Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
File:                     exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft (raw, json)
Hash identifier:          DKdcZvRoWj3a4W+26iauuJNIQBhCULFAJHpiU/NI5J0=
Subject key identifier:   23:6B:01:49:8C:A4:09:6C:B8:CA:07:3E:E1:D1:CF:F7:25:B5:3F:03
Authority key identifier: 7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C
Certificate issuer:       /CN=A912D937/serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C
Certificate serial:       0221
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
Manifest number:          0218
Signing time:             Sat 23 Aug 2025 02:14:30 +0000
Manifest this update:     Sat 23 Aug 2025 02:14:29 +0000
Manifest next update:     Sat 30 Aug 2025 02:14:29 +0000
Files and hashes:         1: exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl (hash: IIq1Y0dWvCh3E942mNm8RFc9IYllBl4vrUqLJSg7S00=)
                          2: D9A5C1BA4DFE11EDBF00BA6BC4F9AE02.roa (hash: RQB2RLULGV5D9o8SykaXsVa4IAX2Ix9OkCIOGbXqXJc=)
                          3: 35D174F2C7DF11EDAEC8CE40C4F9AE02.roa (hash: 1vie/BGCNQgncTtAE895UIuHGNyFzttxRArpojokubI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl
                          rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 02:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D937, serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C
        Validity
            Not Before: Aug 23 02:14:29 2025 GMT
            Not After : Aug 30 02:14:29 2025 GMT
        Subject: CN=68a92405-7eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:56:54:55:3e:91:8d:3b:b4:05:b3:a1:46:0f:
                    d4:01:bc:1f:09:76:87:88:39:56:1c:96:15:ac:ae:
                    98:48:9c:5f:80:1d:f1:29:92:46:0e:9c:a9:f6:4c:
                    57:08:ea:b9:d4:e9:fc:7b:84:11:ba:79:15:89:13:
                    b2:0f:2d:6a:b1:b5:0d:68:92:09:ff:34:2b:ff:3a:
                    dc:10:c8:e3:c6:f0:25:aa:06:ac:68:25:a2:49:9b:
                    2a:22:5e:0b:d3:c9:2e:50:49:d2:4f:19:c9:ef:58:
                    de:40:4c:19:84:5f:82:8b:6a:ce:fa:44:f7:72:75:
                    9c:6e:60:f5:18:7c:11:10:ec:23:3f:55:6d:b7:c0:
                    5f:fd:05:d7:69:57:f3:e1:1d:e7:ab:99:85:68:30:
                    9c:21:34:93:29:38:e9:f7:9a:86:d2:40:75:8a:f8:
                    27:8e:ff:ea:08:66:2c:7c:89:c3:6e:96:39:b3:e2:
                    69:aa:1a:80:9a:80:58:25:10:ad:85:4f:e1:6c:bb:
                    47:a8:9b:1b:c6:9c:7a:c7:47:f8:53:b9:81:d6:fb:
                    ab:62:eb:89:e6:40:c0:82:2c:59:00:2f:8c:e6:00:
                    f7:01:32:d2:61:ef:29:f2:e8:cd:bb:09:37:c7:2e:
                    c1:3e:1f:7a:5b:43:7a:8a:06:d2:4f:66:29:d3:ef:
                    6b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6B:01:49:8C:A4:09:6C:B8:CA:07:3E:E1:D1:CF:F7:25:B5:3F:03
            X509v3 Authority Key Identifier:
                keyid:7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:bc:79:aa:58:52:6e:87:10:9b:da:38:be:ca:de:5f:d8:d8:
         f8:34:86:f7:9a:47:ff:99:20:34:1c:58:1c:84:23:8e:11:62:
         de:10:b1:e8:42:49:8e:16:2a:c1:7f:14:48:f4:a1:cf:56:5c:
         b8:d8:29:86:7c:b1:f2:56:68:78:52:f2:5e:33:88:de:ea:8b:
         52:e2:9d:5c:c8:c3:1f:fa:cc:ea:47:78:40:b2:a1:0a:cc:09:
         4b:44:21:ee:18:7e:19:c0:1f:91:b5:6f:91:dc:98:0e:8a:c0:
         d8:13:c8:c8:c0:9c:92:f2:7a:fa:ac:af:25:5f:c7:0f:3f:b6:
         7c:e6:59:34:6e:2f:18:45:c9:0e:2d:8f:2c:a1:b9:6b:9c:1c:
         83:be:d5:07:3a:57:75:94:67:ac:91:53:9f:06:b9:60:6e:4a:
         d7:bd:6c:bb:8c:35:a2:40:85:ea:42:49:20:b2:e7:3b:1e:d0:
         0e:e5:1e:b0:fb:7d:82:50:fe:f6:16:8d:53:21:a7:98:a8:82:
         9e:0c:b0:05:bf:4c:4a:ad:41:36:c7:ad:14:44:d0:fb:e8:c2:
         fa:12:74:1e:64:68:5e:d5:d8:e7:fe:6e:55:c5:fe:fd:4e:8f:
         6f:90:3d:eb:18:97:2d:a6:2d:2e:c0:17:38:a8:70:8b:6d:ad:
         06:2b:bd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:11:10 2025 by rpki-client