Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.mft
File:                     r1E53KFl4oTVSmzvYft6CRaJGw8.mft (raw, json)
Hash identifier:          NSU7iJ8XoLGkqpaS/p5lR7lxIvZRB6c8SjDUHETIwfk=
Subject key identifier:   56:09:AE:59:A3:2F:25:7C:A8:E7:98:32:33:FA:2D:3D:04:60:E2:E6
Authority key identifier: AF:51:39:DC:A1:65:E2:84:D5:4A:6C:EF:61:FB:7A:09:16:89:1B:0F
Certificate issuer:       /CN=A918379F/serialNumber=AF5139DCA165E284D54A6CEF61FB7A0916891B0F
Certificate serial:       0222
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1E53KFl4oTVSmzvYft6CRaJGw8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.mft
Manifest number:          021F
Signing time:             Sat 23 Aug 2025 02:10:15 +0000
Manifest this update:     Sat 23 Aug 2025 02:10:15 +0000
Manifest next update:     Sat 30 Aug 2025 02:10:15 +0000
Files and hashes:         1: r1E53KFl4oTVSmzvYft6CRaJGw8.crl (hash: GozX5EVJ5dSINNLlm3+T1KDyePaPXNp187+l3/vyXXM=)
                          2: 0B237586453311ED9A3F7844C4F9AE02.roa (hash: mEyvOlDX3kJHouKS9DLhCAJ43welizBv5m5kUTWRzII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.crl
                          rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1E53KFl4oTVSmzvYft6CRaJGw8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 02:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546 (0x222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918379F, serialNumber=AF5139DCA165E284D54A6CEF61FB7A0916891B0F
        Validity
            Not Before: Aug 23 02:10:15 2025 GMT
            Not After : Aug 30 02:10:15 2025 GMT
        Subject: CN=68a92307-d658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f7:6f:9d:ae:cd:e7:55:aa:f0:f9:3b:42:f3:
                    a3:77:a6:3e:52:de:47:65:55:a3:4c:83:41:db:c7:
                    31:da:af:33:2e:1c:0b:04:eb:72:c0:e5:22:f7:85:
                    47:65:c6:f3:bf:ef:f9:17:fc:4f:5f:ae:5b:87:f1:
                    e3:8f:3e:15:70:ec:ec:d1:01:b7:1f:1b:14:33:e0:
                    78:fb:03:78:c6:ac:d2:b5:9f:09:6d:5c:81:e8:41:
                    d8:80:3b:71:32:73:eb:00:54:87:06:f2:25:02:1e:
                    a6:68:91:d7:28:0c:e2:f2:f1:94:43:a6:24:ef:de:
                    a2:33:df:38:eb:75:a0:14:26:f3:c8:64:15:89:6f:
                    7b:bb:29:4c:0d:96:2a:20:30:84:63:f9:a9:89:1a:
                    83:07:c9:ef:77:5d:0b:c8:37:c7:21:d9:99:03:56:
                    7e:02:77:8e:fb:be:a2:f9:80:90:a9:2a:85:f5:04:
                    b5:95:ce:b0:6d:b8:64:38:90:1c:a7:4d:d1:29:55:
                    9f:eb:ca:3a:ee:1f:59:3a:c4:46:92:1e:3f:ee:a4:
                    86:4e:6a:d3:d0:e6:bb:8b:d4:bc:69:c4:5d:b6:d7:
                    43:16:77:a3:8e:d7:34:a7:06:e4:1a:21:27:ef:2d:
                    55:bb:15:fd:61:ce:ad:85:ba:b9:2b:c7:c9:16:5c:
                    58:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:09:AE:59:A3:2F:25:7C:A8:E7:98:32:33:FA:2D:3D:04:60:E2:E6
            X509v3 Authority Key Identifier:
                keyid:AF:51:39:DC:A1:65:E2:84:D5:4A:6C:EF:61:FB:7A:09:16:89:1B:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1E53KFl4oTVSmzvYft6CRaJGw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918379F/75CE2728421311EDBE014321C4F9AE02/r1E53KFl4oTVSmzvYft6CRaJGw8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:5c:bd:47:ee:12:b2:be:8f:c8:c7:45:41:e1:28:71:d5:25:
         4a:ca:ac:f7:97:89:b5:f5:4f:f4:b5:08:c3:81:83:1b:5e:29:
         06:d0:44:b9:77:45:28:6f:e4:a3:b4:0e:33:5e:4f:e5:71:c7:
         e8:53:05:1c:0a:b6:ef:69:8e:3f:dd:1d:43:a0:ad:fb:89:e5:
         cf:5e:9b:d9:a9:09:59:a8:bf:90:d0:96:43:43:b6:ac:df:74:
         aa:f1:97:e5:89:8d:4f:0d:d7:7f:48:96:ef:39:b0:c2:ee:91:
         20:3a:63:25:3b:fb:9a:59:27:73:ee:78:e3:80:0c:d1:32:ea:
         e5:1d:be:bb:f6:1c:ea:59:82:f8:ab:51:cf:79:80:40:9d:a4:
         0a:94:4a:2d:a9:30:69:01:ba:0b:aa:71:90:6e:cd:02:41:44:
         57:f8:02:a6:e3:a5:d0:9a:24:bb:62:95:0c:61:cd:c2:90:f3:
         19:9c:f9:2d:2d:de:60:fc:ed:cc:98:c2:2a:4c:fb:a0:cb:bb:
         9c:85:97:90:6e:8b:80:74:44:4a:89:f9:3e:19:94:ad:74:c2:
         59:4d:80:b7:c8:c1:d1:0f:d8:20:66:d1:a0:f9:6a:c7:9b:ae:
         7a:f2:5e:96:45:ff:1c:18:ce:c5:84:e5:da:28:84:e9:e6:66:
         90:44:35:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:44:36 2025 by rpki-client