Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
File:                     RE63U1TDcG453qCP6VBEzSZj1q4.mft (raw, json)
Hash identifier:          iK+FhZSXjo3powqnYlX4bhuOjKHYeHjE8wBtRj/yXTY=
Subject key identifier:   80:A5:5F:C7:0C:9C:69:BF:E8:86:D6:31:E8:DC:00:25:F9:A8:44:98
Authority key identifier: 44:4E:B7:53:54:C3:70:6E:39:DE:A0:8F:E9:50:44:CD:26:63:D6:AE
Certificate issuer:       /CN=A9186004/serialNumber=444EB75354C3706E39DEA08FE95044CD2663D6AE
Certificate serial:       018E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
Manifest number:          018C
Signing time:             Sat 23 Aug 2025 03:36:26 +0000
Manifest this update:     Sat 23 Aug 2025 03:36:26 +0000
Manifest next update:     Sat 30 Aug 2025 03:36:26 +0000
Files and hashes:         1: RE63U1TDcG453qCP6VBEzSZj1q4.crl (hash: FHTkR71WdIvI4ukzKv++LN12U50lrSiJOUSUfumN6Lw=)
                          2: 341206FE1EFB11EEB72FB14EC4F9AE02.roa (hash: dpE2TI6QCYIe9HLRMKDulM368RG27zsQFQ0bkNTHfzY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.crl
                          rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186004, serialNumber=444EB75354C3706E39DEA08FE95044CD2663D6AE
        Validity
            Not Before: Aug 23 03:36:26 2025 GMT
            Not After : Aug 30 03:36:26 2025 GMT
        Subject: CN=68a9373a-f362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:69:12:00:ef:ab:d9:6a:d1:c0:15:f9:ff:c4:
                    d0:94:18:50:4f:27:30:2c:cf:7c:bc:fa:46:b9:c4:
                    71:6d:ed:5d:64:b1:14:46:09:2b:bd:c6:ea:d6:b2:
                    50:fe:0c:a6:9b:34:da:26:e7:b2:98:a2:4b:a1:36:
                    46:50:5a:f3:1e:c0:10:dc:a2:13:a0:a1:ce:f2:8d:
                    71:6e:12:71:9b:78:7e:97:05:b4:40:e0:60:fc:ba:
                    54:ed:4c:38:87:90:ed:02:74:72:a4:a1:d7:b6:4d:
                    99:9b:34:a8:ee:b4:96:1f:0e:ae:39:e1:a4:77:73:
                    94:ae:2a:a4:60:9f:cc:3f:80:8c:c0:cf:a3:4b:68:
                    f4:55:51:45:1c:1a:73:67:65:45:85:6b:8f:d3:ce:
                    57:e7:9b:79:c4:3f:7f:a3:bd:8e:47:6d:69:b3:92:
                    66:be:26:13:e3:30:12:07:f0:51:10:1e:9e:1f:aa:
                    26:b1:a3:46:8b:cd:0b:21:31:42:c7:e1:14:55:9d:
                    e6:43:14:f9:40:29:a6:db:6b:99:91:eb:e3:5a:8e:
                    54:4b:8a:8a:a6:77:85:a4:23:da:81:fc:a4:e1:5a:
                    da:20:65:22:9c:3c:00:7d:bd:7e:fb:8b:7a:1c:53:
                    b7:23:af:c9:07:b0:b4:01:9c:83:ae:d2:71:0c:8c:
                    94:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A5:5F:C7:0C:9C:69:BF:E8:86:D6:31:E8:DC:00:25:F9:A8:44:98
            X509v3 Authority Key Identifier:
                keyid:44:4E:B7:53:54:C3:70:6E:39:DE:A0:8F:E9:50:44:CD:26:63:D6:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:3c:b4:e3:59:ac:33:70:68:08:bb:a5:ed:ea:7b:6a:58:9b:
         86:da:32:b8:05:8c:9d:8e:3e:05:2a:b3:57:7e:1d:a3:18:20:
         6b:0f:a6:e4:d0:61:24:7f:15:fb:b1:b1:f6:d6:ca:73:e5:a3:
         1b:ac:31:dd:09:47:75:95:f6:75:f0:73:84:7e:de:6d:93:10:
         e8:a6:3e:b7:29:fa:d0:87:73:06:8f:1c:3a:53:3c:9a:bd:f6:
         f6:f9:fa:db:f7:4e:a2:be:7d:3e:40:bb:59:7c:b4:d3:6e:30:
         e4:5a:11:6c:ca:79:25:43:72:7e:3f:01:82:20:ef:ac:6e:55:
         bb:db:cf:49:ed:97:85:05:a8:77:71:fb:ce:d4:71:f0:bf:3a:
         a1:8e:0c:b7:2e:03:7d:25:1d:04:d7:31:07:6a:38:fe:6d:57:
         a5:fc:e2:65:46:e2:28:3d:78:03:75:7b:2a:ef:73:64:8d:b2:
         1e:01:b1:0d:ae:20:9b:44:4c:99:69:3e:48:f5:6d:bd:99:da:
         00:cb:93:c6:70:62:2f:3f:c3:0b:17:6f:9e:44:b1:cb:06:48:
         f3:82:22:63:cf:ed:e6:75:2e:fe:5d:f3:d9:2a:dc:d6:69:47:
         c7:11:a4:8d:7d:70:4f:27:0f:3b:c2:7f:72:e1:e1:e0:f6:ce:
         7e:de:20:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:36:46 2025 by rpki-client