Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft
File:                     5tR4mVLfAG9kzr8PNVcqW5bktzc.mft (raw, json)
Hash identifier:          FgOqqOrNHCsGAzqyDh/qh8mul4Tqv941JXq52qBdO2A=
Subject key identifier:   D4:F6:C6:5C:D1:A4:67:A6:54:D7:25:91:1C:E1:0B:70:F7:53:56:8B
Authority key identifier: E6:D4:78:99:52:DF:00:6F:64:CE:BF:0F:35:57:2A:5B:96:E4:B7:37
Certificate issuer:       /CN=A918E63A/serialNumber=E6D4789952DF006F64CEBF0F35572A5B96E4B737
Certificate serial:       07C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft
Manifest number:          07C9
Signing time:             Fri 22 Aug 2025 21:15:44 +0000
Manifest this update:     Fri 22 Aug 2025 21:15:43 +0000
Manifest next update:     Fri 29 Aug 2025 21:15:43 +0000
Files and hashes:         1: 5tR4mVLfAG9kzr8PNVcqW5bktzc.crl (hash: ihNIVnBZ9vZi1Rh9pgsFiwwzH7vW7mrrkrGxNke7uck=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.crl
                          rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1993 (0x7c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E63A, serialNumber=E6D4789952DF006F64CEBF0F35572A5B96E4B737
        Validity
            Not Before: Aug 22 21:15:43 2025 GMT
            Not After : Aug 29 21:15:43 2025 GMT
        Subject: CN=68a8de00-77de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ee:b9:14:92:8f:2e:04:8b:5c:5f:07:dc:d8:
                    3d:e3:c4:8c:3c:8a:12:89:24:df:ce:87:4e:ea:b3:
                    05:ee:56:94:8e:d4:c0:7d:2e:da:f9:8f:a8:95:48:
                    9e:86:2d:b8:ae:c9:c4:90:2b:8c:6c:5e:e2:61:48:
                    13:b2:3c:a6:8c:b1:94:05:b9:39:1a:24:b9:97:93:
                    8e:6a:4a:89:cf:70:08:a7:bf:91:eb:52:9a:4f:93:
                    f3:d1:39:eb:fc:06:f4:5d:89:89:bb:7b:c5:ab:ad:
                    bf:f0:d5:eb:f1:a8:8c:d4:53:0b:42:28:de:af:cf:
                    f8:7a:e6:89:6e:33:b2:e6:11:f2:2a:8b:37:3e:34:
                    d8:d6:2a:79:a8:28:89:6e:a0:79:35:06:cc:14:ad:
                    e5:ca:db:7f:56:cd:d4:c8:c9:0c:4d:b8:69:7e:bc:
                    54:0d:8c:34:e3:df:db:f3:4c:5e:65:c5:ab:04:3c:
                    16:6b:cd:b3:5d:48:1e:f5:13:b1:a3:c6:60:53:1b:
                    66:de:3c:60:6e:2d:9a:17:b3:ac:60:fe:c2:38:8a:
                    ed:10:a1:04:36:cf:36:26:c3:79:f6:8c:24:0a:08:
                    14:b8:9a:a7:d4:66:14:3d:8c:2a:c5:bd:3c:ba:a5:
                    8e:17:e3:2f:0b:29:77:91:58:a5:f1:02:5e:5a:c9:
                    ca:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F6:C6:5C:D1:A4:67:A6:54:D7:25:91:1C:E1:0B:70:F7:53:56:8B
            X509v3 Authority Key Identifier:
                keyid:E6:D4:78:99:52:DF:00:6F:64:CE:BF:0F:35:57:2A:5B:96:E4:B7:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tR4mVLfAG9kzr8PNVcqW5bktzc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E63A/37D7A5AE032F11EBB5882E0AC4F9AE02/5tR4mVLfAG9kzr8PNVcqW5bktzc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:bd:ad:5c:84:b5:02:8f:fe:13:4f:16:e2:72:a4:1d:61:80:
         f1:0b:24:b1:ae:9a:57:d8:77:f7:35:21:93:9e:00:ef:18:6b:
         63:d4:95:2c:76:ef:7f:0c:5e:c8:35:8c:24:6e:93:12:53:5f:
         c9:b5:b1:09:94:88:27:c1:e7:06:c8:58:62:db:f5:21:db:f5:
         ff:96:80:15:cc:dc:44:43:4e:30:2d:63:6e:ac:b2:0d:8d:22:
         02:be:59:c9:7b:1e:ad:01:94:95:ef:0e:c5:58:29:bd:51:d6:
         21:32:45:36:e2:63:6c:78:85:28:09:70:68:74:a8:f6:0f:d7:
         e7:bd:56:f6:9a:5b:2f:7c:25:86:a6:d1:a0:cf:dd:c4:8f:91:
         a6:df:4a:c4:de:02:ee:b4:08:d3:55:e2:d7:53:86:45:38:80:
         d1:ce:a1:b5:e9:01:83:35:e8:24:1d:0b:66:0e:71:dc:be:c4:
         6e:6f:51:c1:4f:6c:e4:a0:71:35:37:5c:f7:5a:f2:80:e1:7d:
         e5:4d:95:31:72:b4:9e:e6:82:48:9d:bf:92:ec:86:cd:3c:0e:
         9b:61:90:94:06:3e:83:0c:05:32:94:dc:3e:ea:9b:dc:78:20:
         4b:ff:28:b2:9b:15:11:de:6c:a6:ca:7e:5e:48:06:aa:87:bb:
         63:10:60:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:39:28 2025 by rpki-client