Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
File:                     5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft (raw, json)
Hash identifier:          gf5gTKYXnj/el+TH5Kc/X/18bpkl5a90aVpPy6sbPeE=
Subject key identifier:   25:51:C4:E1:DD:15:4F:EB:5B:F5:44:06:20:F9:EE:F3:84:F8:CB:3F
Authority key identifier: E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF
Certificate issuer:       /CN=A9187313/serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF
Certificate serial:       1992
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
Manifest number:          1973
Signing time:             Fri 22 Aug 2025 16:29:23 +0000
Manifest this update:     Fri 22 Aug 2025 16:29:23 +0000
Manifest next update:     Fri 29 Aug 2025 16:29:23 +0000
Files and hashes:         1: 5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl (hash: 3N89RlD/TCV5oQj1DvcwFHPe3eAod3KSONvJz7FH8uQ=)
                          2: 98E572FC777011E7BF7EED10C4F9AE02.roa (hash: lV2/2NW27xVZaBILThpNeuepTXhQgC2yA5suVSBt5Mg=)
                          3: 9787989A777011E7BF7EED10C4F9AE02.roa (hash: /pOoncr1KzYRXYjLbZuRohrO0FiLH7LyekaH9trend8=)
                          4: 97F31854777011E7BF7EED10C4F9AE02.roa (hash: 7+Ks4jZyLMHPbzW7FZP/GDFbxrDItsZ+/jUs9u2MSic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl
                          rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 16:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6546 (0x1992)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187313, serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF
        Validity
            Not Before: Aug 22 16:29:23 2025 GMT
            Not After : Aug 29 16:29:23 2025 GMT
        Subject: CN=68a89ae3-64b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:99:cc:7d:c0:48:ed:d2:57:03:26:51:3f:60:
                    6e:29:97:3f:ae:48:28:9d:f6:3d:07:0f:03:89:cc:
                    8a:1b:58:16:f4:d9:af:a9:e7:a7:ba:3c:4e:c4:4f:
                    bc:4e:7f:ea:99:36:3e:0f:24:2a:75:ed:5c:28:6e:
                    e4:e6:d0:14:cc:03:81:fa:c3:ed:0e:84:dc:a5:20:
                    a8:8c:ba:3f:98:e9:a7:ec:da:61:74:cb:c3:f9:92:
                    6f:7c:cc:87:6b:a6:22:64:90:76:92:e3:ae:a2:f8:
                    89:0d:bc:9c:22:02:c6:93:83:a9:63:71:26:67:05:
                    03:c4:df:a8:f5:04:64:7a:56:37:ac:b2:35:cc:42:
                    21:30:c8:31:18:9a:0f:77:c7:17:44:ae:30:3b:91:
                    12:96:fa:20:d3:de:a5:c1:00:44:41:8a:a1:4c:bb:
                    ee:44:55:4f:c8:86:f2:01:cc:97:ab:05:f1:3e:97:
                    cf:42:87:af:2f:bd:4f:10:29:64:d1:eb:83:a7:b9:
                    26:a7:85:93:b3:f2:a8:20:82:d5:5c:53:d2:63:04:
                    6a:75:67:92:44:61:2e:dd:74:86:2e:d2:07:e3:cc:
                    72:38:83:12:b1:28:9f:4e:c3:e9:05:2b:8a:4e:db:
                    f6:91:05:e3:5c:6f:a8:39:4c:19:e7:cd:ad:23:30:
                    e2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:51:C4:E1:DD:15:4F:EB:5B:F5:44:06:20:F9:EE:F3:84:F8:CB:3F
            X509v3 Authority Key Identifier:
                keyid:E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:e6:69:df:6f:68:94:c9:f2:25:41:79:dd:19:6f:5f:12:00:
         4f:49:ca:78:7a:64:9d:74:30:b6:53:39:28:1d:20:58:19:59:
         0c:2f:eb:8c:d9:b7:bb:11:cb:5d:fc:93:8b:14:08:a6:b2:60:
         a5:3c:23:1d:cc:ac:61:de:c9:b2:59:ec:b7:da:8a:cd:67:af:
         f0:fe:8d:0c:05:e5:79:c8:87:9d:49:31:28:55:e2:90:ed:5b:
         69:81:a2:94:d7:36:5d:9c:96:08:1e:56:24:24:25:7d:12:ed:
         75:d3:dd:6c:db:90:5e:73:3c:d9:e7:6b:d0:a3:29:34:89:94:
         2d:d6:53:64:23:5e:9e:68:d2:2f:ea:40:8a:d5:a4:0d:d7:15:
         ae:85:7d:c6:1c:64:25:4e:2a:d2:3f:13:2e:19:2e:06:68:a2:
         60:57:ca:dd:7d:7b:29:5a:06:05:13:b3:11:09:99:f1:7b:0c:
         8c:b9:f9:f2:13:df:64:d6:55:bf:69:5b:7b:1f:cd:75:38:3f:
         57:4d:66:36:1e:c7:c3:cc:21:94:80:47:5e:5a:b1:85:bf:a3:
         ab:24:8b:55:00:4c:78:05:fe:c7:b0:a2:13:e4:d9:d7:ef:00:
         4a:eb:80:52:9e:2a:d5:1f:12:de:fb:54:2b:76:9b:61:dd:f5:
         99:b0:e8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:13:27 2025 by rpki-client