Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft
File:                     q30L1dKrXe4vHNaWuCm675d_eM4.mft (raw, json)
Hash identifier:          4kvXwhiGqvl2K0aiIoKXQZPWNCokkl+iZCo47sYcIj4=
Subject key identifier:   4D:6D:11:3F:FC:49:59:92:D8:5F:D5:23:39:60:E5:AA:3C:66:46:10
Authority key identifier: AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE
Certificate issuer:       /CN=A9171A5B/serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE
Certificate serial:       18DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft
Manifest number:          18C5
Signing time:             Fri 04 Jul 2025 16:44:37 +0000
Manifest this update:     Fri 04 Jul 2025 16:44:37 +0000
Manifest next update:     Fri 11 Jul 2025 16:44:37 +0000
Files and hashes:         1: q30L1dKrXe4vHNaWuCm675d_eM4.crl (hash: URrCaPVGLFqtmevXXzKZi/8kpRW4NABCOPsy04eIV5o=)
                          2: EC8BB4F2B2B411EF8B387C7CC4F9AE02.roa (hash: YcDZtKeRh1UHltnHTYosXa988+fvsMaT0V4n1NKi1tc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl
                          rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6366 (0x18de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171A5B, serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE
        Validity
            Not Before: Jul  4 16:44:37 2025 GMT
            Not After : Jul 11 16:44:37 2025 GMT
        Subject: CN=686804f5-3eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:d7:4b:78:3b:68:54:37:d7:e3:0a:3a:9e:
                    c7:d0:11:f3:eb:50:69:de:40:f2:45:4e:a9:25:6d:
                    08:ab:23:ee:11:44:41:15:64:58:e7:d5:ce:17:b8:
                    a8:df:32:d8:10:06:4b:21:e9:f4:27:19:79:09:bd:
                    9c:b4:10:eb:7c:09:ff:eb:dd:c1:b0:3f:41:8b:01:
                    06:30:5f:db:cc:c0:68:e3:ef:ac:85:60:7b:f5:42:
                    52:7f:d3:f1:04:7b:0c:21:75:f8:13:4d:0e:94:87:
                    af:cf:07:36:44:62:19:3e:f4:b2:b6:aa:66:14:c7:
                    94:33:f5:9b:e2:e9:9a:6d:a6:99:ed:7b:24:b6:15:
                    9d:d5:0a:19:93:7c:e5:2f:e7:3c:a4:f4:8b:ba:2f:
                    cc:94:32:31:6e:8c:b8:8e:54:9b:85:c2:70:48:24:
                    c3:3e:63:76:68:3e:35:46:3d:a2:4b:d8:c7:93:ff:
                    20:44:52:73:b2:95:22:cd:12:7b:7a:c8:9f:a8:a4:
                    f9:9e:3c:72:63:d4:fa:64:bc:73:31:3e:b7:a2:55:
                    17:fb:20:36:9d:dc:57:15:3f:68:5f:00:b7:e5:66:
                    de:51:17:e5:b4:a4:5f:aa:6d:b9:8f:56:7c:02:ab:
                    19:3c:e3:c1:cf:d4:5e:54:60:85:69:16:39:b6:ff:
                    4f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6D:11:3F:FC:49:59:92:D8:5F:D5:23:39:60:E5:AA:3C:66:46:10
            X509v3 Authority Key Identifier:
                keyid:AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:5d:f1:78:54:a0:f5:23:f4:81:3e:4f:b5:33:65:ea:6b:14:
         30:4a:1c:10:2a:a8:e3:d4:03:db:7f:8d:dd:67:4d:25:99:66:
         4b:fd:54:ba:bc:fb:e4:4e:83:72:26:e2:01:f6:9c:33:e2:07:
         60:85:6f:98:98:5d:89:15:ca:d8:70:c6:31:28:24:fa:8e:10:
         f7:85:00:0d:86:19:2b:f7:60:7d:ce:0c:01:6a:a6:cf:76:40:
         cd:74:42:89:bd:5e:dd:86:c1:17:6b:62:94:73:10:08:08:6e:
         c8:fc:2a:72:51:32:be:bb:96:7e:34:81:67:2f:81:92:7a:95:
         b2:8f:d0:93:a5:41:22:8e:f9:80:95:f7:2c:60:e3:c1:3a:c0:
         19:c3:dc:da:c0:66:b4:ee:5f:1f:11:e2:d5:25:03:bf:84:07:
         e3:60:11:e9:0f:09:77:d4:de:cb:46:b1:6d:f7:69:49:2e:99:
         36:b6:64:5d:9a:68:72:51:e6:83:ac:16:19:49:13:6c:48:62:
         ab:84:7b:6d:23:e0:83:36:93:e6:ba:86:19:81:39:30:da:9c:
         84:0a:fa:de:cb:59:26:7b:10:e2:90:f2:c9:a4:e9:e6:cc:4a:
         8e:41:46:e4:e2:bf:75:db:f0:d8:1c:e3:28:c5:8d:30:4a:61:
         db:69:5d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 18:37:02 2025 by rpki-client