Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
File:                     8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft (raw, json)
Hash identifier:          dlvkHjb0IoaDk9lJhMvEnH8gy4miLsYDGxzwy4eCY1g=
Subject key identifier:   B6:B1:5C:7B:B5:4B:10:90:56:03:E8:37:39:99:C9:CD:23:51:60:C4
Authority key identifier: F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78
Certificate issuer:       /CN=A91955D9/serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
Manifest number:          8A
Signing time:             Sat 09 Aug 2025 07:01:55 +0000
Manifest this update:     Sat 09 Aug 2025 07:01:55 +0000
Manifest next update:     Sat 16 Aug 2025 07:01:55 +0000
Files and hashes:         1: 8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl (hash: czJvrzRPGkMty+sW+ZyAiWlg4FfoxBvKAqvvnaL4TnE=)
                          2: 0D041790A28611EFBD5A8C11C4F9AE02.roa (hash: 97I65+Q066TDiRkq5FVajUp8ATxWSUAGmGMHS8ACfSY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl
                          rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91955D9, serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78
        Validity
            Not Before: Aug  9 07:01:55 2025 GMT
            Not After : Aug 16 07:01:55 2025 GMT
        Subject: CN=6896f263-4393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fa:bc:b7:b4:3a:d8:b5:27:1c:f1:33:40:ce:
                    c7:fd:2a:5c:2b:36:54:86:3a:d4:87:c1:38:9b:78:
                    98:c3:01:2f:b4:2a:d5:f6:c9:79:a2:1b:f0:64:45:
                    ac:ec:d7:d3:49:a0:34:98:7a:76:d9:17:36:87:80:
                    0b:15:16:7f:0d:ac:8e:08:0b:b8:a9:93:22:a4:8e:
                    69:20:35:b2:c3:e7:44:37:99:7d:23:51:23:80:11:
                    18:1c:72:80:76:b0:a9:e2:07:aa:26:d4:b1:44:6f:
                    72:ac:57:a2:48:d4:cf:8e:9c:bd:5d:15:fa:0c:e1:
                    d2:90:bf:93:97:db:0e:6d:c8:45:6e:6a:28:12:2d:
                    ae:65:b7:57:09:28:83:1b:d1:cb:f3:13:4d:e4:88:
                    a6:27:34:c9:03:97:7c:ef:cc:ad:0e:ca:fa:a9:23:
                    43:83:05:a2:e5:8e:65:05:99:1b:84:bc:f4:be:d1:
                    a8:02:37:09:6f:7e:40:d0:27:99:47:a6:80:af:60:
                    77:13:fc:af:02:78:bf:24:cb:49:3c:26:b5:7e:f1:
                    ad:65:54:4c:6e:63:99:92:af:dc:05:7f:79:d7:e2:
                    65:2a:39:5b:ed:1a:42:87:03:8e:9b:0a:0a:23:eb:
                    8e:98:7e:90:91:6f:9f:88:86:37:fe:df:9d:cc:9a:
                    be:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B1:5C:7B:B5:4B:10:90:56:03:E8:37:39:99:C9:CD:23:51:60:C4
            X509v3 Authority Key Identifier:
                keyid:F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:f5:2a:b6:50:cb:50:28:76:c3:11:45:a5:57:bd:9e:69:b8:
         5a:6e:8c:00:be:8e:07:1e:e4:65:78:1b:25:64:b4:df:1b:20:
         ff:7d:b7:94:49:96:34:af:bf:7f:1b:75:82:4f:0a:48:b5:dc:
         12:da:39:46:3c:25:48:74:58:a6:05:cb:dd:e3:25:b7:0e:be:
         eb:a4:ea:00:50:ff:66:81:aa:1a:e5:6d:34:fe:4c:e8:e8:09:
         67:68:29:a4:bd:07:8d:a1:93:71:98:af:b7:e7:d7:40:4b:11:
         39:55:2b:d5:ec:f9:bc:f3:b2:09:29:eb:bd:d8:a6:f0:cc:ba:
         34:55:0d:d5:61:75:28:48:d0:25:fb:d3:30:b8:bd:5d:db:62:
         b7:d4:db:44:d8:f6:4b:7c:5d:2a:1e:ea:1d:62:46:0f:5d:93:
         a1:61:71:7d:29:c1:09:3a:cd:ea:94:9f:11:78:37:44:4d:c7:
         ac:b6:94:91:1a:d3:74:4d:db:08:92:fc:b1:00:f2:b6:42:62:
         fe:5c:3f:b2:6d:af:a6:b2:10:95:86:9e:ac:e8:09:3e:95:b9:
         72:b1:08:f5:fa:be:b4:2e:5d:15:ac:3a:61:be:cc:84:4e:d0:
         f3:16:8b:ef:e8:4a:c4:11:da:d6:ae:05:68:bc:6e:92:a2:5b:
         88:57:33:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:38:18 2025 by rpki-client