Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
File:                     A0iYvB-xsaJGF6zZvIMq6D6vni0.mft (raw, json)
Hash identifier:          sXJHm53A6l+oKudhcDJlU3Qm/huxLlTSVklk9cdK0z8=
Subject key identifier:   06:3C:0C:65:91:4E:FB:3F:5E:77:1B:24:64:AB:EA:76:B6:2B:49:2A
Authority key identifier: 03:48:98:BC:1F:B1:B1:A2:46:17:AC:D9:BC:83:2A:E8:3E:AF:9E:2D
Certificate issuer:       /CN=A918D727/serialNumber=034898BC1FB1B1A24617ACD9BC832AE83EAF9E2D
Certificate serial:       0163
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
Manifest number:          0161
Signing time:             Tue 01 Jul 2025 04:26:46 +0000
Manifest this update:     Tue 01 Jul 2025 04:26:46 +0000
Manifest next update:     Tue 08 Jul 2025 04:26:45 +0000
Files and hashes:         1: A0iYvB-xsaJGF6zZvIMq6D6vni0.crl (hash: V+CJDdRyGPoSMh90rO7lfJRlVresxf11UKqz3gvAmbM=)
                          2: A7E3DAB237FB11EEBB03FD6CC4F9AE02.roa (hash: 8KhdFf717KdtqIgoQSLRSc05ReV0MsZo2CeN3+2la54=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.crl
                          rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 04:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D727, serialNumber=034898BC1FB1B1A24617ACD9BC832AE83EAF9E2D
        Validity
            Not Before: Jul  1 04:26:46 2025 GMT
            Not After : Jul  8 04:26:45 2025 GMT
        Subject: CN=68636386-a6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9f:26:ab:68:86:32:04:05:12:7b:13:fb:5f:
                    7b:8b:03:e7:a0:a8:c2:c8:ed:89:01:83:82:48:38:
                    ee:0f:4e:cf:9f:4d:ea:44:0e:00:52:c0:b3:db:7d:
                    e1:ab:bc:ee:d8:d9:fa:ca:ea:74:e3:77:c5:55:bd:
                    4d:8d:ca:6b:61:71:c8:1f:1c:b1:11:c6:a2:c3:30:
                    81:cf:57:6a:d7:75:ea:d8:93:a5:59:36:86:3b:d0:
                    c3:58:bd:95:20:38:ee:a8:e0:40:4a:81:1e:cd:b2:
                    41:fd:44:f6:45:e5:32:28:5e:df:11:4e:8f:05:11:
                    2b:10:6f:f5:4b:04:9c:a5:dd:fb:c9:ce:28:93:20:
                    b6:e8:21:f9:cf:46:12:3b:5c:5c:bc:9e:b9:db:5b:
                    c5:bb:89:b6:ff:51:37:3e:f4:90:aa:47:af:30:f9:
                    61:97:31:b9:88:16:16:94:ae:68:42:72:50:68:16:
                    7a:b8:42:5d:23:99:cd:8a:d9:fe:d6:4c:76:af:00:
                    ff:d4:56:77:db:77:8a:90:1f:f9:ed:7d:e2:25:31:
                    54:f0:bb:ec:1b:d4:63:1e:9f:ba:7f:cb:57:29:a1:
                    cf:50:be:77:b1:6b:07:ed:e5:d3:40:13:90:31:2c:
                    bb:96:29:43:d3:71:1b:2b:e9:8b:fb:40:69:bc:13:
                    4e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3C:0C:65:91:4E:FB:3F:5E:77:1B:24:64:AB:EA:76:B6:2B:49:2A
            X509v3 Authority Key Identifier:
                keyid:03:48:98:BC:1F:B1:B1:A2:46:17:AC:D9:BC:83:2A:E8:3E:AF:9E:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:2d:bd:23:63:a2:1c:17:6d:7c:28:a8:9a:84:29:15:bf:94:
         e7:aa:96:11:23:63:8d:bb:d0:c3:35:76:80:59:5e:57:b2:55:
         86:2b:d2:23:b0:ff:bd:92:5f:13:89:05:70:df:44:43:d3:c0:
         4a:18:57:a3:ed:32:b4:ad:a3:48:a8:07:06:f5:5a:98:b3:98:
         17:ed:ec:02:26:63:6e:3c:85:a7:35:04:d8:56:05:b0:f3:fd:
         33:d4:4e:7b:03:95:56:ab:19:8b:31:d6:b0:49:97:ed:7c:1b:
         59:c5:a3:61:bc:d6:35:c9:d8:61:57:a6:9f:b8:1c:73:9c:65:
         58:2e:f5:d6:a2:c5:45:2f:55:ee:1e:96:50:ce:7c:20:10:ea:
         2f:ce:61:39:62:bb:c9:3e:de:0a:b4:53:b4:c5:77:2d:c7:a4:
         0f:f0:8c:22:aa:bb:12:c2:aa:87:8b:69:0f:b0:7e:5f:de:17:
         23:42:d4:c7:c6:ef:8f:eb:90:a5:c7:d3:4a:b0:a4:bd:f5:d4:
         34:d5:85:f9:32:97:9a:05:26:9e:84:3b:d2:94:92:b3:c7:46:
         00:6e:e9:1d:60:af:1e:89:c0:47:a7:1b:46:b1:8e:c8:d7:7c:
         27:33:0d:20:01:da:09:41:a3:79:af:af:cc:91:ab:0a:e2:20:
         b1:80:ee:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:45:30 2025 by rpki-client