Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
File:                     pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft (raw, json)
Hash identifier:          DkNhvkmz8E4/DqqSf+O2G2+ouxUiwuJDf5yK8BI6jJI=
Subject key identifier:   0C:C7:37:42:2B:F0:F4:6F:B3:E8:A4:D4:4D:1B:55:97:90:B6:72:BD
Authority key identifier: A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3
Certificate issuer:       /CN=A916A763/serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3
Certificate serial:       0174
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
Manifest number:          016C
Signing time:             Mon 21 Jul 2025 03:59:31 +0000
Manifest this update:     Mon 21 Jul 2025 03:59:30 +0000
Manifest next update:     Mon 28 Jul 2025 03:59:30 +0000
Files and hashes:         1: pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl (hash: rusfpekh73Bhv6FMGO9Mc98NJ7FRtJ/lCCM0Jg9vgcg=)
                          2: 966CB516179B11F080B9434CC4F9AE02.roa (hash: R5V6cNUR7QLj7LU1QU6TMYs4Bu+rino6/Kk8saAW2NA=)
                          3: BF685A9E232E11F0B8BD6F6AC4F9AE02.roa (hash: kNV7VPtOhVOV5sWtOMUE/oMw0hk3N1NsBatuZRoh3AE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl
                          rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 03:59:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372 (0x174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A763, serialNumber=A55D3FF8A85BE103B583750D77943F47C976F5B3
        Validity
            Not Before: Jul 21 03:59:30 2025 GMT
            Not After : Jul 28 03:59:30 2025 GMT
        Subject: CN=687dbb22-b28d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:41:bc:5d:5b:f1:32:5b:93:7f:e8:19:7f:ef:
                    40:2f:b4:85:3c:9f:ce:36:af:45:ac:e6:16:dd:76:
                    6e:6e:af:80:bf:7b:50:c4:c4:07:3e:cb:38:bd:56:
                    ea:a7:f5:f2:60:fb:f8:2e:d8:16:60:e6:e2:f0:93:
                    d2:d3:34:aa:62:cb:4b:78:b3:51:81:de:95:14:19:
                    73:40:6a:3b:dc:d1:c6:a0:2e:2e:8c:13:d2:28:78:
                    07:f6:f0:bb:e7:fe:2b:fd:f3:34:23:8e:d5:56:d4:
                    5c:bb:63:4d:72:44:6f:cd:12:72:c6:c9:87:72:fc:
                    f5:7d:bf:5d:db:c8:b1:cb:a7:cd:76:24:be:eb:da:
                    a9:88:a7:09:93:ba:e7:c8:d7:d3:bc:82:09:c4:5e:
                    87:0c:a5:ed:9b:d3:15:8a:1e:a6:73:80:4b:e2:9b:
                    76:3c:72:93:ca:c3:f9:db:73:35:88:6d:a0:48:3a:
                    dd:2f:82:d0:cb:0a:04:b2:41:1f:f9:70:28:02:4d:
                    ab:32:bf:28:6d:e3:ce:a6:94:25:95:94:4d:59:21:
                    64:42:8e:89:4b:ba:c0:28:32:5c:0b:86:25:f8:2f:
                    eb:79:76:d3:2b:de:97:74:3e:dc:f5:91:ca:19:d9:
                    60:4c:ef:8b:e6:ad:e7:20:54:8b:6a:4b:a5:82:fb:
                    a5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C7:37:42:2B:F0:F4:6F:B3:E8:A4:D4:4D:1B:55:97:90:B6:72:BD
            X509v3 Authority Key Identifier:
                keyid:A5:5D:3F:F8:A8:5B:E1:03:B5:83:75:0D:77:94:3F:47:C9:76:F5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pV0_-Khb4QO1g3UNd5Q_R8l29bM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A763/71F79C1C424211EEA7F2CA12C4F9AE02/pV0_-Khb4QO1g3UNd5Q_R8l29bM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:87:5f:64:bd:f5:32:58:6e:e5:b5:c9:37:36:28:c9:2e:f3:
         96:07:25:3f:5a:8d:63:39:86:4d:70:64:65:e0:ab:a5:5a:40:
         9e:d7:e9:02:4d:09:00:b2:a9:26:a8:91:9d:9a:b5:2f:3e:89:
         17:69:5a:a1:c9:86:ad:61:22:2e:a9:59:21:13:00:68:27:f5:
         b4:84:75:ad:ed:78:8b:95:a2:38:dc:0f:1f:aa:c8:42:82:11:
         f8:86:91:bc:3e:da:1d:15:0a:a0:b6:5e:f2:11:1d:7a:0d:41:
         9d:28:88:90:37:3a:b8:b6:d0:5d:8c:26:9b:e3:24:8f:bc:93:
         db:e3:02:4c:b0:f8:ff:64:f1:b8:9e:e9:8d:d1:df:34:8e:12:
         78:9a:65:ec:77:4e:24:9a:58:14:ab:c0:10:48:59:9d:41:81:
         1a:02:a3:81:a5:c2:56:d6:0d:66:39:d2:3e:fa:2e:92:4c:5f:
         dc:db:ea:60:bc:2a:17:17:e6:28:a7:db:11:48:ae:80:7e:eb:
         56:cc:84:fe:93:95:a3:f0:61:d7:b8:5f:ab:6b:b1:6f:74:fb:
         fc:e2:ae:b5:15:56:e5:e7:43:cc:3b:3a:34:12:a8:6a:fe:f9:
         47:f8:12:00:82:f0:a4:48:ca:d5:f3:d4:a6:34:76:e4:9e:83:
         90:e7:09:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 05:20:58 2025 by rpki-client