Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft
File:                     rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft (raw, json)
Hash identifier:          fCgay7UGqnfY6/Q3odYb+rzPuVtw63gJgQof4+JpZpk=
Subject key identifier:   52:A4:D5:2E:E3:16:26:64:5C:60:8E:12:7D:9A:24:FA:7F:61:5B:22
Authority key identifier: AD:06:DB:CC:53:34:C6:D7:51:37:2F:B1:79:54:F4:AA:AD:DC:9C:3F
Certificate issuer:       /CN=A919F55C/serialNumber=AD06DBCC5334C6D751372FB17954F4AAADDC9C3F
Certificate serial:       04C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQbbzFM0xtdRNy-xeVT0qq3cnD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft
Manifest number:          04BF
Signing time:             Tue 05 Aug 2025 00:20:32 +0000
Manifest this update:     Tue 05 Aug 2025 00:20:32 +0000
Manifest next update:     Tue 12 Aug 2025 00:20:32 +0000
Files and hashes:         1: rQbbzFM0xtdRNy-xeVT0qq3cnD8.crl (hash: MXu/GWcWr5sMeooFU0li8a5kymglRUqQhMQ9WeRxJDY=)
                          2: 0EC6A7E0372D11ECA616091EC4F9AE02.roa (hash: xRvy8+EZ4EWMUGqE/C33LsDCdW9x6WHrip13g/dJz5k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.crl
                          rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQbbzFM0xtdRNy-xeVT0qq3cnD8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 00:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1220 (0x4c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F55C, serialNumber=AD06DBCC5334C6D751372FB17954F4AAADDC9C3F
        Validity
            Not Before: Aug  5 00:20:32 2025 GMT
            Not After : Aug 12 00:20:32 2025 GMT
        Subject: CN=68914e50-c7be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:66:aa:de:f6:3f:71:90:b3:74:80:84:96:4e:
                    9c:8b:85:79:d1:3f:70:c2:bd:a3:b5:60:c3:cb:af:
                    2c:0b:c0:dd:8a:23:ef:56:00:cf:02:1a:1a:11:f5:
                    31:ef:8f:b2:d2:94:74:cd:4a:23:71:3a:67:9f:69:
                    ef:ac:44:12:a7:57:4b:7e:9c:2e:0a:68:db:82:22:
                    9c:00:6e:73:d5:f8:ac:4b:6b:2e:1d:21:4b:1c:72:
                    7b:1d:ed:82:c4:b8:db:2a:4a:85:90:50:de:4d:05:
                    f2:22:a4:33:2a:8b:a6:80:ae:7d:c4:14:b1:7e:1f:
                    5e:f0:8d:78:6b:ec:e5:cc:74:48:1a:41:5c:77:91:
                    e8:84:28:e8:d1:2f:69:42:09:66:53:de:22:ae:a7:
                    69:11:d0:3a:df:40:16:4f:74:f2:f2:dc:c6:b3:17:
                    15:da:70:22:85:21:f4:90:36:70:54:99:34:24:56:
                    43:bb:36:16:58:3f:9d:3c:35:06:4e:0f:95:71:e9:
                    8e:4c:4e:bb:e4:33:76:95:5a:0e:f7:9a:03:6b:bf:
                    d5:8e:e6:3e:c3:8e:90:e1:41:35:c4:d9:e0:0c:77:
                    68:bc:17:c1:8f:66:7f:68:db:1b:38:49:b8:e7:f8:
                    46:b2:5a:6b:13:d0:d8:a9:1c:e8:2a:f7:00:b0:a3:
                    74:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A4:D5:2E:E3:16:26:64:5C:60:8E:12:7D:9A:24:FA:7F:61:5B:22
            X509v3 Authority Key Identifier:
                keyid:AD:06:DB:CC:53:34:C6:D7:51:37:2F:B1:79:54:F4:AA:AD:DC:9C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQbbzFM0xtdRNy-xeVT0qq3cnD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F55C/9F19F96E370F11ECBEB72A42C4F9AE02/rQbbzFM0xtdRNy-xeVT0qq3cnD8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:06:bd:2b:8c:72:c1:4e:0e:62:07:af:d4:65:cb:31:c2:c2:
         48:de:d0:63:f4:89:b4:26:2b:65:f5:f7:f1:9b:60:a8:ba:cf:
         5d:ea:5e:74:bd:3c:f6:ea:2e:e7:1c:b4:36:f6:cd:5f:71:d2:
         98:71:67:f2:3a:bd:cb:25:22:e3:0f:c6:3c:92:05:9a:24:be:
         32:d1:dd:ca:bd:cf:ec:d5:80:8e:45:31:98:d7:6e:d2:68:aa:
         a6:e2:54:ac:97:cb:44:70:e4:67:e0:2f:36:c7:85:ae:cb:b9:
         45:8c:46:3e:ac:31:b4:9e:f8:e5:8a:64:ea:00:1c:b6:b7:8e:
         4e:fe:79:96:bf:bb:d6:2f:1d:0d:9c:36:15:c3:0a:e1:be:d0:
         2b:2c:9e:d4:ea:bd:9d:1a:d5:b2:ce:15:f9:28:89:2e:5c:c7:
         75:38:1f:46:d5:96:f6:60:17:ca:8d:72:84:a2:c1:19:ae:d4:
         aa:78:92:3f:63:b0:49:d2:d7:4c:6b:24:00:43:d0:e6:87:41:
         d9:83:49:32:6d:25:a8:5b:7c:18:6a:28:e3:d7:7f:2f:98:49:
         87:1a:8c:7f:8e:fa:d4:6e:cb:1f:6a:9d:89:cf:d2:bf:64:d7:
         ad:7d:f3:45:4d:2a:8c:1b:08:35:c6:f7:bc:d8:c7:49:c5:00:
         f3:c9:c3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:19:07 2025 by rpki-client