Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft
File:                     xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft (raw, json)
Hash identifier:          g2n6MlPfSX724SsA8pRBbjx8sFQJpbibds3HAlveBmc=
Subject key identifier:   67:6D:B9:2F:54:1E:C9:63:F4:74:07:B6:04:1D:24:E8:34:E2:A1:73
Authority key identifier: C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92
Certificate issuer:       /CN=A918A750/serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192
Certificate serial:       019F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft
Manifest number:          019C
Signing time:             Sat 23 Aug 2025 03:26:45 +0000
Manifest this update:     Sat 23 Aug 2025 03:26:44 +0000
Manifest next update:     Sat 30 Aug 2025 03:26:44 +0000
Files and hashes:         1: xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl (hash: waMZosYHNwRBkh9Du0cnXGOQ/uGWVS5SdMDCX8PTOog=)
                          2: CD377A6C06B411EE841D6C4AC4F9AE02.roa (hash: eGRq+1XhrILN9pC7Bu29wtZG2xTxwIWpAe96/Tzv+yg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl
                          rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A750, serialNumber=C654FC476CDF2E306BE2770DAE910423611A3192
        Validity
            Not Before: Aug 23 03:26:44 2025 GMT
            Not After : Aug 30 03:26:44 2025 GMT
        Subject: CN=68a934f5-d523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ee:df:3a:d2:93:6e:0c:04:69:dd:d8:50:90:
                    65:41:e7:ac:f2:83:cf:7d:36:c1:bb:93:37:6f:76:
                    a3:c6:f0:d7:c2:bc:e6:54:71:3f:78:cf:a7:ad:b9:
                    df:71:1f:6b:61:90:8c:3a:41:ad:b6:1d:29:55:31:
                    78:bb:a1:a2:62:f7:92:9f:61:b6:7b:70:3a:58:bb:
                    e8:98:b2:1f:08:d7:ad:8e:80:f1:88:4d:48:4d:5b:
                    63:3d:84:28:e8:ad:ea:b5:3f:1a:f2:4b:46:3a:35:
                    73:98:71:c4:f9:d1:a6:0e:2d:a4:69:dc:f7:88:42:
                    fe:e8:6f:ee:75:a2:bc:49:54:d7:61:cc:2c:85:2d:
                    b8:99:68:e2:00:a3:33:38:c4:8e:83:92:97:bf:3e:
                    42:ce:36:00:bd:73:9e:8c:1e:e1:a7:9e:11:2f:f3:
                    e5:48:06:67:9e:14:1a:89:13:8b:c0:2c:ce:46:40:
                    f1:67:cf:8f:f9:02:31:74:81:0b:44:5d:aa:c2:d9:
                    55:69:c0:c7:a8:5d:e5:c3:77:56:49:e1:f8:c1:fc:
                    26:04:ca:bf:1d:63:4c:e3:a4:63:0c:d2:67:da:cf:
                    96:a0:3b:1f:5f:b5:90:46:be:40:25:7b:db:48:2e:
                    cf:87:76:f3:20:01:dc:d6:38:c6:2b:25:72:9d:8d:
                    37:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6D:B9:2F:54:1E:C9:63:F4:74:07:B6:04:1D:24:E8:34:E2:A1:73
            X509v3 Authority Key Identifier:
                keyid:C6:54:FC:47:6C:DF:2E:30:6B:E2:77:0D:AE:91:04:23:61:1A:31:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlT8R2zfLjBr4ncNrpEEI2EaMZI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A750/451D6A6A06AF11EE879A7045C4F9AE02/xlT8R2zfLjBr4ncNrpEEI2EaMZI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:8d:a5:b5:d0:5c:a4:94:67:2b:55:de:a6:c1:67:6e:7b:d0:
         ed:9a:54:cc:64:81:12:87:81:fc:c1:ca:4d:74:2a:f3:a1:96:
         f8:9d:a0:aa:87:47:bd:32:7b:c2:75:9f:f5:3f:68:1f:3f:37:
         8e:97:1c:39:68:6d:0e:6c:52:9f:de:c6:10:2a:82:56:dd:49:
         7f:e7:f4:c5:83:d5:e2:f2:1e:c0:d4:05:6e:5a:13:47:d3:6e:
         49:2c:77:f0:be:2c:7a:3e:58:05:82:f0:78:49:5d:1c:ce:15:
         27:49:0a:d7:23:b0:7d:e2:bb:33:09:c0:28:cb:a0:42:fb:e9:
         b9:32:f9:a3:fe:92:d1:c7:7e:68:50:09:64:6d:3f:11:33:d9:
         b8:75:56:e8:87:cb:a1:b9:fc:ab:96:0b:39:dc:40:da:d5:48:
         6f:dd:eb:4a:2d:c9:c7:e7:50:20:c5:2f:e1:8e:10:10:fa:35:
         32:9f:fb:70:56:57:c2:df:fd:4c:01:0a:9d:a3:cd:7e:39:18:
         4d:16:70:50:74:b0:22:77:4d:f3:0b:ec:3c:ee:11:7d:57:5c:
         df:45:a5:e9:8e:f0:b2:fb:e8:8a:ee:01:d6:e8:9c:66:95:be:
         4b:ec:ed:aa:d5:ae:71:8b:09:3c:57:28:87:70:c2:36:4a:29:
         1d:73:2b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:26:46 2025 by rpki-client