Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
File:                     pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft (raw, json)
Hash identifier:          jEA3JCe3frGe5HQXibPGcAVTzfMCOngQerpNtKaVsBc=
Subject key identifier:   A9:26:87:4E:BA:E9:77:11:E7:D9:7B:3B:B2:4B:22:02:90:A8:EB:F6
Authority key identifier: A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3
Certificate issuer:       /CN=A916A763/serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3
Certificate serial:       0185
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
Manifest number:          017D
Signing time:             Sat 23 Aug 2025 03:51:40 +0000
Manifest this update:     Sat 23 Aug 2025 03:51:40 +0000
Manifest next update:     Sat 30 Aug 2025 03:51:40 +0000
Files and hashes:         1: pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl (hash: EGBrqF9GIqhlUM3Ru5iqy0q2epZIpTlAKVtMPN9U3eo=)
                          2: 966CB516179B11F080B9434CC4F9AE02.roa (hash: R5V6cNUR7QLj7LU1QU6TMYs4Bu+rino6/Kk8saAW2NA=)
                          3: BF685A9E232E11F0B8BD6F6AC4F9AE02.roa (hash: kNV7VPtOhVOV5sWtOMUE/oMw0hk3N1NsBatuZRoh3AE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl
                          rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:51:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A763, serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3
        Validity
            Not Before: Aug 23 03:51:40 2025 GMT
            Not After : Aug 30 03:51:40 2025 GMT
        Subject: CN=68a93acc-d2e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1d:45:0f:6c:b3:49:09:ff:c9:7c:93:3c:97:
                    2f:d7:09:37:64:36:26:17:f4:78:6f:6d:be:cc:bd:
                    ea:ba:98:c1:3a:1f:e4:c3:49:9a:57:45:27:21:df:
                    08:a4:4b:87:e6:87:2d:c7:21:9b:54:b4:28:d7:47:
                    5e:e4:84:c2:df:50:95:80:8c:9e:03:58:de:4c:bc:
                    62:12:c7:77:c6:4a:0f:14:14:6f:5b:b6:14:57:85:
                    ee:76:a5:84:54:fb:64:10:dc:86:f4:6f:90:b1:e1:
                    21:a7:7a:52:eb:d6:e2:ef:58:56:2d:04:91:ea:e8:
                    83:d9:88:a2:90:b3:0d:2b:88:d0:54:74:a5:33:58:
                    da:54:d2:3c:7c:e8:e6:55:91:67:57:7b:ef:69:65:
                    48:aa:7c:1a:f8:ad:02:e7:a0:cf:bb:5d:65:8e:6d:
                    e2:27:5f:d1:76:61:20:5c:f4:36:41:92:b4:9e:0c:
                    90:d8:30:f7:1d:5d:82:b3:0d:b3:17:f4:14:79:4c:
                    10:48:37:b7:48:0f:8c:38:31:97:d2:4d:12:f5:b4:
                    bf:c1:80:d7:8c:bd:4d:45:7b:b2:ff:10:84:2d:ad:
                    93:9c:90:32:ce:a9:0d:6f:e8:cb:3b:4f:76:80:34:
                    dc:f2:13:b4:aa:6f:a6:e8:18:a3:31:7c:93:28:3d:
                    c0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:26:87:4E:BA:E9:77:11:E7:D9:7B:3B:B2:4B:22:02:90:A8:EB:F6
            X509v3 Authority Key Identifier:
                keyid:A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ee:51:78:e9:95:1a:36:7a:ea:0b:94:a5:00:6a:dd:61:cc:
         80:70:16:df:9d:b3:c0:7c:3f:3f:a3:f5:7b:f0:66:f1:70:f9:
         4e:fb:54:75:44:84:f4:c9:45:3c:d7:e8:ac:0d:06:de:86:9a:
         c6:8c:ce:41:9f:3d:97:20:0a:10:29:42:fd:f8:17:fc:51:f8:
         35:88:16:01:fc:98:2b:84:0c:8d:6d:d9:cb:cc:55:48:0e:da:
         d6:0c:23:77:4c:96:83:ea:d0:12:e2:76:fd:31:05:7a:60:f7:
         01:65:fb:a0:59:7c:f1:0f:b2:ce:17:7a:16:9e:52:a5:93:fe:
         a7:71:c4:81:d5:3e:43:06:43:74:4e:3b:f5:00:06:07:53:c1:
         a2:08:26:74:4e:ba:46:86:e4:0f:3e:d0:73:70:7e:7a:88:ad:
         b3:8e:0b:7e:db:67:4f:67:a8:b4:1c:61:24:06:40:6c:d5:2a:
         5d:0d:55:37:3e:86:7a:2e:17:a7:00:87:76:ca:34:98:5b:dc:
         3e:36:f0:bd:6a:79:43:56:d3:61:66:5f:cc:87:f5:67:78:d3:
         82:3a:31:97:ac:38:ad:30:9a:ae:4d:3c:1a:e2:ea:57:40:62:
         3b:45:b2:4d:68:79:81:0e:53:7f:cf:9d:42:85:b9:d6:e1:73:
         53:0c:0a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:27:34 2025 by rpki-client