Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
File:                     8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft (raw, json)
Hash identifier:          QostFYH2sSUpCLA6Qlvns0DScUzpy8EWkdIwv8Uz6h8=
Subject key identifier:   80:F9:CF:5E:9E:0D:2D:76:65:0D:FF:5B:43:29:21:00:B0:B5:86:77
Authority key identifier: F0:CB:35:F1:45:E6:1B:1C:20:43:AF:D1:BA:4E:35:41:47:C4:B5:5E
Certificate issuer:       /CN=A9163415/serialNumber=F0CB35F145E61B1C2043AFD1BA4E354147C4B55E
Certificate serial:       0B43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
Manifest number:          0B3B
Signing time:             Fri 18 Jul 2025 19:23:49 +0000
Manifest this update:     Fri 18 Jul 2025 19:23:48 +0000
Manifest next update:     Fri 25 Jul 2025 19:23:48 +0000
Files and hashes:         1: 8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl (hash: F8RzCx8gfK0laj2q7GdgunizXTNSYTivTOSkJwaROpQ=)
                          2: 24C647DC3DFE11EAA52A0572C4F9AE02.roa (hash: P0bYmStiB4oa4LekcidIgrNs8onI2ttf+z7KOz4RThU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl
                          rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 19:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2883 (0xb43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163415, serialNumber=F0CB35F145E61B1C2043AFD1BA4E354147C4B55E
        Validity
            Not Before: Jul 18 19:23:48 2025 GMT
            Not After : Jul 25 19:23:48 2025 GMT
        Subject: CN=687a9f44-ef8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b8:87:5b:51:46:99:64:15:4b:68:70:41:66:
                    1d:44:e6:cf:6c:ac:1f:a9:9c:5d:3b:93:70:de:88:
                    44:d8:7b:fe:16:86:7f:9c:44:78:c7:36:bf:04:9c:
                    3b:08:ca:e2:8a:a1:a6:04:f6:40:b2:23:d0:d2:ae:
                    62:1f:0b:27:65:d5:ed:c6:bc:f5:7e:fb:41:ca:c5:
                    50:2f:53:7a:08:3d:07:5a:5c:fc:59:58:69:1d:d1:
                    09:c9:70:3e:1f:bb:1f:9d:cf:4a:07:8e:4b:2c:c5:
                    f1:52:bd:95:5d:38:65:c7:92:ce:61:99:7d:c3:35:
                    13:f8:d2:11:a7:54:bd:bd:84:bf:d4:02:02:28:d4:
                    1e:29:34:df:b9:34:0d:96:15:25:f9:5e:47:a8:a9:
                    15:a6:fc:68:61:68:2e:6e:48:42:1f:6c:33:bc:bf:
                    bb:f9:92:d7:9c:ce:68:9f:31:37:4f:fa:65:ae:5b:
                    83:f3:c5:41:1f:4d:57:df:ae:a4:ce:b4:5c:1e:f1:
                    c3:fa:07:55:a7:96:87:8e:21:09:1b:85:1b:9e:c9:
                    65:1b:d2:cf:2f:46:a0:69:9d:49:16:d0:28:86:6f:
                    97:fb:9a:30:a5:cb:d8:4d:21:fe:0d:05:17:14:bf:
                    9d:65:7b:16:a6:32:f3:58:20:52:8d:4e:a9:e1:2c:
                    ed:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F9:CF:5E:9E:0D:2D:76:65:0D:FF:5B:43:29:21:00:B0:B5:86:77
            X509v3 Authority Key Identifier:
                keyid:F0:CB:35:F1:45:E6:1B:1C:20:43:AF:D1:BA:4E:35:41:47:C4:B5:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163415/107209483DFD11EA9F3DB470C4F9AE02/8Ms18UXmGxwgQ6_Ruk41QUfEtV4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:9a:73:f3:03:e0:66:be:49:3c:bd:b2:03:79:d6:d1:f6:3e:
         1e:ea:63:6e:d4:d5:f6:1e:15:43:9f:8c:cb:f5:d5:59:40:08:
         10:ea:fb:dd:77:a8:23:ef:d1:c4:2b:6c:c0:7a:1b:bd:5c:93:
         6c:35:ef:d2:57:d1:8b:7a:f3:1c:86:c6:68:dd:36:c6:b3:08:
         92:12:dd:b9:9d:b9:bc:f5:57:15:56:7c:f1:5e:25:41:71:16:
         31:54:ba:c5:60:89:3c:7a:e1:0e:4f:19:56:07:b0:78:6a:52:
         6f:40:e5:37:c4:4c:b4:dc:5f:65:01:ea:7b:97:32:fc:30:1c:
         b2:1f:76:b6:e5:c9:3f:8a:bd:0d:f2:7d:6e:6d:ac:c9:12:9b:
         f3:2a:24:9e:45:f4:d8:1a:53:92:2f:47:28:3a:d2:bb:be:33:
         9c:27:57:2b:df:b9:a5:7f:b7:7a:2f:c8:71:4f:9c:8e:b6:c4:
         fd:b6:09:2b:31:7c:71:18:63:ea:e7:8f:d2:e4:70:59:0a:21:
         2a:bf:88:29:59:65:b5:36:e1:78:0d:bc:23:1e:e9:ac:92:eb:
         3f:b0:07:4b:ec:1d:c9:cd:98:c4:91:7d:57:39:60:ad:62:14:
         e4:c6:0f:48:91:ee:17:14:d2:ea:e7:d2:37:6d:97:94:fe:42:
         0a:2e:4d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 03:31:59 2025 by rpki-client