Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft
File:                     -JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft (raw, json)
Hash identifier:          2CFOKrO9sqUhaWRO34z0r6zL28p9fX2YZ2s4dYWKWiE=
Subject key identifier:   02:B4:66:94:7C:D3:D4:FD:8D:4E:6B:E9:21:48:6B:17:B2:1B:59:CC
Authority key identifier: F8:93:21:50:1C:07:65:E3:51:47:A5:5C:7E:7D:A5:CB:06:C2:9C:04
Certificate issuer:       /CN=A916BACE/serialNumber=F89321501C0765E35147A55C7E7DA5CB06C29C04
Certificate serial:       13F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft
Manifest number:          13EC
Signing time:             Tue 12 Aug 2025 17:02:39 +0000
Manifest this update:     Tue 12 Aug 2025 17:02:39 +0000
Manifest next update:     Tue 19 Aug 2025 17:02:39 +0000
Files and hashes:         1: -JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl (hash: rn7i1fpMSiyFniNK/8JYazJm1+leok0BqgdPMLDnOfE=)
                          2: 1774301E8AF211E89749376EC4F9AE02.roa (hash: 4zJ9/i0D6qT42odGNdGTQH8LvSwP3oB1L9xGXSlqgko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl
                          rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 17:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5108 (0x13f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BACE, serialNumber=F89321501C0765E35147A55C7E7DA5CB06C29C04
        Validity
            Not Before: Aug 12 17:02:39 2025 GMT
            Not After : Aug 19 17:02:39 2025 GMT
        Subject: CN=689b73af-969b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e8:a0:c6:c3:ea:2d:1d:33:f5:9b:93:5d:3d:
                    0b:b2:f5:a9:95:57:da:93:d8:7b:48:f4:1f:0a:7b:
                    f3:d1:3f:f1:e2:f1:f3:4c:d4:bb:52:67:ab:b9:ff:
                    41:35:84:1b:60:c7:dd:89:56:1c:e1:96:b4:b0:6e:
                    29:d4:e0:bf:7a:85:48:a1:13:d7:87:75:e3:34:32:
                    00:c7:e8:5f:23:da:f4:b1:c0:ba:4b:ad:d4:16:31:
                    59:a8:c3:8f:6f:90:db:ef:bd:3c:45:21:4c:86:75:
                    ec:18:e9:52:0a:e1:25:c0:82:fe:ef:f1:4d:a1:a0:
                    82:e2:cb:e3:d8:4b:1b:f9:ce:98:0a:b9:45:c6:0f:
                    99:d0:21:ac:38:f0:28:80:bc:63:4f:7f:47:1f:70:
                    c0:59:27:9c:f1:cf:3c:55:1c:24:65:cc:41:36:46:
                    a7:ed:6a:d6:dd:91:df:1b:6c:05:da:30:6e:10:a5:
                    49:21:64:67:23:b2:ee:bd:ef:ca:e0:3c:f9:d2:ba:
                    86:38:81:3b:9f:b1:90:27:b3:c2:25:bb:15:11:31:
                    aa:07:88:35:7c:a6:35:a6:4b:e8:0c:59:c2:f2:4d:
                    38:da:ae:61:bc:06:e7:32:38:af:11:58:19:8e:9a:
                    8e:d9:b1:5b:b8:fd:67:45:d9:d9:21:31:3c:bf:56:
                    58:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B4:66:94:7C:D3:D4:FD:8D:4E:6B:E9:21:48:6B:17:B2:1B:59:CC
            X509v3 Authority Key Identifier:
                keyid:F8:93:21:50:1C:07:65:E3:51:47:A5:5C:7E:7D:A5:CB:06:C2:9C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BACE/A662723C8AF111E899A7CE6DC4F9AE02/-JMhUBwHZeNRR6Vcfn2lywbCnAQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:d5:1b:64:d8:6c:94:68:35:d7:17:bb:d0:d2:25:5d:31:e6:
         bf:07:06:c1:b0:a7:bd:e3:b6:8e:86:ab:3e:75:19:7f:a6:cb:
         44:f7:f4:0c:0b:0a:43:ff:1e:06:6d:dc:24:ba:03:a0:c3:f8:
         40:16:ac:5f:9b:54:8e:27:16:e5:b2:ee:ed:f9:37:27:59:c9:
         78:ad:57:8d:ee:83:6b:bd:9d:e8:3a:ed:2e:17:e6:dc:2a:bd:
         54:9c:99:53:91:1b:31:f6:50:b0:05:bc:5b:e9:08:7a:03:8c:
         f3:6f:0e:74:22:69:75:a1:d5:a7:dc:ef:86:b6:ea:9d:e6:7b:
         98:56:84:6a:ee:91:2d:f1:bf:3e:c8:bd:29:f8:d7:53:3b:b4:
         10:9a:64:bd:a8:b3:3f:b2:62:50:fd:86:7d:b3:03:f9:10:8c:
         bd:a0:34:49:3c:20:ef:38:8b:32:1a:b1:9b:22:89:1b:8a:69:
         57:f3:c5:91:f0:c1:ba:b5:ad:b6:78:79:3e:1b:ab:a3:a8:c5:
         7c:8e:4f:97:a4:b9:55:88:8c:c3:b9:d8:97:ae:d3:f0:15:7b:
         c7:f8:a1:df:90:a3:1f:06:90:45:08:73:5a:e8:29:d5:6e:7d:
         a4:42:26:85:89:17:8b:44:81:34:4b:0a:4a:38:14:28:3b:91:
         df:d6:1a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:30:40 2025 by rpki-client