Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft
File:                     84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft (raw, json)
Hash identifier:          eY2R88V47PbJj0lBFXLhDvdwtTGfY37SwQdG92OEY5w=
Subject key identifier:   BB:DE:0D:76:FE:4F:35:F6:07:E0:94:91:6F:F7:D1:5F:8D:3A:CF:72
Authority key identifier: F3:85:89:F8:46:4A:A5:A9:16:99:F8:08:64:9E:C5:36:83:1B:00:4A
Certificate issuer:       /CN=A914DC55/serialNumber=F38589F8464AA5A91699F808649EC536831B004A
Certificate serial:       0528
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft
Manifest number:          0518
Signing time:             Thu 31 Jul 2025 00:00:33 +0000
Manifest this update:     Thu 31 Jul 2025 00:00:32 +0000
Manifest next update:     Thu 07 Aug 2025 00:00:32 +0000
Files and hashes:         1: 84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl (hash: Y38FpLfVNMbXfie3yXBsuJZF3gtryBUZvBn7SivGsdk=)
                          2: 4F1B63805A0A11ECAEA43C36C4F9AE02.roa (hash: u5W11dVoRw3toGEIJUHd861OTITZBp585qmJEJVveAI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl
                          rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 Aug 2025 00:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1320 (0x528)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC55, serialNumber=F38589F8464AA5A91699F808649EC536831B004A
        Validity
            Not Before: Jul 31 00:00:32 2025 GMT
            Not After : Aug  7 00:00:32 2025 GMT
        Subject: CN=688ab220-577d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c8:25:9c:9f:a5:3d:11:b0:50:28:c3:e6:48:
                    3a:cf:50:8f:b8:63:b7:7b:28:61:d2:c9:7a:d0:9b:
                    6c:b9:15:d8:4b:93:f6:e0:3c:b7:86:10:c2:d1:34:
                    06:54:48:b2:32:78:f7:c5:9d:6b:37:b9:25:c7:bf:
                    3a:db:b3:85:04:9e:38:08:29:f3:40:18:1d:9a:08:
                    89:02:2c:1e:7e:d0:60:60:aa:db:16:01:9b:e9:0a:
                    60:32:b2:44:fb:c1:36:80:57:f1:46:c6:d2:1d:95:
                    29:39:4d:2a:21:cb:cf:e8:fa:0d:03:48:5d:e4:05:
                    ec:53:b2:cb:f2:f2:fa:87:81:dc:a6:a9:37:19:13:
                    99:d2:5f:f0:c3:98:a0:78:90:1f:32:c0:9c:6e:2b:
                    b3:89:33:e6:a5:56:c8:90:af:28:5d:cd:19:da:9e:
                    a6:c3:a5:73:98:61:1f:fc:0e:27:e2:1d:d0:80:b3:
                    64:01:e8:ab:81:b7:2c:96:51:58:a2:0d:17:94:e2:
                    e1:db:27:2c:fe:b9:f6:f4:22:60:a8:14:e7:a0:f5:
                    7c:71:e3:85:11:c5:d8:ec:07:04:4a:c8:15:9f:8c:
                    b5:45:77:3a:bd:6a:88:aa:a7:e9:cb:10:e6:84:a0:
                    74:31:7f:84:82:74:ad:b3:e6:75:e5:3b:03:55:9f:
                    4d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DE:0D:76:FE:4F:35:F6:07:E0:94:91:6F:F7:D1:5F:8D:3A:CF:72
            X509v3 Authority Key Identifier:
                keyid:F3:85:89:F8:46:4A:A5:A9:16:99:F8:08:64:9E:C5:36:83:1B:00:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84WJ-EZKpakWmfgIZJ7FNoMbAEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC55/CCBE1BA6176211EC81A0D11EC4F9AE02/84WJ-EZKpakWmfgIZJ7FNoMbAEo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:39:df:33:db:21:b3:68:6a:de:03:d3:9e:22:16:9f:73:44:
         9d:b6:d8:81:b9:00:c0:5d:e7:aa:c7:7e:ad:a8:f1:53:08:12:
         60:68:85:ad:01:62:a7:45:9f:32:67:a8:63:98:69:58:89:a4:
         dc:1d:a1:d1:ea:c2:5c:fa:11:fa:40:0b:1d:61:65:56:6e:24:
         fe:2b:08:63:bc:93:8a:89:4b:59:4c:e9:08:54:9f:00:3d:8d:
         5c:23:c5:f0:92:a3:a1:85:90:f1:e6:dd:1a:47:ca:e9:2f:e6:
         1a:f9:da:76:da:61:40:c6:3a:87:3b:28:e1:91:28:3a:47:36:
         9a:b8:cb:6f:e4:79:11:66:f2:df:ce:a3:01:3c:48:ac:90:54:
         f3:4e:a7:14:cd:78:b5:eb:e6:c2:2e:ca:73:49:60:a1:8e:4c:
         6f:4f:15:88:86:22:90:5f:06:c6:91:5f:8a:5f:00:21:e8:dd:
         d8:1e:56:9e:75:c9:bf:b5:3a:66:5d:40:64:10:14:52:3b:49:
         12:19:94:ba:c9:0a:9c:19:9d:19:5f:5c:71:65:db:82:86:17:
         b8:03:c8:bc:e8:bd:98:23:71:d5:02:ee:97:6d:bd:70:90:6f:
         de:61:34:7d:72:e2:de:9f:f4:a8:1e:1f:63:57:c0:da:f3:fd:
         b1:8c:e4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 03:16:55 2025 by rpki-client