Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
File:                     _qS5bzmD92nHM5dFbBK5D2QkbHw.mft (raw, json)
Hash identifier:          OcPxfz2fgCYAxt4zcCY+S/ApftEi7uxst6aro16DO5E=
Subject key identifier:   B1:63:BA:0C:F8:34:1E:4E:01:C3:65:0A:52:41:E8:83:B6:70:DC:21
Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C
Certificate issuer:       /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
Certificate serial:       186E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
Manifest number:          1857
Signing time:             Mon 30 Jun 2025 16:39:57 +0000
Manifest this update:     Mon 30 Jun 2025 16:39:57 +0000
Manifest next update:     Mon 07 Jul 2025 16:39:57 +0000
Files and hashes:         1: _qS5bzmD92nHM5dFbBK5D2QkbHw.crl (hash: b1JAF6Egrm51uwHT31vv2Wbi8fRQsWpifWt2lNyr0Do=)
                          2: 8C3BBD78F0D611EDAF996E15C4F9AE02.roa (hash: N7dx64GJQaTD+hfotgNWy8WEHDuKcv63Y/iKVEUUUcc=)
                          3: C6454260AA9A11E7B4776E52C4F9AE02.roa (hash: 0pdtzVqkZfrRuKXWFlClUIrZtwjYq09u9Tu2fAJzA2k=)
                          4: 7F77220A143811EE97A64D19C4F9AE02.roa (hash: ifAfuqdkBihiiYwd3cqT6s5KTTI/lvGZWL7UrWL4Qzs=)
                          5: 5A8744D8143411EEAB1A5D73C4F9AE02.roa (hash: x8Y3lIEpnx3SAsHPEwwS/VLgFTVHt3ABZ23zAnhnfc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl
                          rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 16:39:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6254 (0x186e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D36A, serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
        Validity
            Not Before: Jun 30 16:39:57 2025 GMT
            Not After : Jul  7 16:39:57 2025 GMT
        Subject: CN=6862bddd-d364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:42:3e:f9:f1:05:73:48:ec:c0:91:c6:fb:43:
                    be:27:b5:8a:93:e1:f7:8e:c1:27:2f:39:61:d3:d7:
                    f2:14:0e:de:11:f9:f4:70:f5:c5:dc:b5:5d:fc:00:
                    1c:e2:24:0f:8c:6a:46:17:23:29:97:db:54:c8:6d:
                    5e:f1:54:dd:ec:82:da:5e:0f:72:7b:d3:e0:5d:48:
                    5c:5a:58:9a:83:33:7a:ab:0a:a3:02:d5:fc:88:1d:
                    00:e0:dd:4a:6d:70:c8:c8:92:c7:49:e1:52:34:a5:
                    89:b9:c8:97:0d:c7:38:8e:e8:24:90:2e:15:e6:55:
                    e3:12:3a:76:db:7b:ad:ce:db:39:33:7a:99:45:2e:
                    81:ea:47:35:dd:6c:0a:52:dc:e3:30:77:1e:ae:d4:
                    a4:14:13:58:e2:66:28:97:bc:50:67:03:33:03:ca:
                    f2:39:69:34:15:1e:25:be:3b:26:8a:f4:8c:15:68:
                    bf:e4:63:45:d5:9d:ee:81:a4:a9:92:cf:5a:0e:d4:
                    a9:dc:6f:10:2c:b3:bb:5c:64:a6:94:19:65:fa:73:
                    02:00:63:3c:62:29:7a:2a:c6:c9:f0:78:77:66:dc:
                    b1:4e:9e:4e:fa:db:b6:7c:91:a7:4c:be:e7:85:3c:
                    9c:c5:8f:1a:63:27:28:65:9b:06:9e:de:3a:9a:d8:
                    9f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:63:BA:0C:F8:34:1E:4E:01:C3:65:0A:52:41:E8:83:B6:70:DC:21
            X509v3 Authority Key Identifier:
                keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:90:6a:20:e7:c7:97:49:b0:c5:d0:8d:3e:b9:1c:b3:19:59:
         db:7a:e3:0e:12:57:74:d5:6b:80:da:69:ee:d5:82:33:84:18:
         e4:55:da:95:e0:16:bf:01:62:05:0f:24:7d:91:4d:43:de:72:
         3d:81:a5:61:1e:24:e2:66:3a:3d:e3:c9:99:67:69:cf:59:46:
         9c:f6:77:06:20:72:f3:be:d9:d5:4d:73:4a:10:0e:a0:22:67:
         bb:a4:9d:09:35:e3:bc:b6:33:39:ac:ae:f5:0b:af:a0:09:ef:
         3b:ce:94:83:6b:29:f7:3b:23:69:8d:25:36:8e:48:0e:72:f9:
         8c:0c:1e:24:3d:94:b7:bb:90:a1:a4:06:43:22:8f:a6:1c:9d:
         18:10:09:1a:a8:4a:9b:c3:c2:ee:1f:6a:b4:16:b1:19:cb:90:
         42:44:92:47:d6:91:ab:3f:27:9e:03:62:44:99:a2:93:e6:08:
         b8:c7:cd:7e:04:61:f6:5b:14:cd:f5:66:e5:b1:13:00:2d:a0:
         e0:70:65:e4:f0:7a:3b:8e:d2:e8:a3:f3:36:a7:5f:a9:a4:b1:
         af:d3:bd:2b:4a:5f:ae:61:b5:f3:23:91:43:65:f4:da:78:87:
         4b:38:03:79:69:d1:63:57:8a:d9:10:0e:c9:25:05:86:7e:18:
         76:4d:a0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:26:55 2025 by rpki-client