Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
File:                     IugbMnyx-zUB4Fr6uUEhkY_bW14.mft (raw, json)
Hash identifier:          rS2OYVg+wsqisgZ6FPSFUMSE8mudaGrchc4CMIL2fN4=
Subject key identifier:   DE:BE:BB:BC:AE:AA:10:F4:5B:A0:1B:DD:F8:FD:52:F5:CC:2D:C6:B2
Authority key identifier: 22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E
Certificate issuer:       /CN=A914B5BD/serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
Certificate serial:       1886
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
Manifest number:          185B
Signing time:             Fri 22 Aug 2025 16:37:27 +0000
Manifest this update:     Fri 22 Aug 2025 16:37:27 +0000
Manifest next update:     Fri 29 Aug 2025 16:37:27 +0000
Files and hashes:         1: IugbMnyx-zUB4Fr6uUEhkY_bW14.crl (hash: vlEFFfGU0FSyliysX82A0nPZ//NKz0fRt+CjjhcI0i0=)
                          2: 7E847B60998D11EEB9881356C4F9AE02.roa (hash: m7qVjApLjSS3xFS82auNn6PoE/p21+0h7EKugXT/tVU=)
                          3: 99D6FBE6341F11E9BF826924C4F9AE02.roa (hash: n/zZhuhV9LV6VYEegyXndY9jGAj5j33BeGHT7RYFJDo=)
                          4: 609B8BC27D7B11EDB6B77173C4F9AE02.roa (hash: /PsoGtK7sk/1NM2LKDz9lkrfphVbqKl1YtY9n4XLc64=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl
                          rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 16:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6278 (0x1886)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B5BD, serialNumber=22E81B327CB1FB3501E05AFAB94121918FDB5B5E
        Validity
            Not Before: Aug 22 16:37:27 2025 GMT
            Not After : Aug 29 16:37:27 2025 GMT
        Subject: CN=68a89cc7-3dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:dc:96:84:ab:31:22:7c:c3:39:73:83:88:76:
                    48:2d:2e:e6:c4:3b:33:14:5e:df:3c:16:88:77:12:
                    65:43:64:65:56:fa:6e:ec:bb:23:49:84:61:99:c8:
                    76:fa:e3:e2:da:a5:35:70:08:6b:fb:84:ea:3f:d8:
                    11:9f:91:44:a6:93:e2:b1:0a:27:4b:a9:44:1d:78:
                    4e:47:88:7a:26:93:08:fa:4c:26:e9:7a:6c:81:0d:
                    c9:5b:a4:f2:98:f7:63:3d:2a:79:e9:63:35:19:23:
                    5f:24:a6:a6:4f:87:73:8f:bc:9b:99:8b:13:47:da:
                    ef:ea:93:64:90:41:de:b5:22:9e:c7:2c:a7:8f:91:
                    58:10:d3:b2:2a:71:66:7f:9f:4e:c9:d1:8c:7d:02:
                    4f:08:3d:0a:25:8f:b7:1b:dc:1a:68:6e:fc:7f:1a:
                    0d:14:f8:9c:a6:35:9f:b5:47:4e:64:82:71:9b:a2:
                    d3:b7:76:99:b6:d3:43:66:87:4c:44:59:a0:55:45:
                    26:53:e4:2c:b1:14:86:b0:dd:e5:bc:d0:1c:35:ca:
                    9c:4d:2b:b7:06:93:38:3f:a7:13:55:bd:f1:e1:02:
                    7f:81:d2:ad:cc:02:80:90:02:1a:9a:45:2d:8c:60:
                    7e:d3:1b:08:3c:3b:56:ae:bd:cf:b3:fd:ab:7f:63:
                    2e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BE:BB:BC:AE:AA:10:F4:5B:A0:1B:DD:F8:FD:52:F5:CC:2D:C6:B2
            X509v3 Authority Key Identifier:
                keyid:22:E8:1B:32:7C:B1:FB:35:01:E0:5A:FA:B9:41:21:91:8F:DB:5B:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IugbMnyx-zUB4Fr6uUEhkY_bW14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B5BD/33CB117AB5A911E79C74CB72C4F9AE02/IugbMnyx-zUB4Fr6uUEhkY_bW14.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d4:9b:cf:47:1c:0f:d4:3c:1e:84:1e:ca:b4:18:17:be:02:
         f1:9f:87:5d:65:28:35:a4:ed:89:a9:c0:06:a0:80:bd:7e:9b:
         4a:0f:2a:cc:dc:9c:32:54:db:75:11:ef:21:a1:14:94:bb:a7:
         fd:ea:3e:6a:77:4b:c6:77:0c:2d:08:5b:bc:aa:b3:95:78:0b:
         30:04:b8:b8:f0:fb:1e:9b:fe:db:d9:a8:64:66:fd:14:ec:25:
         57:da:be:03:b2:09:1e:06:c9:6f:bf:ad:ee:6c:3c:ca:14:74:
         de:b4:b4:f4:9b:4c:9f:9f:3b:78:61:25:cb:dd:31:04:32:35:
         41:62:75:40:55:ad:11:ae:e7:5c:ba:fa:1e:ea:20:a0:13:06:
         80:06:6d:63:96:6a:6d:5b:72:18:89:8f:82:57:72:7e:fa:44:
         67:02:c7:33:05:4e:30:14:ef:6d:21:8a:f0:72:14:50:7c:d9:
         ff:f2:a3:78:38:23:cb:41:4d:80:e4:07:98:b3:39:51:10:5c:
         f8:8c:30:ce:77:55:97:55:e1:3c:76:30:98:a8:dd:c7:13:c9:
         86:09:f8:28:67:9f:17:6d:b4:76:5c:dc:6e:bb:31:67:68:d8:
         e5:81:e2:82:ef:90:86:6e:2e:e6:aa:5e:fc:55:a6:c6:19:eb:
         7b:f3:cc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:22:57 2025 by rpki-client