Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.mft
File:                     76bB5uz60eiKn0TSgALu1jmyulQ.mft (raw, json)
Hash identifier:          NSniPgNWU/JEtDlai00fV5KMyxofZckRyU3iZJhRBQk=
Subject key identifier:   25:FC:96:FB:91:26:C9:AC:D0:8D:78:9D:23:88:33:5D:78:1A:15:D0
Authority key identifier: EF:A6:C1:E6:EC:FA:D1:E8:8A:9F:44:D2:80:02:EE:D6:39:B2:BA:54
Certificate issuer:       /CN=A915A921/serialNumber=EFA6C1E6ECFAD1E88A9F44D28002EED639B2BA54
Certificate serial:       088A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76bB5uz60eiKn0TSgALu1jmyulQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.mft
Manifest number:          0881
Signing time:             Fri 18 Jul 2025 20:52:08 +0000
Manifest this update:     Fri 18 Jul 2025 20:52:07 +0000
Manifest next update:     Fri 25 Jul 2025 20:52:07 +0000
Files and hashes:         1: 76bB5uz60eiKn0TSgALu1jmyulQ.crl (hash: BsT7p8yxzdMFHx3FFIXlxygfmLTFsfabJPnmBMlqGoY=)
                          2: AFB3319E5F0C11EC8C2C2820C4F9AE02.roa (hash: oQabdmEmsE0xS2pzwUEQIF+XAWD0QihN42o3aT+jjXE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76bB5uz60eiKn0TSgALu1jmyulQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 20:52:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2186 (0x88a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A921, serialNumber=EFA6C1E6ECFAD1E88A9F44D28002EED639B2BA54
        Validity
            Not Before: Jul 18 20:52:07 2025 GMT
            Not After : Jul 25 20:52:07 2025 GMT
        Subject: CN=687ab3f8-3aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a6:68:65:df:be:83:19:fe:c0:ba:c3:3e:08:
                    50:79:58:42:4a:ac:86:27:7b:d2:3f:f5:2a:9e:73:
                    57:d1:93:20:27:a3:f4:93:45:a1:ea:da:eb:49:3a:
                    ff:c4:2b:b7:67:b1:0c:2c:b6:5d:cb:cc:6c:50:85:
                    67:3a:c9:42:38:86:fb:a2:6e:a2:a0:35:c7:3b:62:
                    d2:8d:6a:34:81:b1:b6:89:88:4c:c5:bf:ad:be:4c:
                    b5:d9:0d:93:46:8e:ad:9b:11:59:76:5d:3a:50:58:
                    6f:25:d3:28:d8:43:5b:9a:95:29:e3:41:fa:ee:3b:
                    d8:6f:f6:35:e4:d6:89:a8:3e:d9:1f:96:24:d9:16:
                    29:cd:03:3d:65:37:27:b0:b4:b1:8d:9b:ca:ce:b8:
                    f4:b8:30:9a:c1:2b:1e:fb:29:5a:dc:cb:bb:53:55:
                    b5:3e:a4:6a:99:2b:9c:0a:7b:c6:e7:5f:0d:b7:24:
                    42:5d:19:51:ec:9c:94:4d:de:98:ae:86:f6:f6:c9:
                    c4:25:f3:25:62:be:d4:ab:05:f9:5c:8d:06:ec:2b:
                    0c:a7:fb:d2:9c:d1:7a:a2:17:80:d8:30:dd:50:da:
                    56:dc:0c:d2:e6:29:24:d8:06:2c:98:06:ea:24:73:
                    9e:a6:14:60:1d:69:d0:25:8a:f8:16:28:e9:a3:48:
                    7b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FC:96:FB:91:26:C9:AC:D0:8D:78:9D:23:88:33:5D:78:1A:15:D0
            X509v3 Authority Key Identifier:
                keyid:EF:A6:C1:E6:EC:FA:D1:E8:8A:9F:44:D2:80:02:EE:D6:39:B2:BA:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76bB5uz60eiKn0TSgALu1jmyulQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ec:b6:38:cd:15:ec:06:7e:62:08:1a:53:8d:bf:fe:ad:88:24:
         d7:0f:24:bc:14:a8:3e:38:a9:33:53:f7:83:6c:e2:1f:4a:04:
         f0:cb:42:bb:e1:1d:3d:64:ad:b9:e1:c4:e0:68:70:95:eb:cf:
         fd:25:46:4f:60:71:d5:c7:b3:65:a5:25:47:08:c3:61:8e:f9:
         95:4d:1f:f5:fe:b8:4e:30:dd:f5:50:79:f9:9e:1e:e4:f5:8c:
         db:8f:0f:ff:bd:4d:f4:e5:2e:be:c6:65:f9:e5:1a:47:78:69:
         fb:98:fd:6f:06:d5:d1:91:d0:29:21:f7:9e:c0:48:f3:18:d0:
         0f:3c:5f:64:f4:40:6e:cf:5f:f7:5a:f4:f4:b2:a4:29:1e:6f:
         b2:5f:ce:79:93:b0:41:c2:f6:76:fa:a7:2b:98:5c:57:ef:95:
         0b:fd:4a:1e:f1:23:fb:24:35:22:ce:70:82:83:99:9f:e8:f5:
         1c:b1:69:28:fb:eb:dc:39:15:f2:0f:ad:79:a4:17:73:14:e6:
         17:dc:e8:8e:67:d9:80:36:99:c9:be:de:b0:cd:ae:3d:89:49:
         65:c3:ab:ce:3f:ea:b7:b8:0d:d7:ef:87:15:c4:02:15:65:f7:
         98:70:93:e6:5b:3a:d7:e3:de:f3:95:43:30:1f:fd:19:38:40:
         7f:dc:47:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:42:53 2025 by rpki-client