Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft
File:                     ELQL29GDlBfXrRIzKwvm-fxugQU.mft (raw, json)
Hash identifier:          HNT77Y36efGnfmd8PtJUnJc4cSOZoAnyfXK1CeXzlXI=
Subject key identifier:   67:58:16:A5:B9:53:7E:42:DA:E7:94:87:D2:DF:A6:82:D2:6F:B5:1B
Authority key identifier: 10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05
Certificate issuer:       /CN=A914189D/serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105
Certificate serial:       0418
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft
Manifest number:          040E
Signing time:             Sat 23 Aug 2025 00:39:31 +0000
Manifest this update:     Sat 23 Aug 2025 00:39:31 +0000
Manifest next update:     Sat 30 Aug 2025 00:39:31 +0000
Files and hashes:         1: ELQL29GDlBfXrRIzKwvm-fxugQU.crl (hash: mrQxBFmf38yGJweN4z5FPDErfIkKlxViZ66fpgI9Eso=)
                          2: 05A179C2B02E11ECA990305CC4F9AE02.roa (hash: yxgOM7Alp9+Etb0L7ZdDdvPfWsF/rS6M3JXXFnzbA5U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl
                          rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 00:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1048 (0x418)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914189D, serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105
        Validity
            Not Before: Aug 23 00:39:31 2025 GMT
            Not After : Aug 30 00:39:31 2025 GMT
        Subject: CN=68a90dc3-dd4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d8:c8:fd:ff:b1:79:dc:90:d5:cb:46:78:2b:
                    10:fe:79:4c:6a:88:a4:d5:85:cb:a0:bc:51:ca:fc:
                    5c:35:78:ce:eb:b2:4d:6c:3f:32:07:62:e6:65:f6:
                    72:f7:ac:0a:53:bc:91:8b:f3:c6:6f:61:7c:a5:28:
                    e8:1b:54:12:e5:85:cb:2e:c8:a8:92:13:12:f6:4e:
                    78:e5:27:cd:e1:6f:e3:74:eb:45:e6:14:ee:22:ba:
                    ea:ed:54:00:b6:61:92:bc:c7:98:d5:51:4b:8a:61:
                    a6:d2:1b:e5:f3:69:bd:53:cc:46:43:d9:0c:85:f8:
                    c0:2b:c0:d4:3e:df:81:35:07:0f:92:f4:09:ac:f6:
                    20:3c:ed:46:dd:4a:92:06:4f:5a:b4:d2:82:75:1c:
                    db:f3:28:34:a6:8e:90:f6:4e:d7:8c:39:36:ab:8a:
                    42:18:e3:dc:5c:7e:c5:0f:86:50:73:4b:10:b4:14:
                    7c:fb:88:51:8c:18:c4:91:9c:df:03:18:11:76:af:
                    bf:93:a2:ee:2a:8b:31:35:cd:a8:0b:6b:e7:5b:37:
                    58:b4:46:64:2c:8a:cd:49:c4:84:10:29:34:7c:df:
                    cb:61:7a:95:5d:67:58:17:2a:9c:15:f7:0f:b6:37:
                    ec:d6:ce:b2:8a:b5:32:70:42:4c:7f:f9:41:2f:e3:
                    1a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:58:16:A5:B9:53:7E:42:DA:E7:94:87:D2:DF:A6:82:D2:6F:B5:1B
            X509v3 Authority Key Identifier:
                keyid:10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:60:d9:f8:07:fd:0a:58:b5:4a:d9:f4:23:da:b6:60:aa:d3:
         67:0a:fd:41:60:68:dc:c2:43:9e:1f:d1:35:21:42:a1:97:a8:
         99:81:95:da:00:c6:f2:7c:2d:7b:34:62:48:2a:b8:76:f2:b7:
         69:98:cc:fb:a5:8a:19:c9:5b:a5:28:cc:f3:71:7b:9b:6e:61:
         7d:c3:d7:c5:89:2b:b0:a5:14:bf:45:3e:4d:37:5d:9b:cf:31:
         71:1d:83:85:df:bd:aa:41:ae:f0:ed:39:5e:b1:bd:50:5e:70:
         15:58:4f:29:82:6f:3a:c3:61:cd:e5:e5:4f:75:31:be:b0:05:
         77:84:56:27:5a:8e:d6:58:d7:13:d6:c7:db:62:50:0e:7e:c8:
         15:03:45:89:8a:9e:bc:09:b2:18:cd:96:a3:45:16:fa:20:7c:
         98:f5:fa:ab:16:7f:cd:52:6c:6c:48:72:36:f0:25:3a:6e:6b:
         25:26:32:73:91:51:40:aa:45:ed:3a:8b:9a:88:2d:bc:52:73:
         80:bc:ea:9a:ec:28:de:f0:96:35:f6:89:83:d5:ed:ed:77:65:
         f9:17:37:fd:73:40:67:c5:ca:a4:39:41:78:0d:54:cf:44:6e:
         bc:58:de:da:36:be:0a:cd:3d:f1:02:fd:93:8c:b8:24:a3:a6:
         fa:d2:92:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:25:36 2025 by rpki-client