Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft
File:                     azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft (raw, json)
Hash identifier:          R4Uk2llZRD0eYMwwrxQwPozqjOKC70AsDdx69TEstIY=
Subject key identifier:   2A:6D:E7:9B:FD:85:24:33:3D:F2:54:A1:75:EC:44:FA:5E:62:8A:B8
Authority key identifier: 6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4
Certificate issuer:       /CN=A917B1EE/serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4
Certificate serial:       013D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft
Manifest number:          0137
Signing time:             Sat 09 Aug 2025 04:57:18 +0000
Manifest this update:     Sat 09 Aug 2025 04:57:17 +0000
Manifest next update:     Sat 16 Aug 2025 04:57:17 +0000
Files and hashes:         1: azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl (hash: L+o+vaw2tC4ULgipTXBMuDKVjKrBnGqxSA+5XeBop2s=)
                          2: 0F7A0CD4C72E11EEAA6B423BC4F9AE02.roa (hash: lqNFFXORI79Tp9nH7sxtcuWMLXX1DbMNSF2W2W7xgQw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl
                          rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B1EE, serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4
        Validity
            Not Before: Aug  9 04:57:17 2025 GMT
            Not After : Aug 16 04:57:17 2025 GMT
        Subject: CN=6896d52e-79d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3d:ce:e4:69:e5:ee:40:f5:e0:39:5d:60:7b:
                    0f:53:e9:76:bc:05:75:aa:17:67:9a:e3:21:bf:d8:
                    33:32:34:84:7d:a2:43:18:ff:8d:27:cb:05:4e:91:
                    87:b2:b4:53:26:cd:c8:ab:3b:14:3f:06:5a:39:5a:
                    1f:ac:fb:6c:ce:a3:8d:21:e0:44:4b:f0:3b:11:a1:
                    d5:d2:65:15:8c:46:0f:b4:cd:df:af:20:b0:e9:ca:
                    26:39:dc:8d:d8:57:a1:11:f6:80:d7:7a:2d:de:22:
                    04:21:fb:b8:4d:40:3e:53:a0:5c:f9:c2:22:f4:73:
                    96:49:a6:74:f0:67:e1:20:f4:36:c6:13:18:6e:bb:
                    00:86:d6:37:09:26:b1:53:80:00:77:d4:15:4d:29:
                    31:05:d3:67:67:6c:2a:c9:83:46:13:23:2f:49:6d:
                    79:07:8a:5d:af:de:50:58:b4:66:a9:d0:7c:ba:ed:
                    31:26:b4:6b:6d:8d:ba:51:e3:b0:ba:fb:33:ca:4a:
                    de:12:64:2c:42:07:77:4a:54:6e:df:3e:4a:79:ca:
                    b7:98:08:48:00:aa:1a:b4:9a:55:7e:34:37:c2:db:
                    2b:c8:16:73:c0:a4:fd:52:ff:dc:49:94:f0:a7:2d:
                    4e:52:8f:41:98:2a:2d:0d:48:57:f0:b7:4c:e6:56:
                    b4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6D:E7:9B:FD:85:24:33:3D:F2:54:A1:75:EC:44:FA:5E:62:8A:B8
            X509v3 Authority Key Identifier:
                keyid:6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:25:b2:51:8d:e8:a3:7d:bd:27:1e:4a:13:43:ea:eb:c3:3d:
         31:70:0e:bf:a2:d8:fe:b5:52:f1:ad:06:20:df:ff:ab:d6:5a:
         4c:10:72:12:a6:06:d4:b3:8c:b3:f2:a2:e5:5e:56:24:07:b2:
         5c:07:10:97:fb:f7:58:d1:8f:88:e4:cb:64:f0:5f:a6:bc:0e:
         3f:2f:6f:93:e8:9a:88:d5:d9:11:2b:26:72:a9:38:27:07:7f:
         2e:e9:cc:9e:26:f0:b5:32:ea:9c:c4:4f:7c:18:a9:34:b0:0d:
         2a:30:ad:7d:db:b4:ba:54:54:c7:60:d6:ce:a3:fe:12:ea:63:
         c7:19:c1:aa:4f:d6:8b:49:13:fc:59:f8:6b:e7:8e:99:fd:74:
         97:ef:cf:c8:fd:4c:5b:7e:5b:38:f6:20:74:55:6b:bd:03:e8:
         18:32:00:ad:e4:64:cb:71:e9:7e:a3:62:e3:3e:a3:49:ee:6e:
         7f:d8:c1:d2:01:52:31:aa:b2:55:3d:54:0e:41:f7:3f:68:44:
         f9:c9:63:14:bc:19:9e:be:a5:50:54:d2:6b:37:df:73:30:01:
         96:12:44:71:5c:36:b9:79:59:7d:e0:93:98:7d:f5:0e:4d:bd:
         58:4d:89:90:e6:2b:cc:0f:d1:0e:e9:f3:d7:ee:28:eb:af:d0:
         1d:37:db:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:42:50 2025 by rpki-client