Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft
File:                     r1VYG6En4gkKClRi_nvOcGFvLNw.mft (raw, json)
Hash identifier:          KobAZbqFMWgEbdKJWx0DOohXAc0VPb2UJBD2jkWktc4=
Subject key identifier:   00:4B:40:62:8D:5B:57:36:4A:CC:3E:EC:95:E8:3A:D3:53:4E:50:A0
Authority key identifier: AF:55:58:1B:A1:27:E2:09:0A:0A:54:62:FE:7B:CE:70:61:6F:2C:DC
Certificate issuer:       /CN=A914B758/serialNumber=AF55581BA127E2090A0A5462FE7BCE70616F2CDC
Certificate serial:       0332
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft
Manifest number:          0328
Signing time:             Sat 19 Jul 2025 01:34:19 +0000
Manifest this update:     Sat 19 Jul 2025 01:34:18 +0000
Manifest next update:     Sat 26 Jul 2025 01:34:18 +0000
Files and hashes:         1: r1VYG6En4gkKClRi_nvOcGFvLNw.crl (hash: d7tX8Cx3uwmXItEEy8BHq3QMXvNgF+1K1hWkXyOQgk8=)
                          2: 1B22E756D37711EC9A8FF526C4F9AE02.roa (hash: gy37y3m86p91aNaJLGl/OcCXrwdEyv/PB6GXlm+9olg=)
                          3: 1CA2FA08D37711EC9A8FF526C4F9AE02.roa (hash: 5YLYcly93145UErNSmHTZCyYs7eD4zU0w+fdftiuni0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.crl
                          rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 01:34:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 818 (0x332)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B758, serialNumber=AF55581BA127E2090A0A5462FE7BCE70616F2CDC
        Validity
            Not Before: Jul 19 01:34:18 2025 GMT
            Not After : Jul 26 01:34:18 2025 GMT
        Subject: CN=687af61a-198e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:78:fc:f4:29:9f:fc:2b:4f:b5:91:86:1b:4e:
                    ab:e6:aa:fc:5e:eb:5c:c3:2e:8a:0f:e9:72:a8:ac:
                    a2:33:c7:06:b0:d0:da:54:b3:19:aa:62:63:03:4e:
                    fe:b4:22:21:f1:83:5c:bc:6d:aa:43:16:52:5f:48:
                    5b:e5:20:ec:d6:ed:7c:b7:20:84:92:2b:cc:fa:70:
                    d4:34:35:10:aa:53:d4:45:84:24:1c:c1:34:7c:23:
                    5f:3b:32:37:73:3b:a3:a7:cc:e7:39:a0:5d:60:17:
                    f9:d1:ba:71:2f:01:38:1f:d6:51:78:ec:25:5a:fd:
                    61:7c:1d:80:76:b9:a6:eb:4c:d0:99:74:49:9a:a9:
                    2c:76:3e:28:40:cd:0a:74:e5:d4:10:5a:af:ec:0a:
                    2f:65:1a:38:8b:78:10:8d:43:de:29:27:e2:e9:37:
                    60:8f:30:cd:ee:11:f0:74:ca:74:c4:dd:7d:bb:06:
                    57:a0:a7:b4:32:ca:ee:c2:57:8d:5a:1a:51:46:c8:
                    06:ca:43:46:4a:b0:bd:10:89:ba:f9:97:04:99:df:
                    f0:a7:94:a5:1f:ca:af:9a:02:ce:d8:64:22:70:96:
                    b7:a8:fd:1b:e4:71:22:44:d7:9f:5f:ae:44:c2:8d:
                    2f:35:b2:40:0a:fb:cb:07:51:1a:28:d0:29:87:d8:
                    43:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4B:40:62:8D:5B:57:36:4A:CC:3E:EC:95:E8:3A:D3:53:4E:50:A0
            X509v3 Authority Key Identifier:
                keyid:AF:55:58:1B:A1:27:E2:09:0A:0A:54:62:FE:7B:CE:70:61:6F:2C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:18:12:f7:21:1d:e8:96:e4:07:0c:79:f1:1b:2d:22:48:39:
         64:a5:ed:ac:4d:7f:a0:c1:2e:8c:e9:35:5d:4f:d1:c4:0f:26:
         7e:b2:33:77:0f:a0:ea:27:72:1e:23:92:50:4d:99:6c:46:01:
         5e:6b:8e:a3:ce:87:49:20:67:9d:69:bd:e9:90:c4:e9:b2:c9:
         00:9b:b1:a7:27:f8:14:e6:db:f9:73:aa:e8:36:fc:c5:c5:15:
         4f:cb:c0:a2:af:fb:f3:6a:78:d9:c0:5b:7b:ab:7c:8d:78:88:
         cd:fe:7e:78:f5:82:1b:0f:24:99:97:ad:83:11:42:94:d7:3e:
         f3:0d:85:7f:64:99:03:4f:bc:7f:50:99:90:7e:34:2a:5c:fe:
         ca:c0:86:e2:5c:93:29:26:16:9b:51:e3:41:f4:ec:6b:6b:e0:
         be:8d:27:1f:98:df:ec:a0:c3:fb:4e:81:66:46:66:72:f4:67:
         37:e2:1d:5a:44:ee:e8:69:9d:30:b5:e8:3e:ae:72:4c:41:c7:
         67:db:42:ab:b9:39:8f:2e:67:e9:da:35:3c:df:10:e5:56:6a:
         f7:62:8a:49:51:19:24:b2:13:ac:22:54:d1:a5:ef:28:e3:03:
         ee:8c:5c:cb:10:78:56:00:55:4b:1e:e8:ec:0f:0b:a8:1c:a5:
         99:46:86:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:03:11 2025 by rpki-client