Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft
File:                     E3ay871bTTWtlSsXkNgnRpktQW8.mft (raw, json)
Hash identifier:          mWh414kLzRhWfifAju3GL335dtqXe+zBgquNz1iVHIo=
Subject key identifier:   E8:2A:5C:91:6A:FF:E0:E2:DB:86:A1:D8:FE:4E:76:0C:2E:CE:D9:AC
Authority key identifier: 13:76:B2:F3:BD:5B:4D:35:AD:95:2B:17:90:D8:27:46:99:2D:41:6F
Certificate issuer:       /CN=A9183A80/serialNumber=1376B2F3BD5B4D35AD952B1790D82746992D416F
Certificate serial:       D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft
Manifest number:          04C3
Signing time:             Sat 09 Aug 2025 01:01:13 +0000
Manifest this update:     Sat 09 Aug 2025 01:01:12 +0000
Manifest next update:     Sat 16 Aug 2025 01:01:12 +0000
Files and hashes:         1: E3ay871bTTWtlSsXkNgnRpktQW8.crl (hash: 8QvRe+4YoWINvp/Y3u2l/du01hRZxlzt9TZbmD2y/Y0=)
                          2: F03F059C391D11EF9A100142C4F9AE02.roa (hash: 5xPsXsO/x9vu20ZDUf9oCZh2wciZeGjOc7UUq3/XpCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.crl
                          rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183A80, serialNumber=1376B2F3BD5B4D35AD952B1790D82746992D416F
        Validity
            Not Before: Aug  9 01:01:12 2025 GMT
            Not After : Aug 16 01:01:12 2025 GMT
        Subject: CN=68969dd9-bfa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9d:15:b2:9a:3a:d4:7d:d0:aa:3e:cd:2c:79:
                    53:e2:00:bc:b6:9b:a3:ba:58:c5:92:cf:84:ed:7c:
                    99:ff:02:66:b9:3a:7c:55:18:53:83:6c:ae:cf:71:
                    c6:0c:a7:8d:5d:d4:02:77:d4:bd:9d:e5:34:40:a1:
                    41:47:ea:56:08:6c:b1:a2:2d:89:24:f8:9e:8b:89:
                    b3:93:6b:c6:00:1c:02:65:63:d9:ea:23:d2:e0:80:
                    ea:45:15:95:4c:c0:d2:c5:24:ec:87:13:c7:f2:4e:
                    e8:af:62:ce:84:02:6f:47:4c:5b:dc:ec:07:80:0f:
                    9e:87:ab:c1:b9:90:22:a8:48:a4:0f:c7:10:70:a7:
                    5b:0a:b1:e6:76:e1:2d:74:69:d1:39:a0:61:09:b0:
                    d3:d6:67:b0:ee:22:c6:d6:f6:e3:61:35:05:ea:35:
                    e0:7a:72:d9:ef:ee:3e:dc:18:a9:29:1f:66:70:cf:
                    db:8c:2b:ee:71:b8:f3:6b:9a:ab:67:d1:9b:0f:18:
                    7d:49:ad:7f:0f:fe:86:85:02:98:10:23:47:b0:82:
                    46:82:9d:1d:8c:e4:37:5c:2b:19:74:56:16:29:ae:
                    47:61:da:a2:c4:4f:a1:3f:b6:b3:85:5b:b9:30:41:
                    64:83:9d:f7:ed:ec:09:ae:d5:85:d0:8a:84:9a:ed:
                    11:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2A:5C:91:6A:FF:E0:E2:DB:86:A1:D8:FE:4E:76:0C:2E:CE:D9:AC
            X509v3 Authority Key Identifier:
                keyid:13:76:B2:F3:BD:5B:4D:35:AD:95:2B:17:90:D8:27:46:99:2D:41:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:78:94:3a:a8:88:46:3a:6b:99:6f:26:f1:fd:b8:f7:3f:42:
         79:5a:9f:b3:d0:da:55:83:ca:a9:53:65:8b:8c:c2:ad:c6:9a:
         57:00:9e:31:ff:21:11:be:cd:47:df:43:b5:48:4a:c8:29:de:
         b5:74:cb:2e:c3:a2:22:93:ee:93:65:84:90:1a:6c:59:08:74:
         93:04:27:da:d9:4c:17:7b:a1:7a:b6:64:19:f8:c3:29:4e:7d:
         83:be:dc:75:c0:1a:71:69:e0:40:e4:aa:37:e9:2a:6b:cb:33:
         1b:ad:ef:60:7c:f1:10:ac:6f:df:98:b2:87:a7:33:03:48:45:
         16:58:b1:15:5f:d5:72:85:9f:fe:8b:43:1e:db:5a:1d:30:e7:
         18:b9:87:79:a7:39:a9:0f:db:fe:d4:d9:1f:90:92:28:46:76:
         c6:4d:2f:4f:4c:6d:45:d9:c7:c0:58:16:65:20:da:b8:a0:a3:
         78:d3:f4:33:86:81:e5:e6:dd:4f:ff:f9:b8:7b:2f:a5:01:1a:
         e2:56:d6:54:87:88:91:76:1c:9d:ae:1d:29:eb:5a:88:cb:d9:
         c7:5a:88:8f:e2:6d:f7:4f:1c:74:85:f4:f9:b7:86:30:c4:73:
         96:c2:19:04:eb:f3:27:1e:59:0f:80:0d:4d:6b:57:d9:f1:f9:
         5f:28:ba:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:47:02 2025 by rpki-client