Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
File:                     Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft (raw, json)
Hash identifier:          m5c7EtuAecmx3Vu+lY62WpcforvyX02rWCKJ34RnXxo=
Subject key identifier:   22:6E:FD:28:17:E5:78:8F:44:B5:A2:9F:87:EE:9E:2F:F5:86:39:44
Authority key identifier: 3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06
Certificate issuer:       /CN=A918AA54/serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
Certificate serial:       0315
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
Manifest number:          0310
Signing time:             Sat 19 Jul 2025 01:37:46 +0000
Manifest this update:     Sat 19 Jul 2025 01:37:45 +0000
Manifest next update:     Sat 26 Jul 2025 01:37:45 +0000
Files and hashes:         1: Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl (hash: sViI+P+KqZv2vcN5oqcWQf8REdUWX011WKrmAAAgp0E=)
                          2: F7ACA074DC3F11EC8323B460C4F9AE02.roa (hash: fHu5/MPKlLCuXm6cY4db7lpTtm9fZVRYzzIdcMcSwUc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl
                          rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 01:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 789 (0x315)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AA54, serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
        Validity
            Not Before: Jul 19 01:37:45 2025 GMT
            Not After : Jul 26 01:37:45 2025 GMT
        Subject: CN=687af6e9-98eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e2:a1:94:43:ce:ea:b8:64:84:d4:f4:9c:2c:
                    36:f0:f1:db:6f:a3:ad:14:7c:74:8f:ae:a6:8b:3d:
                    22:94:9d:c4:7c:d6:02:8f:1d:97:47:5f:1f:11:b9:
                    94:de:5b:85:23:41:8a:5e:59:bd:e9:40:97:05:f6:
                    70:82:6d:92:dd:ca:0a:5b:ef:51:0c:34:f8:bf:1d:
                    6d:07:ae:64:65:5e:ac:05:13:e1:67:40:4f:94:d2:
                    7a:29:fd:3b:99:b3:9d:30:f4:90:78:e2:47:f3:b6:
                    95:c0:d8:8a:9e:90:d5:0f:91:6b:29:63:e6:fa:f7:
                    51:8b:41:e8:01:51:58:f0:a4:49:b9:97:4d:07:2f:
                    59:12:ba:9a:d8:36:36:cb:6d:ea:6f:45:aa:d5:d7:
                    bf:79:44:38:47:56:38:03:d8:e1:4c:47:9c:d8:ca:
                    17:11:e0:d6:f1:57:b2:70:ff:a8:32:56:ca:e3:76:
                    7f:73:1d:e2:38:e2:d2:2c:36:63:c7:5c:e7:cf:70:
                    08:66:36:d1:f0:3c:f3:8f:30:87:f6:16:8e:17:ea:
                    1b:f5:a1:b9:0d:d1:08:f3:31:cf:6b:0d:10:46:d5:
                    21:f4:e5:29:19:c8:cb:88:2f:18:f7:93:ef:22:d9:
                    f4:7f:54:4d:9e:d2:38:38:02:07:b6:12:59:de:92:
                    e0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6E:FD:28:17:E5:78:8F:44:B5:A2:9F:87:EE:9E:2F:F5:86:39:44
            X509v3 Authority Key Identifier:
                keyid:3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:d7:0d:86:26:8d:ec:86:ac:66:1d:42:25:e3:a1:47:f6:9c:
         31:20:f1:15:3a:22:6a:27:a2:76:55:a9:4d:1b:74:e2:fb:b9:
         15:a8:45:17:e7:47:c9:69:83:b3:62:02:b2:f0:84:3d:5b:8d:
         79:6d:3c:56:1a:bb:84:09:30:78:c6:c2:ca:fe:39:cd:8c:24:
         03:e7:4e:27:23:f5:4f:9f:59:bd:e7:dc:c2:82:6f:b2:e1:87:
         c7:f2:a6:bf:59:69:bc:d6:44:ae:fa:b5:a3:c3:97:0d:3d:7b:
         32:cd:b4:3b:a8:f2:b1:fe:a5:e5:b7:6d:ff:93:24:de:47:a7:
         88:9e:bb:1f:ae:a2:65:57:9c:e4:a2:c7:00:e8:cd:ac:2d:e6:
         d2:e8:f2:c3:80:7c:45:6a:21:9c:d4:1f:ba:c8:6c:02:21:2b:
         41:e4:96:18:f4:fc:c8:b5:d7:cf:f7:4f:a6:00:0f:cf:59:4f:
         4d:9e:ca:65:3c:b2:fc:07:df:42:be:cf:91:25:3b:6a:f5:4a:
         7d:a1:70:8c:7c:d1:d7:b8:22:64:10:e0:46:82:e4:4a:f7:2e:
         2a:54:83:8e:57:89:51:da:21:d3:32:26:93:1e:78:ab:af:88:
         4a:ba:f0:da:c8:f2:bd:a5:3a:82:c6:98:c4:4a:7a:53:a9:d6:
         cd:d7:4d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:35:25 2025 by rpki-client