Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft
File:                     5c15IB7rS9nw73ZW5zJfVxZffqA.mft (raw, json)
Hash identifier:          UlM4Vh8E0qIVQFPajPUH3ps3NrCMuyetUPEisaKYoyU=
Subject key identifier:   29:92:4A:3F:B4:3F:08:D4:B5:6C:F1:A8:C1:7B:78:2F:C0:A9:30:D5
Authority key identifier: E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0
Certificate issuer:       /CN=A911218D/serialNumber=E5CD79201EEB4BD9F0EF7656E7325F57165F7EA0
Certificate serial:       07DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft
Manifest number:          07D0
Signing time:             Fri 18 Jul 2025 21:23:14 +0000
Manifest this update:     Fri 18 Jul 2025 21:23:14 +0000
Manifest next update:     Fri 25 Jul 2025 21:23:14 +0000
Files and hashes:         1: 5c15IB7rS9nw73ZW5zJfVxZffqA.crl (hash: LQKu0obdEVetr7PbU5HypCI/AXLYFb7ctlRKl3XIV+w=)
                          2: C14B7B728D0611EDB02E7331C4F9AE02.roa (hash: cW5d9zgypzyK0jiQh7AOhsQ2I4bzZRwKwFE4H9ImC3o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.crl
                          rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 21:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2015 (0x7df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911218D, serialNumber=E5CD79201EEB4BD9F0EF7656E7325F57165F7EA0
        Validity
            Not Before: Jul 18 21:23:14 2025 GMT
            Not After : Jul 25 21:23:14 2025 GMT
        Subject: CN=687abb42-8335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0c:a3:53:3d:86:f0:7d:ac:83:5c:b8:41:d2:
                    ca:ce:41:50:63:e7:05:12:a8:0e:bb:f8:d0:62:18:
                    d4:1f:94:6b:a3:9c:7d:7f:6b:36:d9:f3:21:a9:43:
                    b0:c6:f6:c7:2c:d3:f7:63:49:79:0d:50:90:9b:a3:
                    75:10:37:71:74:1f:57:da:94:72:a6:f0:79:08:28:
                    7b:d8:39:98:e5:7e:57:bf:b3:28:49:96:4e:dd:c8:
                    c5:60:48:dc:5c:6d:b9:87:e6:30:56:0f:3a:74:97:
                    3f:de:08:68:e8:db:46:50:c8:30:b7:89:ab:3d:66:
                    82:33:a2:cf:82:44:f9:d0:b3:4b:59:fc:49:73:f8:
                    5a:ed:c9:5a:0a:02:56:08:c6:8f:4c:78:bf:9c:f5:
                    c8:7e:c0:7a:2c:a4:e1:e1:8f:91:75:3b:1c:19:66:
                    50:12:05:62:89:37:c9:ac:3f:f1:de:82:67:da:36:
                    ba:82:09:05:7a:12:62:a4:0b:5e:d9:b7:13:7d:48:
                    7a:36:36:a7:be:15:3e:17:f3:3c:62:8b:5a:1b:c1:
                    e8:f1:35:20:5a:c9:42:28:81:b5:c0:ae:3a:1e:4a:
                    db:3c:e6:ac:bf:40:3a:4b:c1:0c:15:bf:38:23:0f:
                    80:7f:6f:5b:30:cb:3d:0e:d6:81:10:61:59:55:15:
                    5e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:92:4A:3F:B4:3F:08:D4:B5:6C:F1:A8:C1:7B:78:2F:C0:A9:30:D5
            X509v3 Authority Key Identifier:
                keyid:E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:13:15:07:71:69:5a:7d:20:e3:3d:00:f9:3b:d6:9a:a5:ff:
         72:d5:57:4b:d5:05:26:b1:a6:24:65:b8:3b:80:6f:30:a2:52:
         9d:0c:06:c0:d0:cf:1f:81:9f:72:72:2b:be:b9:dc:f0:c9:99:
         b7:71:35:c6:6b:7a:70:4a:75:27:4e:69:7a:19:49:02:04:07:
         42:9b:be:31:8e:10:5a:c8:0c:da:ed:00:ad:1b:9a:ff:df:18:
         9f:19:0d:40:4f:39:d9:83:d4:86:be:37:d3:f8:5b:67:05:55:
         35:75:13:7f:4d:21:01:69:33:70:fa:03:37:cc:37:c3:ed:32:
         b6:57:e5:5b:05:ef:3d:d2:85:03:2f:69:79:05:e7:80:28:81:
         4e:42:0a:ef:3c:63:d5:09:18:7e:10:cd:d2:ca:ef:9b:f4:a2:
         93:ff:d8:20:b3:65:b6:d1:95:31:01:a0:46:c6:b2:93:f2:ed:
         9b:0e:ed:35:6f:df:ea:e8:d5:c8:ff:d3:06:f8:51:7c:90:97:
         e1:3f:e1:8e:bd:3b:9b:ac:26:0a:37:6b:bb:3d:45:6b:7c:3f:
         7e:a7:2f:c0:d1:90:fa:82:93:67:8a:46:0f:07:15:e9:0d:89:
         b9:dd:e8:2d:ba:8f:54:70:e4:6f:21:c9:cc:24:e3:93:9d:bc:
         2c:19:01:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 03:39:55 2025 by rpki-client