Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
File:                     xIqs603a7jxgQuZiFq15FQe0fGs.mft (raw, json)
Hash identifier:          XYLUROH5EFcY4bdu7pjVjZ6YuI/ThtIhoF7s56AQEJw=
Subject key identifier:   B3:62:07:83:D3:88:EC:DF:9F:8F:D1:A6:0B:3A:82:2B:CC:4E:F5:46
Authority key identifier: C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B
Certificate issuer:       /CN=A918EF61/serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B
Certificate serial:       1900
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
Manifest number:          18F6
Signing time:             Mon 12 May 2025 16:23:36 +0000
Manifest this update:     Mon 12 May 2025 16:23:36 +0000
Manifest next update:     Mon 19 May 2025 16:23:36 +0000
Files and hashes:         1: xIqs603a7jxgQuZiFq15FQe0fGs.crl (hash: lwuGx6O3rgsF8KJJaqGzfpFtFSlztMTWXiDTRv2gqBk=)
                          2: C44B0ADA83DA11E7AD4F156CC4F9AE02.roa (hash: ee6x0IQnWxU26dMdjthmXNqeRQ+45nsz1rLe7eGNses=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl
                          rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 16:23:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6400 (0x1900)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EF61, serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B
        Validity
            Not Before: May 12 16:23:36 2025 GMT
            Not After : May 19 16:23:36 2025 GMT
        Subject: CN=68222088-a987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:14:96:30:3f:6c:b1:c4:bf:88:03:74:52:32:
                    93:9f:79:61:36:e6:97:62:4f:cd:82:81:04:64:f5:
                    fd:b7:dd:1f:d9:a8:cc:59:a8:f6:d2:e9:c8:83:50:
                    f1:5d:44:db:64:ab:dc:95:a6:6b:aa:0e:b3:9e:4c:
                    c7:97:f0:62:bc:6b:e5:cb:18:1f:59:3b:1d:6f:5b:
                    96:bd:1c:69:1d:89:32:60:06:53:03:b3:32:cf:44:
                    48:61:f9:b7:9d:9a:72:be:2c:21:ed:ad:5c:de:5b:
                    7b:6d:c3:30:da:24:22:f7:17:9f:e5:24:68:e1:62:
                    2c:4f:22:03:fe:35:51:9a:c6:88:51:44:92:e7:b4:
                    a5:fc:16:9c:a8:d4:d0:34:d1:c2:f6:2a:e9:3c:f3:
                    20:3a:86:1c:63:34:bd:06:c8:e2:a0:08:2d:14:0d:
                    b8:a6:ce:a7:c5:a5:34:d1:da:a8:d1:a5:8d:78:b3:
                    a3:bb:a0:63:24:76:9c:2e:87:ab:ab:ba:8f:07:c7:
                    f8:aa:d4:1f:d0:cd:ec:6e:86:72:5f:05:f9:ef:74:
                    3d:ef:91:e9:0a:8a:c6:0f:9a:1d:6e:e7:d5:ee:55:
                    0e:6b:2a:0c:5c:9c:62:8e:11:43:25:0f:0f:d3:31:
                    a1:a1:10:63:41:68:f7:91:8a:1a:fa:91:c4:dc:1f:
                    e4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:62:07:83:D3:88:EC:DF:9F:8F:D1:A6:0B:3A:82:2B:CC:4E:F5:46
            X509v3 Authority Key Identifier:
                keyid:C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:22:64:0e:b0:a9:80:76:74:9e:e0:91:64:b0:91:2b:77:93:
         50:ae:fa:b9:9c:65:71:3e:0a:34:dd:bd:0f:51:44:ba:bd:8f:
         bf:02:5b:25:82:df:13:8a:c3:a1:96:20:65:d8:fb:d8:1f:25:
         d4:53:13:d0:e0:cb:13:08:eb:48:cd:44:9c:41:b1:c0:8e:84:
         ab:25:f1:25:9b:c4:db:7a:a3:78:e2:1d:6e:4f:16:d7:da:2c:
         67:97:f7:f3:79:2e:6d:d6:cc:12:49:a9:b2:b8:18:cd:95:26:
         f5:6a:3a:70:cc:d1:e4:07:f3:ab:05:8b:1e:40:0a:36:d4:70:
         0d:3f:08:dd:ad:68:7a:17:2a:c3:0b:59:59:df:66:43:a6:c1:
         81:dc:96:76:7c:c5:34:7a:54:59:68:54:c2:79:a3:c5:f6:03:
         b5:28:3b:b1:fc:4d:45:fa:ac:1d:2b:fb:78:26:8e:b0:a1:a4:
         77:97:fd:7e:44:f8:9a:45:56:88:1e:e3:ae:a2:4f:b0:6e:40:
         06:ef:81:99:3e:4a:76:f6:b1:81:0d:5d:7f:d0:f9:8e:c1:0a:
         dd:8d:c4:45:c1:e2:5f:b1:51:43:36:75:1e:83:fa:b6:20:8a:
         0c:41:d4:8d:e8:5e:e1:a5:01:d0:3c:25:76:32:2d:ba:73:78:
         34:00:9c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 14:49:33 2025 by rpki-client