Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft
File:                     P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft (raw, json)
Hash identifier:          acuL9I+rDi7Yth6W8kPevFr/58MkvfmRt+S+mp3XpU0=
Subject key identifier:   B1:0D:A5:64:C7:36:9D:54:52:38:C1:62:30:7D:8F:8D:26:03:83:01
Authority key identifier: 3F:9F:C9:D9:42:19:8C:47:23:34:A3:7E:AD:3D:EA:B5:03:92:E8:2F
Certificate issuer:       /CN=A9186753/serialNumber=3F9FC9D942198C472334A37EAD3DEAB50392E82F
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft
Manifest number:          54
Signing time:             Sat 23 Aug 2025 07:30:49 +0000
Manifest this update:     Sat 23 Aug 2025 07:30:49 +0000
Manifest next update:     Sat 30 Aug 2025 07:30:49 +0000
Files and hashes:         1: P5_J2UIZjEcjNKN-rT3qtQOS6C8.crl (hash: hy/xPssENSxKYpRCT5xf2DIfItXK509qfSGDPsxJVpA=)
                          2: 62BBFF4A046A11F081D54156C4F9AE02.roa (hash: pZymfXzsM+oU7Rjr41rJ4omJoS7JHWwRPlAblPbDAXc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.crl
                          rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 07:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186753, serialNumber=3F9FC9D942198C472334A37EAD3DEAB50392E82F
        Validity
            Not Before: Aug 23 07:30:49 2025 GMT
            Not After : Aug 30 07:30:49 2025 GMT
        Subject: CN=68a96e29-cfc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fe:8e:51:19:bf:b9:e6:d3:25:97:a5:7b:9e:
                    dc:83:45:d0:18:7d:18:76:58:ef:f9:ce:be:e4:e4:
                    35:03:e0:cb:47:1d:89:af:12:f3:e0:b8:04:0f:f1:
                    88:6d:69:39:51:0e:d3:94:d8:97:ed:26:e7:0c:7d:
                    38:86:5a:f2:33:d9:c4:52:c7:be:b4:69:8c:a5:b0:
                    99:29:91:c4:53:82:8f:52:e7:7f:51:79:83:40:a9:
                    b8:16:63:7d:48:60:c0:6a:a2:8e:33:4d:5a:7e:3c:
                    c0:8a:e7:90:bb:1f:a3:fe:64:d0:30:2d:c0:b1:91:
                    c1:98:98:64:cd:14:21:7c:01:ba:01:bf:d9:dd:58:
                    99:49:1b:55:e8:9d:34:21:1b:e4:40:28:2b:c1:77:
                    24:52:85:f5:8e:03:24:26:c1:5f:ae:84:5f:69:62:
                    87:0d:78:82:e5:c9:ce:7a:7c:65:0a:f4:41:93:07:
                    a1:83:10:db:fc:d0:7d:d2:8a:e1:f1:9f:7e:e1:fd:
                    cf:e2:83:63:00:01:bb:3b:27:48:3b:2e:a1:c4:50:
                    71:e7:0d:de:64:76:2f:3f:84:08:f3:d1:e2:48:2b:
                    6e:cb:11:11:8d:5c:d7:52:fc:d5:a8:d5:e8:7e:cb:
                    f7:8f:82:0f:26:a4:8e:27:59:d2:79:8c:7a:49:f0:
                    91:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0D:A5:64:C7:36:9D:54:52:38:C1:62:30:7D:8F:8D:26:03:83:01
            X509v3 Authority Key Identifier:
                keyid:3F:9F:C9:D9:42:19:8C:47:23:34:A3:7E:AD:3D:EA:B5:03:92:E8:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5_J2UIZjEcjNKN-rT3qtQOS6C8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186753/721BD31E046711F0857E1763C4F9AE02/P5_J2UIZjEcjNKN-rT3qtQOS6C8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:09:9b:b3:67:d9:f5:80:ad:23:21:da:36:8d:13:4b:47:67:
         9e:43:92:02:11:67:11:1f:9f:c0:60:d6:3e:97:e0:6d:21:55:
         e3:56:19:b3:26:c2:73:49:9d:97:77:bc:74:06:9a:73:07:57:
         3f:c7:2c:8a:e4:91:b6:fe:c6:3b:9d:ab:3f:37:68:87:c2:0d:
         95:e9:3c:c4:a6:ad:f0:a3:c4:5a:1f:e5:62:ac:5b:63:29:06:
         17:f2:68:69:1d:2c:36:12:c9:be:f0:46:78:12:ca:8a:af:ee:
         1c:40:ce:5e:42:a7:ac:19:ec:14:7a:51:0c:30:79:15:32:9d:
         6c:f0:82:3a:09:3a:b3:be:99:5e:8d:e4:e7:bb:06:5c:97:8c:
         4d:b2:bd:32:f6:d3:c6:3a:52:44:75:1d:15:b5:b4:23:fa:01:
         9b:44:7e:7c:4c:ef:ec:ef:20:ea:b3:ff:ce:39:a9:cd:ca:fc:
         1b:85:30:f4:a8:7b:30:75:16:b7:32:49:f1:4d:bc:dc:34:55:
         a2:5f:e4:c1:95:f6:d0:c9:ff:e4:ba:ac:cd:7f:2d:dd:26:44:
         3b:19:23:1a:72:f4:eb:0c:39:8e:26:d0:7a:2c:2e:e0:ef:9c:
         87:62:a6:10:87:d2:a4:4f:e1:77:06:69:73:df:5f:ce:b2:a3:
         a8:f8:ef:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:15:13 2025 by rpki-client