Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
File:                     967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft (raw, json)
Hash identifier:          mQW+4yXFKmJKBY/D26R6ZFS+98CcjvEXCweKvOx+Kvg=
Subject key identifier:   12:65:A3:08:D3:0A:FB:3A:CD:88:85:09:FD:DD:B7:FB:E4:0C:26:26
Authority key identifier: F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65
Certificate issuer:       /CN=A915D0AC/serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865
Certificate serial:       0192
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
Manifest number:          0188
Signing time:             Sat 19 Jul 2025 03:48:39 +0000
Manifest this update:     Sat 19 Jul 2025 03:48:38 +0000
Manifest next update:     Sat 26 Jul 2025 03:48:38 +0000
Files and hashes:         1: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl (hash: /PNttzNbgsScSCoDsaDcJSdW7BZsDgwMUsYCBXf15ns=)
                          2: 5F52F24EBD2811EE9459FF47C4F9AE02.roa (hash: 9NHfjKZ92JKgdcrA4N9M5ns+wKMTAc0NwSsWt7LXuOk=)
                          3: DD2A5994182F11EE82A0FC48C4F9AE02.roa (hash: Nc2DNs1eibu6K2aHjIt+L2SkvNewi7SdNMt96VyUl+w=)
                          4: B9CCF2D4BD2711EE9958E946C4F9AE02.roa (hash: Tr1GoB0OJ0WV/koJHwH589Dyk++1e8UfDHIpzpMoMFU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl
                          rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 03:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D0AC, serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865
        Validity
            Not Before: Jul 19 03:48:38 2025 GMT
            Not After : Jul 26 03:48:38 2025 GMT
        Subject: CN=687b1597-21a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7a:dc:51:cb:56:ff:9c:52:b6:a7:aa:b6:90:
                    a4:09:0e:4a:86:40:56:08:15:39:26:be:42:1a:03:
                    f5:1f:49:9c:4f:0f:38:eb:ec:8a:12:a7:6d:cc:3b:
                    cc:fe:ef:98:cc:74:e9:e9:a0:ca:0a:0c:ad:1c:06:
                    df:b3:b3:22:fd:79:b4:84:fa:b1:85:e5:81:c2:4f:
                    ac:15:d6:67:10:f0:2e:6c:69:f4:06:2b:9c:67:dc:
                    dc:57:ce:05:c3:46:e9:5f:7a:7b:69:5b:f7:cf:2f:
                    ee:17:aa:a3:7b:22:34:59:fa:30:65:dc:c5:df:0c:
                    02:51:e5:2d:f8:3a:07:87:a1:ff:22:f9:e9:47:d1:
                    79:f2:d0:57:69:4f:35:71:74:93:62:66:5d:60:44:
                    bc:aa:80:12:97:6c:99:a8:a0:ab:cf:5f:7a:03:f2:
                    07:26:3b:48:44:04:00:c7:d1:17:68:ee:f6:94:23:
                    b0:bd:90:10:cc:a0:11:b9:d6:c4:ea:4c:61:8b:ef:
                    6d:bc:67:6d:f7:4c:90:9e:9b:95:e4:4d:66:10:bd:
                    d6:12:20:d6:46:6b:46:78:71:c4:f3:22:49:dc:8c:
                    78:c1:7c:bf:b4:55:43:54:16:5e:cf:e5:e8:23:83:
                    08:5e:e8:0a:7a:08:25:77:21:34:cc:6c:a4:3b:d4:
                    1e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:65:A3:08:D3:0A:FB:3A:CD:88:85:09:FD:DD:B7:FB:E4:0C:26:26
            X509v3 Authority Key Identifier:
                keyid:F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         fc:96:46:ef:d7:7a:8e:a8:a1:dc:2c:dc:7f:23:0a:54:01:87:
         ed:34:92:5b:ee:8f:52:92:43:2e:1e:36:8c:aa:f0:0e:2e:f9:
         94:d1:f7:ce:0d:8c:5c:ce:bb:c6:b2:cb:5e:77:05:91:f1:35:
         23:d7:e5:40:5e:61:57:d0:74:37:4f:44:1c:54:9a:fc:74:a1:
         7c:07:dc:93:82:4c:d3:42:c5:43:7a:41:f6:da:21:b8:75:0d:
         25:41:6c:92:e3:a3:4a:4e:01:b8:cf:1d:ec:5e:ad:31:19:8c:
         8f:d2:82:00:15:8e:ef:88:58:1d:17:8e:67:5c:76:a5:9b:3b:
         51:55:9a:9e:65:0d:3a:8a:46:67:7b:d6:5f:52:25:68:e2:ed:
         e4:0f:39:17:ad:e9:23:80:ee:d1:67:ee:22:2b:7f:6f:af:5f:
         96:92:86:dc:60:59:85:0c:88:6f:cf:21:c7:28:e7:05:b8:c8:
         dd:07:bf:d1:82:f7:28:74:86:e8:22:6b:4f:6d:d6:3b:d8:33:
         c2:33:88:d9:67:7a:ff:9d:f9:cd:ab:e9:7e:d5:d0:c2:e8:c2:
         54:0a:fd:d6:04:af:4f:fa:29:71:ed:4c:94:39:1e:10:fb:9b:
         c7:ac:c2:d8:de:48:78:a1:06:08:76:19:e4:28:03:29:ee:2f:
         0e:7b:06:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 02:05:41 2025 by rpki-client