Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft
File:                     K0QMfEWQAwVRV2J95yFOnKwSi0w.mft (raw, json)
Hash identifier:          Pr1RlISTJPltrRg+a5uY/qqsBdwgqMbcqgVCgIDFzFw=
Subject key identifier:   AC:C2:C0:95:EB:B1:D0:ED:83:E8:88:DC:6A:E8:AD:F5:D0:70:AE:F3
Authority key identifier: 2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C
Certificate issuer:       /CN=A9187729/serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C
Certificate serial:       03F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft
Manifest number:          03F0
Signing time:             Sat 09 Aug 2025 01:01:28 +0000
Manifest this update:     Sat 09 Aug 2025 01:01:27 +0000
Manifest next update:     Sat 16 Aug 2025 01:01:27 +0000
Files and hashes:         1: K0QMfEWQAwVRV2J95yFOnKwSi0w.crl (hash: jGIoG4YrmdzggVN3XAKG1Iiiy1dpkl+qxxbkCxYBH7A=)
                          2: 394B48F6889811EC9D1DF920C4F9AE02.roa (hash: l0TDwbIQKnn22v377SYBCTiXJEwlU244XaVGT+AApO8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl
                          rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1013 (0x3f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187729, serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C
        Validity
            Not Before: Aug  9 01:01:27 2025 GMT
            Not After : Aug 16 01:01:27 2025 GMT
        Subject: CN=68969de8-6ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7a:ce:7e:bb:3f:88:58:a4:59:4a:f5:d4:30:
                    92:c4:b3:72:a4:c8:c4:df:6d:29:7b:67:31:68:47:
                    0a:d1:d8:9a:93:b7:3e:5e:73:1a:5d:da:aa:1d:5d:
                    5b:04:94:52:14:e9:c6:b9:ca:28:ed:f6:be:db:0b:
                    34:2a:b7:b7:01:66:15:82:46:e0:b3:df:3b:9c:ed:
                    01:74:bf:cf:8e:12:1b:b3:e9:13:c5:03:d6:a8:16:
                    4b:c7:5e:ba:a8:eb:e7:93:f5:23:a2:c2:01:bd:67:
                    8d:4f:02:32:fe:60:fb:9c:5e:3d:d4:09:09:f1:f3:
                    9c:80:f2:a3:74:dd:d0:af:92:5f:09:96:f6:f0:0c:
                    f9:74:87:ae:01:f6:79:b9:6c:7a:7c:7a:04:3d:a6:
                    6c:1f:f1:21:11:a8:33:6c:23:e8:49:d4:a3:84:3e:
                    02:4f:5e:9a:bb:20:2f:ef:ba:7a:48:6a:5a:a4:d2:
                    fb:53:67:a9:76:38:b0:39:78:7f:f5:c1:e2:e0:53:
                    88:60:88:4f:a2:5a:f1:ff:93:c1:72:34:29:cd:36:
                    6f:e6:65:73:42:91:f9:2b:2e:47:9f:06:a1:26:88:
                    1e:f6:40:b8:95:36:4f:51:bf:7e:05:9f:f6:68:be:
                    bf:b1:f3:34:46:10:97:02:fe:5c:5e:fb:17:d8:16:
                    e1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C2:C0:95:EB:B1:D0:ED:83:E8:88:DC:6A:E8:AD:F5:D0:70:AE:F3
            X509v3 Authority Key Identifier:
                keyid:2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:0c:3c:cb:de:28:53:fe:e5:e7:17:f6:3a:6c:b0:0d:c2:06:
         b5:05:11:e8:01:7c:74:89:cc:c5:15:a3:4e:6b:87:0b:6a:9d:
         1f:42:a4:cf:0b:94:8b:15:92:e4:56:9c:9b:be:4d:ce:19:7a:
         e9:31:10:6b:c9:35:40:5e:72:89:bd:8f:29:44:57:1b:a7:6a:
         f8:47:df:3e:35:27:c2:2f:18:a8:fe:9f:73:d0:5e:78:e6:1f:
         92:30:42:9e:54:21:d0:48:0d:28:2f:a6:58:4b:7a:37:72:5b:
         ed:da:0e:ad:7b:f6:6e:9d:e4:94:dd:56:a6:e5:ef:db:8f:69:
         e7:43:3b:89:2b:f6:4f:72:55:4b:d6:8b:e6:dc:ae:fc:58:60:
         03:69:f0:c4:b0:49:c8:33:16:b5:63:a8:64:30:c7:34:a4:cc:
         b0:0d:98:54:46:c5:e7:64:8d:09:e4:4f:7b:d5:d2:18:67:00:
         77:02:09:68:70:2e:c0:a9:e5:b0:6a:df:1b:a5:04:55:60:3e:
         b9:ce:77:a0:8f:4e:a9:46:e4:3e:62:5e:15:31:a5:e4:4c:02:
         20:ae:be:43:8a:9e:ed:dd:71:f0:64:17:79:c4:3c:8a:e4:0f:
         8a:4e:c5:09:ba:83:dc:ea:74:48:97:b5:1f:45:68:76:e4:0e:
         5d:8e:22:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:05:20 2025 by rpki-client