Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft
File:                     ghhST3oWtYwNm3OUAxk5fuT8pv0.mft (raw, json)
Hash identifier:          Bxs0/LHDgxwepXuGgXtJ+ICjE9J4evSN5AWfERel0fo=
Subject key identifier:   62:4A:62:21:56:C6:AE:6B:92:9A:44:14:B7:A3:E5:5A:27:C3:4C:E2
Authority key identifier: 82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD
Certificate issuer:       /CN=A9179EE2/serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD
Certificate serial:       0807
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft
Manifest number:          07F5
Signing time:             Fri 22 Aug 2025 21:07:00 +0000
Manifest this update:     Fri 22 Aug 2025 21:07:00 +0000
Manifest next update:     Fri 29 Aug 2025 21:07:00 +0000
Files and hashes:         1: ghhST3oWtYwNm3OUAxk5fuT8pv0.crl (hash: +Yz9mdrM0mQkwIlxHZUmDKGviJHVD9DE/2KLbiMJ5Vc=)
                          2: 816A256CF57311EA86849119C4F9AE02.roa (hash: jh/uFXEIZPMO8B1QG/kheiWEegpd+33S7ffLLKrSdB0=)
                          3: 81E94F18F57311EA86849119C4F9AE02.roa (hash: d2TZXE18Xt38fADyNBS1PVNUEthCJSPtYY97KfIT80k=)
                          4: FD10505CC75011EFBA3D195BC4F9AE02.roa (hash: 5TA62bj3DT+mJ8Nio1yv4R6VCuB4DLublpXb87Ez56Y=)
                          5: 431106B2125611ED9FB5292EC4F9AE02.roa (hash: yYe2S/r+iFZmGGM++jOhHqDjwT0Z+vvfLaaWlIwsXLY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.crl
                          rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:06:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2055 (0x807)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179EE2, serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD
        Validity
            Not Before: Aug 22 21:07:00 2025 GMT
            Not After : Aug 29 21:07:00 2025 GMT
        Subject: CN=68a8dbf4-f43f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:20:2b:a3:ba:30:d9:d2:be:bb:91:32:9b:60:
                    10:14:98:7f:8b:b3:20:2f:93:fe:f5:77:4a:1b:c3:
                    0f:50:62:89:a8:35:81:28:e4:10:b4:e5:f0:73:d3:
                    46:3e:31:5d:6b:dd:9b:b1:fe:07:51:c4:0d:fc:c6:
                    11:a7:d3:8e:a6:b1:1e:6e:ea:b3:7c:aa:f5:a2:c0:
                    fc:ef:66:7c:84:c8:41:7d:95:a1:53:bd:ad:b5:9d:
                    95:92:29:9d:24:7b:90:54:90:3b:72:07:d2:88:1e:
                    f3:05:8f:66:7c:e0:d1:4b:ff:d3:b5:fc:30:ce:d2:
                    af:d3:f8:69:97:7f:f0:4e:8a:21:40:7c:62:b7:fe:
                    01:29:84:83:22:de:f5:7f:5b:0d:8a:a8:50:23:6b:
                    34:0a:83:74:e9:54:9b:14:c4:a9:d4:48:55:e5:65:
                    87:7f:7e:ee:eb:c0:6c:d5:1a:c8:a6:09:7b:a5:ea:
                    75:b8:f0:e6:c9:08:2f:70:f3:78:dd:42:29:12:68:
                    37:c4:b6:e5:4a:92:5e:a2:8f:12:9a:69:63:86:8e:
                    40:8d:50:e7:e2:44:13:19:ec:89:79:06:dd:e9:6a:
                    36:f7:94:5b:0d:c4:b6:ad:78:52:d1:dc:f2:ff:63:
                    42:a2:85:d5:ce:6b:e2:dd:33:7a:aa:a5:40:15:30:
                    d6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4A:62:21:56:C6:AE:6B:92:9A:44:14:B7:A3:E5:5A:27:C3:4C:E2
            X509v3 Authority Key Identifier:
                keyid:82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:f5:85:a2:f1:48:b9:c7:5e:03:e9:db:f6:92:7e:0e:53:a7:
         92:cf:c5:a0:7c:23:ca:f6:fd:ce:63:c8:df:dc:0b:91:23:36:
         1f:8f:46:a0:1b:70:3a:0e:27:39:b0:c1:6b:d1:0c:b2:45:95:
         4f:6f:7f:0f:88:fe:69:5d:57:81:c1:de:a1:19:01:41:f4:3d:
         37:46:25:29:22:21:eb:86:d4:18:00:66:c7:ee:55:39:bb:98:
         60:e2:01:83:36:ca:bf:f3:f4:77:6a:44:6b:20:30:a4:77:80:
         a7:67:5c:c6:e6:5b:b6:1c:53:a5:3f:fe:87:ad:90:ee:36:6f:
         0e:58:7e:81:2b:8a:f5:38:c3:c6:ca:8d:db:c3:46:6e:fe:15:
         fe:8e:3f:02:e1:23:6f:71:e2:44:4f:14:cf:f1:1d:9a:62:b5:
         fb:1e:3f:93:6c:88:ef:07:aa:79:d5:24:19:97:84:88:5c:39:
         d7:70:81:8e:55:9f:bd:67:0f:6e:0b:ac:e1:e2:f7:b4:92:2b:
         33:00:b1:45:b0:02:7f:ed:17:a7:b7:56:86:d1:fd:db:12:84:
         b0:d6:02:58:10:b6:1a:76:58:28:60:d5:3d:23:31:2d:dd:75:
         11:b4:73:e0:c8:9d:37:09:ea:82:e5:e6:48:5c:b7:3c:66:a3:
         83:b0:b0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:56:35 2025 by rpki-client