9e:f7:45:f0:e1:d9:17:1b:7f:9c:
                    f6:df:0d:4e:3b:57:ba:31:1d:ef:c7:db:2a:1d:ee:
                    49:02:54:24:a3:3f:de:3c:50:f1:da:cd:dc:f2:73:
                    e4:16:3f:7a:07:9d:02:2a:29:2a:15:41:ed:ed:f2:
                    e1:a6:fd:5b:16:9c:34:12:6f:6e:44:e3:85:9d:18:
                    fb:b4:a6:de:f6:f9:a0:9f:bd:1d:85:a1:75:46:da:
                    36:54:a6:4c:9a:5f:d1:81:0d:52:81:d0:5e:b8:2d:
                    b6:b7:f3:ee:b0:ac:20:27:4b:24:d9:eb:74:ad:58:
                    bc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:71:3F:A7:EE:96:D6:37:00:BB:90:8F:8C:C7:8B:8E:F4:84:5C:6E
            X509v3 Authority Key Identifier:
                keyid:1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e3:03:59:a3:7d:4e:47:78:62:84:93:a6:a2:55:57:04:45:
         94:d1:35:73:b0:74:b5:4c:e4:e8:32:bb:61:70:ec:97:71:96:
         0c:4d:d7:e0:51:7c:c5:51:b6:79:5a:b3:a9:90:e2:d9:49:c8:
         59:9d:a3:b4:f5:be:8c:dc:91:77:53:62:69:62:0e:3f:7e:d8:
         db:8f:e0:73:c7:99:c2:9a:24:8e:7c:27:91:fb:60:21:82:54:
         99:cf:af:8d:5f:0a:2e:98:d7:80:8b:df:49:b1:73:e5:66:f2:
         e5:ba:ff:5f:48:4d:2c:93:66:80:6a:b0:33:82:b1:a2:a2:9f:
         2b:7c:1c:83:88:17:a1:24:c0:e9:12:95:73:b8:5c:4e:e6:20:
         c9:a9:a5:f6:81:25:a9:2f:89:f7:d7:7c:f0:34:99:38:c4:dc:
         13:25:e1:7e:0a:92:f5:18:71:84:b5:f2:95:f3:7d:a6:cb:e1:
         90:6e:78:6e:22:3e:9c:39:b5:28:25:c6:5d:b8:fe:56:3b:02:
         9c:0a:bf:6e:82:83:17:09:b6:6a:16:95:68:82:5e:b0:bf:7e:
         ca:12:e2:36:f5:51:68:20:7a:fa:d5:62:ac:d7:50:08:3b:3b:
         58:6c:65:cb:4e:67:d3:b8:f6:0a:25:3f:b0:18:23:8a:a3:de:
         03:ac:71:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:59:33 2025 by rpki-client