Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft
File:                     mc3A6r4YBBJhGaHVGpjMhxkT86k.mft (raw, json)
Hash identifier:          hQTbBxF933tOdfCLwt8lKHg22vE2I8uJNyFGKSYGiKE=
Subject key identifier:   21:24:40:90:B8:97:FC:A9:32:A8:17:D3:0D:7C:3E:3F:25:AB:E1:19
Authority key identifier: 99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9
Certificate issuer:       /CN=A9183F7F/serialNumber=99CDC0EABE1804126119A1D51A98CC871913F3A9
Certificate serial:       07AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft
Manifest number:          07A4
Signing time:             Wed 06 Aug 2025 21:43:26 +0000
Manifest this update:     Wed 06 Aug 2025 21:43:25 +0000
Manifest next update:     Wed 13 Aug 2025 21:43:25 +0000
Files and hashes:         1: mc3A6r4YBBJhGaHVGpjMhxkT86k.crl (hash: 5dN67iK8aQfS3QCUd2jELyh64BglZaJnMPfR9i87SxM=)
                          2: AE26CE12180911EB962CB216C4F9AE02.roa (hash: 2MLqNLG1c5f9W1Oa6laD6D4M2hQ2BaRHZstB1sfOGMM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.crl
                          rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 21:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1964 (0x7ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183F7F, serialNumber=99CDC0EABE1804126119A1D51A98CC871913F3A9
        Validity
            Not Before: Aug  6 21:43:25 2025 GMT
            Not After : Aug 13 21:43:25 2025 GMT
        Subject: CN=6893cc7e-c399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0d:c8:87:35:87:be:6d:08:f5:69:27:80:0c:
                    09:da:21:da:ec:c6:91:f4:81:ac:07:b6:b7:f3:1d:
                    15:f7:9e:a0:7c:bf:d5:ec:dd:8c:67:2e:01:5f:5c:
                    6a:0f:39:65:82:93:47:26:0c:61:73:0b:cb:4b:4d:
                    e4:6e:6d:1f:8b:d8:a6:ff:27:2a:98:76:93:18:46:
                    c5:5a:39:a1:c7:a0:c1:f3:53:ef:df:03:e8:a4:53:
                    97:41:a6:d6:e1:6d:2e:ed:8b:11:8f:ab:c6:5c:ec:
                    d7:d3:5a:73:4e:7c:9b:b5:1d:cd:e6:42:22:29:01:
                    80:48:3c:ff:11:d1:20:8e:69:3f:fe:92:45:78:1b:
                    96:ff:37:f7:6e:87:0b:d2:23:3f:71:6a:91:f5:87:
                    32:61:b1:4a:59:dd:06:ce:c9:9a:6f:15:36:4c:e2:
                    47:19:9a:d9:f3:f1:55:18:30:2d:a8:d7:1e:6c:d0:
                    c1:af:07:90:e5:75:22:ee:35:2e:25:84:00:ee:aa:
                    00:fc:18:8f:71:88:8b:b4:ea:3c:cf:73:8b:12:67:
                    45:df:85:e6:e2:e6:22:8f:4e:a9:e5:d4:8e:f8:62:
                    2a:3a:86:ed:03:5f:0e:26:d7:b5:98:7c:b0:33:46:
                    ae:3a:6b:cb:62:7c:0a:38:d7:36:67:07:b7:81:2e:
                    6d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:24:40:90:B8:97:FC:A9:32:A8:17:D3:0D:7C:3E:3F:25:AB:E1:19
            X509v3 Authority Key Identifier:
                keyid:99:CD:C0:EA:BE:18:04:12:61:19:A1:D5:1A:98:CC:87:19:13:F3:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mc3A6r4YBBJhGaHVGpjMhxkT86k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183F7F/E37E5B32150E11EB8CEB9543C4F9AE02/mc3A6r4YBBJhGaHVGpjMhxkT86k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:7c:ca:70:15:48:69:89:49:27:95:fe:a0:83:d3:e1:f4:12:
         9d:ee:52:3a:96:b0:ec:1b:78:8e:a2:89:4e:a7:35:01:b6:9b:
         a7:e7:fc:88:95:5e:c6:fd:7c:b8:a4:2e:ab:30:01:cb:f1:9d:
         47:17:c2:b9:60:bc:d6:cd:e1:f9:cd:62:48:dd:04:63:02:76:
         f5:5c:6e:47:1b:43:dc:7c:b0:96:13:8c:0e:72:c5:a5:dd:d3:
         88:f4:55:4d:d5:b8:2a:b5:d8:b0:a6:4a:a3:f3:12:b1:8a:08:
         a3:7a:27:b3:d6:2a:71:67:dc:10:44:f1:51:df:70:d0:89:4e:
         fc:c5:72:f8:06:17:cc:4e:35:3c:24:c9:3b:77:a8:4f:8e:1c:
         7f:04:6d:41:e0:85:97:cd:a0:0f:a0:cd:bb:ec:85:f0:eb:32:
         47:a8:13:13:f6:ca:1f:19:b2:ac:79:4f:1c:48:81:34:70:fe:
         94:db:78:ea:76:83:94:e1:8c:12:38:dd:1c:99:42:5c:65:0f:
         3b:e8:a2:b7:40:7c:22:3c:78:7e:25:c1:10:78:f7:66:74:a6:
         dc:6d:f5:a0:9c:65:09:93:4c:9f:3c:82:cb:de:b6:29:10:94:
         eb:2c:68:04:82:62:72:9c:b5:42:f4:f8:97:5d:ea:37:4b:d9:
         2b:a7:1c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:32:57 2025 by rpki-client