Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
File:                     T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft (raw, json)
Hash identifier:          PmiqRCJ39cpOsMjrUcOs/L4EJMysJgXltEKnHZriYdE=
Subject key identifier:   93:B3:5E:9A:12:13:C6:09:43:54:46:8A:B3:D8:B0:C6:4E:19:D5:43
Authority key identifier: 4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A
Certificate issuer:       /CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
Certificate serial:       039D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
Manifest number:          0398
Signing time:             Sat 09 Aug 2025 01:19:17 +0000
Manifest this update:     Sat 09 Aug 2025 01:19:16 +0000
Manifest next update:     Sat 16 Aug 2025 01:19:16 +0000
Files and hashes:         1: T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl (hash: PY1R5k2D17P5Wr8oqO19TrK32+ohncKH/IqywbxDrnk=)
                          2: 82FF48B4AB3C11EC9D6C1668C4F9AE02.roa (hash: rWvQOGaQUF4KDCbeAOUg2IDrYzmM2mMdECYdn3UKK/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl
                          rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 925 (0x39d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DC7C, serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
        Validity
            Not Before: Aug  9 01:19:16 2025 GMT
            Not After : Aug 16 01:19:16 2025 GMT
        Subject: CN=6896a215-2781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:03:22:ae:5a:9a:c2:9c:50:3f:27:e2:de:15:
                    7b:55:a4:e4:41:98:2c:71:eb:01:0f:15:13:c7:98:
                    88:ae:e8:0d:66:60:14:1e:9e:52:ab:cd:56:6d:6a:
                    4a:32:bc:81:8a:0b:80:da:cd:f0:36:e9:44:ab:04:
                    a0:b6:cf:67:5f:df:fb:97:8b:91:04:86:39:2b:56:
                    3b:ac:03:21:d7:f2:d2:ba:cf:06:54:d2:38:cb:02:
                    75:e6:56:11:b9:3c:05:18:4d:92:7b:e1:31:f2:95:
                    eb:ae:e5:7b:94:32:4f:67:de:ea:e7:69:81:65:4c:
                    09:72:7e:08:ef:88:f7:63:73:8b:88:27:2b:de:2e:
                    fc:b4:95:59:51:75:ac:0b:55:fe:cd:06:4f:1b:9d:
                    79:b2:ad:94:15:f4:ba:e2:09:44:cf:5e:03:8c:0d:
                    0f:7a:9d:39:45:32:4c:e4:93:d0:d3:12:d5:30:d8:
                    01:87:6a:5e:33:5d:fe:7b:6a:18:d8:65:4e:ca:76:
                    88:c0:19:e9:9c:9a:df:4b:17:d6:9a:60:59:99:d5:
                    aa:f6:38:23:c4:7d:91:e4:b4:0e:ea:2f:12:ac:69:
                    63:c3:61:96:bb:33:f4:81:d6:b4:9d:31:57:d0:66:
                    a2:8b:f1:a2:87:30:9a:9d:ec:5d:34:f4:b9:18:1c:
                    84:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B3:5E:9A:12:13:C6:09:43:54:46:8A:B3:D8:B0:C6:4E:19:D5:43
            X509v3 Authority Key Identifier:
                keyid:4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:46:3b:a8:c6:2f:39:2e:55:88:e9:a0:db:2b:29:01:84:6a:
         b1:5c:38:ea:72:03:eb:3a:60:c2:be:e2:0d:d8:70:5e:c5:ec:
         90:c3:25:df:0b:83:bc:4a:ff:70:79:19:67:ca:21:1a:b7:04:
         6a:71:06:77:fc:7f:8c:d9:99:9b:66:48:b9:31:e8:d1:3d:75:
         de:12:4d:10:b1:3d:20:da:e7:fe:4c:90:c5:3d:5a:cb:69:72:
         81:06:c6:36:90:11:09:d3:83:47:37:7d:05:3c:16:72:3c:10:
         e1:a1:e1:a1:6a:5d:01:7c:f4:07:a1:25:aa:af:75:01:00:4f:
         11:40:60:cd:1a:fe:80:6a:fe:d5:bf:9c:14:f6:f4:d6:57:40:
         1e:21:2e:23:c2:ea:c7:35:dc:4e:cd:50:40:90:ee:ae:61:8c:
         8d:fb:e9:10:d6:98:55:5a:f1:45:2c:74:bb:0b:16:8c:c0:b9:
         74:1f:0b:9f:32:c3:98:c5:21:a7:d5:fb:0d:83:fa:b7:b6:d8:
         e1:0f:ee:2f:8e:5d:22:92:46:64:aa:58:4e:50:ec:04:ae:53:
         ac:01:3e:f9:ae:79:98:bc:21:be:1b:5b:06:8d:10:16:32:d0:
         34:00:62:c5:45:3b:3e:9c:db:bf:9b:b1:83:12:91:41:c4:1f:
         c5:9a:17:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:36:48 2025 by rpki-client