Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.mft
File:                     ed8QJTU18NZ_oR22ikx2NKpqRHw.mft (raw, json)
Hash identifier:          nNnZ4ZDYDXP9XDWk0Fygyqo74rYNsz7ckZLsKTwiNJo=
Subject key identifier:   BB:7E:C9:00:6B:04:40:2B:A8:F5:76:F1:88:2E:AB:CB:AB:DD:8E:A5
Authority key identifier: 79:DF:10:25:35:35:F0:D6:7F:A1:1D:B6:8A:4C:76:34:AA:6A:44:7C
Certificate issuer:       /CN=A913C437/serialNumber=79DF10253535F0D67FA11DB68A4C7634AA6A447C
Certificate serial:       063C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed8QJTU18NZ_oR22ikx2NKpqRHw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.mft
Manifest number:          0634
Signing time:             Mon 30 Jun 2025 23:05:01 +0000
Manifest this update:     Mon 30 Jun 2025 23:05:00 +0000
Manifest next update:     Mon 07 Jul 2025 23:05:00 +0000
Files and hashes:         1: ed8QJTU18NZ_oR22ikx2NKpqRHw.crl (hash: JXqO+mIqbyqWoBfoDaJ6XKXmyHrsoZ//VfASjgrO8sU=)
                          2: BF195C829CD211EBA0E3CB58C4F9AE02.roa (hash: vieZUpQmzzJOorTO/HBg3bT9si532rk94383Z2tZWNU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.crl
                          rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed8QJTU18NZ_oR22ikx2NKpqRHw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 23:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1596 (0x63c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C437, serialNumber=79DF10253535F0D67FA11DB68A4C7634AA6A447C
        Validity
            Not Before: Jun 30 23:05:00 2025 GMT
            Not After : Jul  7 23:05:00 2025 GMT
        Subject: CN=6863181c-b861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f9:66:5a:20:ab:64:0c:ce:71:bb:09:b4:e7:
                    87:5f:93:5e:8b:e5:0e:f7:d1:e2:ca:8c:45:8f:35:
                    f7:ec:2d:59:cf:58:50:e2:d9:58:ed:0a:42:74:b7:
                    0d:8a:d3:66:62:5a:68:02:b0:94:de:ea:41:bc:33:
                    3b:34:48:5f:1a:99:5a:bc:cb:22:12:5b:a5:2a:7b:
                    b7:ad:5a:8b:9b:8e:a1:f9:d8:ab:7a:7c:0e:19:be:
                    b7:f3:77:a0:a6:ee:2f:fa:ca:d1:c4:43:30:b4:ad:
                    6c:1e:5c:b2:e0:75:57:9f:49:51:81:47:df:06:b8:
                    35:94:ba:5e:01:3d:c9:6a:de:d3:81:2d:62:f1:b0:
                    17:b3:ff:86:6b:34:71:71:7c:41:ad:86:27:a7:a3:
                    31:cc:b3:29:19:c3:94:cb:ec:b4:ae:43:bb:9b:2e:
                    bc:82:be:3c:e5:a1:34:4e:df:c9:75:f3:3d:ec:53:
                    66:86:2c:37:09:90:ad:b9:79:71:83:64:18:74:89:
                    b3:49:55:69:0d:fe:50:db:42:a3:41:85:ae:9b:a6:
                    df:20:a9:c6:0d:0f:dc:18:a2:29:cf:48:91:04:d2:
                    fc:ea:94:1e:95:fd:c1:50:76:8f:41:9a:02:07:4c:
                    c4:38:08:4c:83:f0:30:e2:d4:ff:4d:68:f3:cf:48:
                    fb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7E:C9:00:6B:04:40:2B:A8:F5:76:F1:88:2E:AB:CB:AB:DD:8E:A5
            X509v3 Authority Key Identifier:
                keyid:79:DF:10:25:35:35:F0:D6:7F:A1:1D:B6:8A:4C:76:34:AA:6A:44:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed8QJTU18NZ_oR22ikx2NKpqRHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:66:e0:61:a9:59:51:85:43:9c:87:f9:f7:ee:ac:be:ea:69:
         cf:cd:69:3f:66:fb:05:14:5f:1f:4b:82:01:87:bc:64:8b:f4:
         22:93:33:69:f0:2a:af:05:a4:ba:f1:64:a8:52:8d:43:da:91:
         e2:de:47:b3:4d:d7:58:e4:9d:88:1e:8d:e9:9b:c2:dd:f7:c4:
         0e:fe:84:70:17:a9:65:97:96:23:bb:1e:4b:82:ee:7a:88:12:
         62:0c:a2:88:f3:cb:a5:0f:c2:36:50:e7:25:bd:98:ad:41:26:
         77:09:32:5d:c9:f3:2d:3d:f3:1a:f6:49:94:75:24:af:11:4c:
         00:db:dc:bc:1d:3c:b5:bb:9c:41:32:5f:75:72:91:25:2b:fd:
         c9:5a:96:71:8d:0a:43:6f:fe:a1:9b:68:da:cc:df:8b:66:f4:
         ff:f5:4e:0b:4c:d2:c9:f1:07:6b:13:92:8c:82:e0:e4:3d:70:
         a5:44:86:89:14:e7:a4:2a:79:70:a8:a7:f4:0d:dc:76:0e:31:
         57:38:88:24:b8:b2:1a:32:eb:c5:80:5a:2d:e6:bc:c1:db:b7:
         dc:56:03:92:1f:71:c4:55:c5:2a:d4:48:6e:14:bf:a8:76:fc:
         74:67:45:71:1c:95:e1:14:3c:f7:e2:c5:b9:0f:df:4a:d3:68:
         5f:0d:5b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:55:53 2025 by rpki-client