Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
File:                     A0iYvB-xsaJGF6zZvIMq6D6vni0.mft (raw, json)
Hash identifier:          xnrbUMNew1Sjj6D0swwOFbk1CT6WFKP0yflfjJolzt8=
Subject key identifier:   5A:47:E9:D1:F5:A4:B2:3A:91:9E:7C:F5:3C:DE:03:D1:75:4E:DA:DA
Authority key identifier: 03:48:98:BC:1F:B1:B1:A2:46:17:AC:D9:BC:83:2A:E8:3E:AF:9E:2D
Certificate issuer:       /CN=A918D727/serialNumber=034898BC1FB1B1A24617ACD9BC832AE83EAF9E2D
Certificate serial:       0181
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
Manifest number:          017E
Signing time:             Sat 23 Aug 2025 03:48:08 +0000
Manifest this update:     Sat 23 Aug 2025 03:48:07 +0000
Manifest next update:     Sat 30 Aug 2025 03:48:07 +0000
Files and hashes:         1: A0iYvB-xsaJGF6zZvIMq6D6vni0.crl (hash: +yIk9rg4pjUwGHsC5Z2kW5D0YR6vvSltaaTPZCPqUSQ=)
                          2: A7E3DAB237FB11EEBB03FD6CC4F9AE02.roa (hash: 9sHmTTxFdikI75A0R8/VBaOSUMcfi7+BpHqL1iyf12Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.crl
                          rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:48:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D727, serialNumber=034898BC1FB1B1A24617ACD9BC832AE83EAF9E2D
        Validity
            Not Before: Aug 23 03:48:07 2025 GMT
            Not After : Aug 30 03:48:07 2025 GMT
        Subject: CN=68a939f7-ef37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7c:9a:3c:c0:79:cd:ab:9f:ba:44:f8:69:70:
                    ea:e3:42:39:2b:12:22:0f:05:da:c2:e4:71:fb:86:
                    61:a6:00:37:7f:98:70:05:0f:f6:3e:8f:2c:0e:c2:
                    cd:3c:29:ea:ca:f0:e7:e8:55:07:fa:8b:da:4e:7f:
                    7b:77:56:32:5e:15:83:f8:bf:f1:63:e6:ad:56:34:
                    f9:56:1d:e2:72:d2:74:ce:88:19:38:82:86:12:c7:
                    49:2b:27:f6:60:9f:c3:f9:c0:c3:99:2a:5c:78:1d:
                    13:12:91:8e:ca:e9:86:a0:70:69:02:00:7e:9c:4f:
                    d4:97:1d:4b:05:2b:0a:7b:8c:ef:80:5a:5d:93:6b:
                    1e:e0:1f:94:bd:bb:c2:18:96:29:7e:d4:70:37:be:
                    5e:71:32:58:fb:c4:5c:c9:db:c7:c8:04:15:ff:10:
                    67:74:93:0b:68:4b:04:3b:93:4d:8d:08:c4:6e:3d:
                    da:95:f4:96:93:16:eb:ea:64:9e:6b:dd:31:e2:b2:
                    ef:5b:42:34:3f:12:7b:af:b7:07:d3:63:7d:f3:15:
                    c1:be:ac:ba:d7:78:a7:6d:e6:08:8e:a6:1a:a7:3d:
                    e0:7a:5b:c0:71:3b:c0:f6:78:bb:25:8f:8e:1c:b3:
                    e4:a2:ea:7b:64:a7:81:53:87:7a:4b:cb:e7:b9:06:
                    6b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:47:E9:D1:F5:A4:B2:3A:91:9E:7C:F5:3C:DE:03:D1:75:4E:DA:DA
            X509v3 Authority Key Identifier:
                keyid:03:48:98:BC:1F:B1:B1:A2:46:17:AC:D9:BC:83:2A:E8:3E:AF:9E:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:10:1b:ba:e3:8b:c6:97:51:1f:8d:a9:ac:15:d1:c8:9b:29:
         05:41:05:d5:3e:9a:02:3a:49:fd:aa:f0:b6:b0:66:a2:1f:72:
         4f:24:d3:2a:ed:d1:27:d6:98:10:22:1e:89:a0:0e:71:20:4c:
         fa:24:47:a1:9d:58:58:a2:12:b6:21:86:ac:e9:95:ae:25:21:
         49:66:2b:33:30:cd:3f:db:4d:28:b1:ba:3e:cf:34:5d:ca:44:
         dd:23:f8:33:8e:11:30:e9:b2:eb:bd:99:34:a1:f2:05:e8:b0:
         67:d4:52:d6:c0:48:d8:65:8b:b2:58:2d:d1:cd:6c:1d:de:2c:
         e5:75:83:2a:5b:10:6c:43:bf:b0:28:26:08:8b:9f:ba:a0:e3:
         5f:24:90:33:bb:fd:00:71:24:e2:a4:a8:f1:e8:81:0c:8d:d2:
         6f:28:ec:02:20:76:8f:13:72:e3:48:4e:60:9b:e4:13:49:28:
         80:c9:3e:ef:e7:30:26:02:cd:94:a5:6e:ef:bc:55:ef:2f:51:
         3f:99:15:7f:c1:63:17:7d:ea:d4:a6:1a:00:62:1c:01:cd:13:
         5e:19:41:c4:93:52:90:82:74:de:5b:72:e2:03:44:fa:32:1e:
         c0:68:66:f7:6b:75:27:54:25:f5:6c:a1:ac:c0:58:a0:f6:4c:
         83:24:cb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:37:37 2025 by rpki-client