Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
File:                     CfwHfzPjrWe_FHdVFno61OrLHnw.mft (raw, json)
Hash identifier:          Qj2nLoF602uand3Sb4vu9w4bImgGQ1yIgMk50w7yXZE=
Subject key identifier:   27:D0:5B:00:B0:94:59:44:50:9E:DC:C1:8B:B5:17:74:B6:6B:97:B9
Authority key identifier: 09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
Certificate issuer:       /CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
Certificate serial:       0650
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
Manifest number:          05E8
Signing time:             Fri 18 Jul 2025 23:37:57 +0000
Manifest this update:     Fri 18 Jul 2025 23:37:57 +0000
Manifest next update:     Fri 25 Jul 2025 23:37:57 +0000
Files and hashes:         1: CfwHfzPjrWe_FHdVFno61OrLHnw.crl (hash: YfUXWM3FuafPFbAIWjA8y1QLDMRNecifFsjVs1RWLQo=)
                          2: ACDC465C7AEF11EFA321CE80C4F9AE02.roa (hash: yBRdcVlJbMlBPrrr56nDrfaeaxDRpo8RSVcl7jjMZG8=)
                          3: 794C3D9C5BCC11F0A828900BC4F9AE02.roa (hash: UyWilekYaHLz4TqphBn2KWvDci6mtEvraZS6ky5iZQg=)
                          4: 81618D88E53E11EB9E429C44C4F9AE02.roa (hash: eFJqISAsUQRuhPb6f3Hah2PFjEJHe1r/X4BKPg7b4kE=)
                          5: 30904BA8329711EE8EC1E923C4F9AE02.roa (hash: APJ8LqbdzO0lCKxbThL64TXLQduxBrfKXGZEsGj8Ew8=)
                          6: AEEA30A444C911F0B1847067C4F9AE02.roa (hash: jBj8tUje/J9yoZyIY1hd6S/+kLstKeE/As7y2q686ZY=)
                          7: 639394F4B05611EF95B2931BC4F9AE02.roa (hash: C08kfFB3sbHdAzC9hLJnr0tm+lqFd1yHsi8+zNn8y4s=)
                          8: 8023B518E53E11EB9E429C44C4F9AE02.roa (hash: vSQHxn5/lTR7h5pMBllVKzWJzWkf2IiJr01/df+82mQ=)
                          9: 167A6086BBD211EEABCC0D23C4F9AE02.roa (hash: bZCNjczNhzUji7LuYcuS6Yg9nvK9y01d14oqtpECLrI=)
                          10: 80AD3A9AE53E11EB9E429C44C4F9AE02.roa (hash: 0krzqD999T9B24TBVDnqpUMPP33Jo+TAt8qYmCWzmx0=)
                          11: 7F2A4208E53E11EB9E429C44C4F9AE02.roa (hash: epJMifwD6R2b1WeonhK6+Ptsph58rQyMoEb+/4Q80hY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl
                          rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 23:37:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1616 (0x650)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161613, serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
        Validity
            Not Before: Jul 18 23:37:57 2025 GMT
            Not After : Jul 25 23:37:57 2025 GMT
        Subject: CN=687adad5-d458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:9f:f0:8b:68:d9:cf:18:33:7a:d8:a2:32:c6:
                    b1:93:d4:f5:1d:e0:28:28:ed:20:98:42:16:7a:c9:
                    d4:ee:53:82:7f:c4:aa:dc:a0:89:8a:65:db:52:eb:
                    81:24:59:71:e4:41:a5:af:d6:2c:0c:b5:42:b9:77:
                    50:e5:a0:1f:a7:9c:fd:e9:07:5a:50:fd:2a:d8:fc:
                    55:ac:ab:61:70:62:56:73:56:4a:27:5e:d4:08:bb:
                    4a:8e:d6:d5:8c:fd:50:da:0f:ba:d2:6e:65:f1:4f:
                    de:52:01:3f:d6:ae:5e:13:5a:d1:1f:53:34:97:5e:
                    c6:57:cc:17:3a:17:1a:b5:dc:16:49:f9:4d:0f:13:
                    26:1f:91:67:2a:3d:a1:48:86:56:8e:cc:b5:be:2a:
                    b4:02:64:75:a5:f0:42:c6:81:51:18:3d:84:2a:c4:
                    10:a6:5b:a5:93:e2:7b:4a:d9:dd:99:c2:be:ff:4e:
                    22:41:e1:5c:3d:69:6d:23:7f:88:a1:84:bd:8a:4c:
                    80:1a:48:39:08:eb:d3:1c:7a:49:a3:04:b8:22:95:
                    ab:5b:b1:cb:cc:72:4b:95:e8:1d:82:9e:b5:60:41:
                    2a:f8:03:4d:19:5d:d6:16:d0:24:88:97:b1:45:b9:
                    03:51:af:fb:df:69:0b:8e:48:58:e6:38:40:11:bd:
                    7d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D0:5B:00:B0:94:59:44:50:9E:DC:C1:8B:B5:17:74:B6:6B:97:B9
            X509v3 Authority Key Identifier:
                keyid:09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:26:42:49:3a:c2:84:13:14:bf:8d:ca:96:b5:6a:d4:de:d4:
         9b:26:fc:e2:1d:79:e8:48:98:c6:b6:9a:2f:01:a6:19:aa:a8:
         04:9c:2e:ed:34:e1:0c:54:f6:8e:01:8d:bb:11:4e:50:37:9a:
         8f:ad:ed:8f:a0:ad:5c:9a:3a:f9:c4:25:77:a8:c0:e8:6c:d0:
         43:c2:9c:51:62:fb:aa:d0:c8:c9:16:75:04:ba:88:60:48:04:
         b6:8d:b6:59:9c:dd:71:19:56:80:57:81:12:fd:fe:97:d0:a1:
         8d:32:d1:4d:db:68:cc:d9:36:58:97:0c:ec:b9:18:a7:19:7b:
         98:a6:56:f0:2d:8c:09:ab:64:5c:9c:e5:a3:e5:d2:6f:e4:f9:
         74:87:22:bd:90:51:95:e5:f5:cb:85:4d:71:bc:34:b6:97:18:
         c7:1a:c6:5b:03:7d:09:07:06:7c:73:b3:4c:a1:c0:30:d5:de:
         83:f1:af:d9:93:ad:75:25:ed:b1:ad:9c:8e:ee:34:dd:72:3a:
         a6:d6:67:b5:f6:f3:18:b3:4b:64:4c:29:f9:89:de:8f:7c:5a:
         21:f2:6a:83:2f:27:ee:ad:40:5b:87:20:20:17:4c:3f:db:7f:
         e1:7b:80:a6:f5:33:7e:08:21:92:cf:4d:64:0f:a3:96:19:8c:
         18:e2:3a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:59:52 2025 by rpki-client