Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft
File:                     apVIHOj0DdiJXR-3rukOWVm6g8E.mft (raw, json)
Hash identifier:          v9TwiScW6c73cbArZHesY4LAGRoKAdGgYUA324WcBTA=
Subject key identifier:   BE:5A:A8:A5:97:7D:FC:04:05:5C:B8:E9:DE:86:65:EC:9C:30:45:8B
Authority key identifier: 6A:95:48:1C:E8:F4:0D:D8:89:5D:1F:B7:AE:E9:0E:59:59:BA:83:C1
Certificate issuer:       /CN=A918DA0C/serialNumber=6A95481CE8F40DD8895D1FB7AEE90E5959BA83C1
Certificate serial:       057F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft
Manifest number:          0578
Signing time:             Fri 22 Aug 2025 23:28:58 +0000
Manifest this update:     Fri 22 Aug 2025 23:28:58 +0000
Manifest next update:     Fri 29 Aug 2025 23:28:58 +0000
Files and hashes:         1: apVIHOj0DdiJXR-3rukOWVm6g8E.crl (hash: 3W70bqv37515pIOrSZmsJZGPYB0UEiXjt3qRnyVaysU=)
                          2: 0C3D8674345511EFA05D0C10C4F9AE02.roa (hash: ZnpRalcn1+UDz0Qh9MVT7PEHG3mXFgwSlTQlnQVlTtU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.crl
                          rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 23:28:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1407 (0x57f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DA0C, serialNumber=6A95481CE8F40DD8895D1FB7AEE90E5959BA83C1
        Validity
            Not Before: Aug 22 23:28:58 2025 GMT
            Not After : Aug 29 23:28:58 2025 GMT
        Subject: CN=68a8fd3a-0607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fe:e4:9a:7e:f1:84:9b:00:3e:26:b5:2f:d3:
                    3e:81:e2:dc:55:8b:aa:72:bd:fa:fa:37:f2:9e:fe:
                    1b:4a:fc:f5:ab:47:55:67:ef:cd:0e:72:30:61:fc:
                    01:c0:48:8c:67:18:9e:4b:be:55:64:1e:7f:f7:02:
                    f9:38:8b:33:26:e5:e7:1e:91:1b:34:07:0b:31:35:
                    6e:e0:32:18:a7:02:69:9b:5d:7d:b4:56:d2:e6:1f:
                    a8:30:e3:a2:84:6f:99:77:ab:5a:22:b0:e6:eb:bc:
                    1d:84:ae:eb:6b:18:78:b5:3b:55:a1:1a:04:5d:b5:
                    58:20:c6:98:2a:5e:d3:88:04:ae:09:4b:af:a2:2a:
                    19:e6:06:49:ca:43:ff:53:39:c4:fa:96:56:f4:03:
                    c4:1e:81:4b:aa:9a:73:79:f1:86:96:4c:06:52:fa:
                    34:69:c0:2a:3e:da:9d:1b:48:1e:15:e9:42:bd:8c:
                    f6:b5:7a:ba:63:42:05:06:54:73:e3:61:58:0d:30:
                    1d:d2:f7:db:32:94:a3:7b:7c:44:bd:80:9f:df:33:
                    dc:ea:e4:ee:b5:49:14:76:71:b7:ce:02:d8:c6:45:
                    b4:7b:13:b2:d7:6d:25:aa:21:c5:b1:3e:3b:73:22:
                    06:04:ab:bf:6d:ee:ad:f8:28:8a:33:b8:9e:e0:0f:
                    bb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5A:A8:A5:97:7D:FC:04:05:5C:B8:E9:DE:86:65:EC:9C:30:45:8B
            X509v3 Authority Key Identifier:
                keyid:6A:95:48:1C:E8:F4:0D:D8:89:5D:1F:B7:AE:E9:0E:59:59:BA:83:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:e8:9c:b3:5c:e1:cf:46:8d:d3:5c:1a:f8:cd:50:12:3a:be:
         b5:90:73:19:dd:50:6f:97:e9:74:d3:84:9f:75:6b:a0:ae:cf:
         d1:7c:bb:73:1f:c1:fb:c1:05:6e:4c:02:a7:10:6f:59:ae:46:
         af:83:e6:03:03:71:e1:fe:26:6c:6f:2d:32:50:49:3d:9e:0b:
         7f:3b:d1:90:9b:1d:f0:4d:27:15:b8:f2:0b:2e:8f:05:ac:db:
         c4:6f:e4:7b:07:fd:46:b6:c2:f8:28:bd:63:98:7d:b1:9c:3d:
         f3:58:1f:ed:2c:3a:ce:2a:a5:9f:a2:4f:36:b4:84:a3:43:66:
         ee:d4:28:70:d9:76:c4:b5:17:d3:d3:28:6e:14:c8:d5:8d:25:
         78:c8:d5:37:22:db:f9:52:e2:b1:43:7b:65:7c:27:11:d3:0f:
         50:96:76:60:e8:d4:84:ac:15:e7:bc:68:80:01:bd:e8:28:48:
         3f:a9:17:42:2b:25:85:5e:19:9d:61:a6:a4:42:83:80:74:1e:
         71:3a:85:eb:cc:b3:29:06:61:87:3c:5e:40:20:1e:9b:00:d6:
         25:18:fd:db:e7:86:70:75:f2:5a:72:a2:7f:a6:3f:b2:10:70:
         1f:f3:b5:bd:d9:9c:d5:0c:8f:80:52:c6:8e:81:e0:b9:72:94:
         21:d0:ef:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:39:37 2025 by rpki-client