Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft
File:                     c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft (raw, json)
Hash identifier:          PAXYnBfsEnWkjpRHO13mgwbR6jW4OZIxMx/MMga3hfM=
Subject key identifier:   A0:1A:6F:77:82:47:4A:05:E9:75:2D:5D:B2:F2:44:FC:67:39:CE:E5
Authority key identifier: 73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76
Certificate issuer:       /CN=A91316E5/serialNumber=73987ECCE77E44EB36651E098D33750FA864E676
Certificate serial:       0177
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft
Manifest number:          0174
Signing time:             Sat 23 Aug 2025 03:53:21 +0000
Manifest this update:     Sat 23 Aug 2025 03:53:20 +0000
Manifest next update:     Sat 30 Aug 2025 03:53:20 +0000
Files and hashes:         1: c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl (hash: zFxLvPwKn8I3wZuWEykrph0T6xoQ4Aqs5z3OmA8HalQ=)
                          2: C1A8182646D011EE8BE5AE80C4F9AE02.roa (hash: gAXQ6XOA3NODkbVV4z4rY8FPGvcx9W1CdIeenZ4k+xI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl
                          rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:53:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91316E5, serialNumber=73987ECCE77E44EB36651E098D33750FA864E676
        Validity
            Not Before: Aug 23 03:53:20 2025 GMT
            Not After : Aug 30 03:53:20 2025 GMT
        Subject: CN=68a93b31-cc59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:32:02:d4:4b:25:35:a5:bb:31:93:35:ca:a0:
                    aa:3e:09:d3:6b:68:5f:9c:67:c3:d4:59:63:b5:18:
                    7c:80:b7:30:15:89:3f:15:12:00:8b:51:c5:83:e8:
                    58:e1:6c:a4:04:aa:76:c3:c1:af:54:f0:78:cd:23:
                    3a:30:46:fc:9b:17:0f:97:8f:a0:20:9c:e2:f5:f3:
                    8f:95:30:f7:99:f3:3e:d9:d0:db:63:3e:21:ab:a1:
                    28:19:3e:3c:a5:3c:61:a6:86:da:3e:98:95:ce:0e:
                    09:18:cb:c7:94:a4:bd:cb:da:e8:3b:a4:af:c9:9c:
                    66:a9:59:19:4e:40:a9:ee:63:a6:e6:ad:96:2d:db:
                    28:26:73:a4:47:75:71:8d:a8:b0:34:de:99:dd:a7:
                    02:e0:16:d0:4f:5a:a3:d3:8f:c1:8c:b1:40:ef:7b:
                    11:fe:03:9d:65:35:c0:93:2f:fd:1d:79:49:48:05:
                    c1:40:0a:ad:cf:59:60:3f:7f:47:5c:57:3a:f6:74:
                    af:10:0a:67:c6:b4:90:ab:07:7d:ae:a8:d3:c1:97:
                    3c:54:fb:52:78:8d:2d:a5:9d:e5:4c:51:28:54:01:
                    f6:94:2d:f3:26:72:c1:e6:cf:e1:ba:57:26:e4:30:
                    8c:1d:04:d6:db:77:ab:31:e1:11:36:54:cd:a6:d3:
                    cd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1A:6F:77:82:47:4A:05:E9:75:2D:5D:B2:F2:44:FC:67:39:CE:E5
            X509v3 Authority Key Identifier:
                keyid:73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:a8:d0:df:ca:bf:72:30:37:5a:fc:18:23:8a:e5:af:42:f9:
         a1:6a:a7:63:d3:f9:6c:9a:e7:d6:27:af:e0:a9:2b:9e:ea:be:
         44:ec:6d:23:ec:34:29:ac:a7:8a:fa:f6:6e:00:e5:67:7f:b8:
         03:79:89:83:b4:12:26:3e:ad:37:ce:50:2e:b1:96:2a:37:d9:
         bd:17:24:d8:6c:f2:8a:23:f3:fd:d0:b5:77:a3:d5:fa:ee:4c:
         65:9f:d9:9b:51:8e:cd:1f:2d:14:fd:98:11:53:97:a1:7c:d0:
         e7:9e:76:2b:a6:59:08:af:ff:fe:2a:ae:f6:34:9a:d9:5f:88:
         df:e8:77:6c:8e:ba:57:a7:73:35:c5:c2:40:e2:90:ca:c8:e0:
         ae:4e:74:35:c7:b7:e4:f1:bd:78:b4:20:26:c2:fe:5b:23:88:
         be:90:e1:97:15:11:39:85:fd:8b:4a:ee:ec:c3:a0:40:3c:3f:
         4c:69:90:eb:3d:ef:26:18:21:5f:66:27:60:ca:ac:24:45:50:
         77:4c:e9:38:e0:e8:39:e9:59:6b:c3:3e:7f:61:c6:8a:1d:4e:
         7f:4d:49:d6:08:de:5d:ef:54:86:72:99:f6:45:c8:93:81:24:
         15:8d:82:19:74:9b:12:0f:22:bf:f2:b0:64:01:9a:62:11:75:
         e5:15:b8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:26:45 2025 by rpki-client