Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
File:                     h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft (raw, json)
Hash identifier:          9swVGkfSIhjey92hkjcGuq3xBTmvWv7aDr/MaQyjuRI=
Subject key identifier:   A7:A4:5B:0B:E7:F1:86:A2:38:77:E0:4A:66:8E:B6:5A:4E:4D:A8:34
Authority key identifier: 87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04
Certificate issuer:       /CN=A912A294/serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04
Certificate serial:       01A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
Manifest number:          0190
Signing time:             Sat 23 Aug 2025 03:55:22 +0000
Manifest this update:     Sat 23 Aug 2025 03:55:21 +0000
Manifest next update:     Sat 30 Aug 2025 03:55:21 +0000
Files and hashes:         1: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl (hash: T+X0nBd1drZdQ2nH86MESl0PX4bjZ5uGojXIQLUhLDc=)
                          2: 60C72042052911F0A2361C50C4F9AE02.roa (hash: eoqR2rI7tCJcx2sHbbxw1cinGXO6kmie9biadQvkvGU=)
                          3: 64B5B49A052C11F0AFEC0478C4F9AE02.roa (hash: osIylBmoiOl0hS+6q4jLTN9ELMVNH7Z3hIxqCI6TGCM=)
                          4: 24661146FA7311EFB58C366CC4F9AE02.roa (hash: vJ/paOcsiCM0y/LcDeCNMcXQ0i9PBxkDy6/mQy96vcg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl
                          rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:55:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A294, serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04
        Validity
            Not Before: Aug 23 03:55:21 2025 GMT
            Not After : Aug 30 03:55:21 2025 GMT
        Subject: CN=68a93baa-4b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:c9:17:64:17:a1:35:d1:15:55:d6:2d:a8:ff:
                    54:13:2d:72:9f:ec:35:7a:19:9a:94:f7:6d:9c:c4:
                    1e:f6:c0:ed:81:04:3d:ee:07:bb:36:c0:ae:34:14:
                    62:67:de:a1:87:db:ce:15:20:c6:1a:d5:82:ac:16:
                    20:04:5a:cf:e0:c7:eb:78:16:f9:f4:72:9b:50:b5:
                    79:23:5a:2a:b7:99:93:b6:5a:51:91:cb:49:06:88:
                    d0:4f:bb:b9:8e:4a:ef:c0:85:89:6e:08:53:e7:6a:
                    5b:53:2d:be:a1:7d:34:52:e2:10:40:4f:84:47:7d:
                    3f:22:7f:33:91:f1:0b:e9:4c:ab:fa:74:08:84:d0:
                    dc:32:01:54:31:6f:36:30:92:6c:78:85:1a:2b:e9:
                    ba:30:53:ac:c2:46:13:42:04:2d:52:39:aa:5b:10:
                    97:11:d4:f0:46:9a:93:73:07:c5:89:34:d7:15:96:
                    91:f4:5e:8a:cd:93:19:27:6f:4d:41:a8:9a:88:c3:
                    cf:ad:bc:4d:8f:8c:df:7d:b1:00:c7:9b:5d:c0:61:
                    27:44:1e:85:7b:37:23:cc:14:3a:b3:dc:4d:b9:d1:
                    ca:c4:64:43:6c:88:3f:2a:a9:f1:da:87:08:b1:4e:
                    f9:6f:6e:32:3d:7a:e1:45:dd:20:5d:77:a8:22:a0:
                    6b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A4:5B:0B:E7:F1:86:A2:38:77:E0:4A:66:8E:B6:5A:4E:4D:A8:34
            X509v3 Authority Key Identifier:
                keyid:87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f0:09:17:5f:77:4e:24:51:81:e2:43:f0:61:5c:f6:45:e9:
         f4:31:0a:ff:78:05:cc:23:1c:f1:7f:f9:6e:80:d3:6a:fb:33:
         c6:d5:40:4a:bf:53:5f:de:d7:0d:c1:9e:b4:b3:2b:39:2a:4b:
         cc:f9:c7:4e:4e:62:d4:37:72:b6:fb:ef:a2:84:cd:bd:1b:33:
         02:be:ec:c5:a9:ce:b4:e6:a1:3a:cf:b6:9b:89:0e:15:09:63:
         28:97:b6:6c:ec:65:5e:84:f2:ee:fe:f3:2b:0c:14:8b:35:34:
         08:13:00:e3:25:e8:ea:d4:17:65:98:31:26:be:0d:93:b5:87:
         84:c5:f4:e4:ee:7a:be:da:0c:cb:b3:aa:18:7a:97:90:b3:e7:
         61:16:1a:fa:af:cb:d5:cd:bf:1f:22:7e:ba:00:6f:ce:8a:20:
         99:75:f7:24:d2:ab:a0:79:1e:82:d1:c2:b3:c3:39:2a:52:e2:
         72:16:f4:c6:97:75:fa:a8:94:32:29:5f:0b:d5:3e:4b:00:27:
         06:53:70:24:13:ce:d1:76:8f:83:9c:1d:5c:45:ab:11:7e:57:
         4f:c8:15:f3:72:58:0a:af:14:db:08:fb:b2:70:2f:34:3b:0c:
         cd:98:d0:f9:7f:24:18:2c:0c:fd:ed:7a:3e:58:9e:fa:d5:8d:
         e2:a7:41:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:49:06 2025 by rpki-client