Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
File:                     aRgc9FH4s_7GT8gpi1ItSIylyeY.mft (raw, json)
Hash identifier:          PZNoBGgk5N6VMc3kwDo/U0/jzBmnwpD6elk+/uRhMGc=
Subject key identifier:   E3:29:CD:9A:64:DF:4A:8C:B0:96:00:CE:88:74:10:4F:E5:A0:79:DF
Authority key identifier: 69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
Certificate issuer:       /CN=A916DE3D/serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
Certificate serial:       68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
Manifest number:          61
Signing time:             Mon 21 Jul 2025 07:20:53 +0000
Manifest this update:     Mon 21 Jul 2025 07:20:52 +0000
Manifest next update:     Mon 28 Jul 2025 07:20:52 +0000
Files and hashes:         1: aRgc9FH4s_7GT8gpi1ItSIylyeY.crl (hash: 4GYiRRLqzX+8cNaX3kQB4kA9RVV0KzrNGLbbaw4IPDo=)
                          2: 3AA17754FD8211EFB5BB677AC4F9AE02.roa (hash: imHJlERFiYSGRBFLnXEmas2EVRVLv/9+zOxRclw7D8g=)
                          3: B3266880FD8511EFA4783083C4F9AE02.roa (hash: W6yWEruXPIDPoCs6QL8pnWnNjj8hPqXcENkKFmbbFhk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl
                          rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 07:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DE3D, serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
        Validity
            Not Before: Jul 21 07:20:52 2025 GMT
            Not After : Jul 28 07:20:52 2025 GMT
        Subject: CN=687dea55-3a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2e:ca:b4:2d:8e:f4:ab:e5:31:73:90:b1:aa:
                    d3:d1:81:9c:07:ce:bb:a8:8a:a9:fa:ac:f7:da:78:
                    22:82:69:3c:77:71:8d:98:db:6f:86:7c:e7:33:a3:
                    31:9e:3b:68:5f:ce:da:61:13:0a:85:95:74:a5:63:
                    41:1d:86:ad:0c:15:8d:89:17:eb:5a:ff:36:07:e6:
                    c2:b2:3d:47:25:cf:60:bb:a3:71:15:98:8e:8e:9f:
                    39:97:a8:0c:cd:58:ab:40:74:08:86:cc:22:60:c1:
                    4b:5a:60:f7:5a:09:07:10:fb:99:eb:df:03:f2:70:
                    59:da:1d:ff:13:a3:4f:c2:78:49:e4:65:32:45:75:
                    e9:b7:6e:d2:68:20:aa:14:9d:f3:b5:67:41:fa:8d:
                    3d:fc:72:99:08:c8:d4:c4:b7:9d:83:9b:98:5e:d1:
                    21:e8:39:37:f7:02:b7:68:80:19:6f:c2:28:22:8c:
                    e6:d7:4b:79:25:72:b9:6b:59:ed:41:08:fb:a7:d5:
                    99:6d:d4:2d:7e:6e:26:16:df:1a:90:eb:35:2d:47:
                    2c:ce:ee:37:b7:e9:46:a4:4f:32:50:de:c1:8a:4d:
                    01:23:43:85:91:25:7b:c8:4e:4b:1a:b7:87:81:48:
                    22:61:06:8b:44:ba:7f:d0:97:45:27:d9:b9:fe:fb:
                    13:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:29:CD:9A:64:DF:4A:8C:B0:96:00:CE:88:74:10:4F:E5:A0:79:DF
            X509v3 Authority Key Identifier:
                keyid:69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:a0:da:f6:e0:1b:93:86:1d:fc:da:c1:3b:04:de:c6:ac:66:
         85:75:2b:a2:14:7d:3c:1d:04:a8:30:ba:f4:3e:4c:a7:bb:79:
         3e:a7:af:a5:6e:52:96:6d:31:85:7d:da:73:33:7c:7e:e0:11:
         cf:ca:86:8b:fb:e0:3a:7e:8f:83:dd:2a:53:b8:c0:d6:a7:8f:
         e5:3c:ab:41:ae:24:60:e4:9c:b3:54:a4:43:b3:d2:56:89:e9:
         6b:b2:f8:43:a7:43:de:4c:07:d4:ed:5e:dc:ff:c8:9d:1a:79:
         08:f9:f4:d1:fc:bc:1b:10:df:23:12:a8:07:97:af:c1:5c:0b:
         07:ae:63:84:11:9b:b5:c4:0f:78:07:cf:d7:76:4a:84:a0:b4:
         d9:b9:4a:77:8b:ed:62:bd:53:4c:d9:35:49:30:e5:1c:9e:e7:
         bd:0f:2c:ce:34:52:1b:a1:4a:19:48:f0:82:d6:13:e8:47:10:
         26:6b:10:bd:13:af:4c:73:78:4b:39:42:c2:3a:52:0b:70:63:
         48:ae:bf:84:ff:94:2e:ca:11:a5:9b:9d:37:6f:90:ed:66:7a:
         97:9b:11:ee:08:ff:ec:0b:0d:1a:15:09:a5:df:46:fb:7d:eb:
         7b:2b:6b:42:7c:70:4b:02:5b:91:0e:b6:6b:5c:c5:93:2b:d0:
         6b:36:1c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 06:32:07 2025 by rpki-client