Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
File:                     c0H2TqslF-qZON3k-wqBTly7fnc.mft (raw, json)
Hash identifier:          3Btg6sDTT/LlLnk0T4xcGlIr+ahPeEpSIhgiTsiD+uA=
Subject key identifier:   3C:BD:97:52:E8:EB:95:69:C0:F0:76:A7:C2:83:2D:7E:49:DD:22:80
Authority key identifier: 73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
Certificate issuer:       /CN=A912184B/serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Certificate serial:       1E32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
Manifest number:          1E18
Signing time:             Fri 18 Jul 2025 16:12:14 +0000
Manifest this update:     Fri 18 Jul 2025 16:12:14 +0000
Manifest next update:     Fri 25 Jul 2025 16:12:14 +0000
Files and hashes:         1: c0H2TqslF-qZON3k-wqBTly7fnc.crl (hash: phxHEnB2KuUdIZQPr+rjuFzpcDQcCex898wI44lMpAM=)
                          2: 22DC230C299311F0B32D9F82C4F9AE02.roa (hash: KiZSjsjHSWTeGrVHyQ1fRZOy4p6+ElPmGCwKFduLkFA=)
                          3: 8144C55412E611E98A4A6A35C4F9AE02.roa (hash: HcaovZ/E4LVI99vShwEF3DVWudHVhbjCDuMnNSp75nw=)
                          4: 51D65180A2DC11E9B63C6C2BC4F9AE02.roa (hash: lziphfAQalP1g1qd41FgsGMuQq4aElhXOf7iBsezcaw=)
                          5: 234A6628299311F0B32D9F82C4F9AE02.roa (hash: D4LXE7yxCKGNNUhuHC7/Q5q8EQPtCwzUchpxHBJ/u58=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
                          rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 16:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7730 (0x1e32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912184B, serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
        Validity
            Not Before: Jul 18 16:12:14 2025 GMT
            Not After : Jul 25 16:12:14 2025 GMT
        Subject: CN=687a725e-8e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c6:b0:de:78:6e:f2:47:99:3f:e4:9f:33:19:
                    ee:34:c0:54:4d:d2:f0:ce:9d:46:d7:25:ae:14:34:
                    c5:5f:c5:2f:c6:39:30:de:76:c5:7a:f8:5f:fa:82:
                    6e:21:35:78:14:ae:b1:42:44:b4:ae:fa:60:36:b1:
                    ed:98:19:1d:b9:34:9b:7d:9d:01:33:62:9a:7b:c4:
                    1e:33:e8:5b:73:fc:4f:73:f9:7a:4b:33:79:97:74:
                    2a:b5:99:d2:fa:05:d3:23:68:7a:98:30:9b:2d:34:
                    cc:da:2d:da:b9:fb:31:35:e1:38:af:a2:26:e0:cc:
                    ff:75:17:32:5d:53:27:51:eb:18:9a:32:7a:32:a3:
                    a2:42:08:f5:05:6f:81:51:01:95:a0:6e:49:06:9d:
                    c1:b1:b9:92:e9:9f:a2:6d:b3:47:30:91:30:fc:2b:
                    59:53:3c:14:35:a7:96:f1:07:3d:52:a1:0a:fe:63:
                    97:3e:9f:ca:df:37:fe:36:46:d4:36:46:23:5c:4d:
                    9a:44:78:d5:97:b4:ed:25:50:5e:c3:d9:c8:34:cd:
                    1f:5d:5e:03:1e:43:97:db:67:fa:8a:aa:81:ab:02:
                    11:94:f5:de:de:52:94:34:db:51:46:83:07:5f:b8:
                    e4:f5:fc:23:4a:85:ae:5e:91:e9:97:dc:bf:f7:8c:
                    e8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BD:97:52:E8:EB:95:69:C0:F0:76:A7:C2:83:2D:7E:49:DD:22:80
            X509v3 Authority Key Identifier:
                keyid:73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:c6:07:8c:7a:9e:25:09:ed:8d:11:85:d9:5b:ff:de:e8:a4:
         90:51:4b:72:da:84:82:b5:cd:a5:a5:c8:7a:25:a8:7c:5a:f8:
         36:37:95:2c:d5:fc:d0:14:bd:06:00:1f:ad:2e:bf:33:12:58:
         4b:67:3a:df:74:d2:94:ff:ce:af:1a:cc:04:13:1c:67:39:b4:
         2b:9e:73:6b:19:a9:7b:2c:27:c3:7e:ea:12:4d:74:61:38:4d:
         ea:f0:36:ad:39:fd:3d:52:3e:09:4c:f7:a0:2f:5a:9b:dd:67:
         46:02:df:2a:00:ea:39:3f:0a:1a:fa:05:f3:e3:ae:b2:72:c3:
         98:24:8c:dd:58:29:8d:96:e1:4d:4c:7b:c7:75:21:d8:a9:88:
         e3:fb:13:cb:f7:38:5d:25:c4:d0:0e:6d:3a:be:f6:bc:33:f2:
         f3:8a:e0:ca:fd:21:e7:01:e0:ed:b8:cc:2d:50:d9:04:6d:af:
         c0:50:ba:ba:b0:97:b2:88:55:fe:a1:69:18:5a:c5:2f:84:3f:
         37:3a:67:b2:a1:04:78:13:61:99:6b:0f:aa:c7:da:79:2f:42:
         46:3d:cc:33:66:8a:76:c1:13:ab:f1:ed:73:5d:60:29:31:22:
         8a:59:98:02:55:ed:8a:9c:a3:e9:8a:41:62:cb:dd:54:3c:ec:
         5b:fb:17:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 03:17:36 2025 by rpki-client