Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
File:                     Cc_-Rn87CcPQbySRnPrH4APku3U.mft (raw, json)
Hash identifier:          2bNf+T1ncoiBF3EkqLpo20dBbKCvEgRdBRa1/Ar1etU=
Subject key identifier:   EC:12:BA:A1:4F:3B:08:B9:69:F9:4F:B6:48:88:A2:AA:0E:B6:91:30
Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
Certificate issuer:       /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Certificate serial:       1C11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
Manifest number:          1BEF
Signing time:             Tue 22 Jul 2025 16:22:30 +0000
Manifest this update:     Tue 22 Jul 2025 16:22:29 +0000
Manifest next update:     Tue 29 Jul 2025 16:22:29 +0000
Files and hashes:         1: Cc_-Rn87CcPQbySRnPrH4APku3U.crl (hash: 6uyqBQ/fi75Z1VHtzQ5Fi0MK+bxlz/I3Vvx3kQHNNbY=)
                          2: F7CC52C45DF611EC8F523217C4F9AE02.roa (hash: l1Lp6717izpzzjuLJ/WIAZ1x52OL2D3LQu0E5xm6nH8=)
                          3: 398C15006B8711EF96847F5FC4F9AE02.roa (hash: /yvn8ijOa8FBDJ5ASQ/Lery7dqjE4HE5gFGgvkPmpE0=)
                          4: 6996CEB84E7011EFA4A32D5CC4F9AE02.roa (hash: 06vkEMgrkkkWPxaN6n0p0hSzGNVGXFIfC5HD0mArdMk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
                          rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 16:22:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7185 (0x1c11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AA78, serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
        Validity
            Not Before: Jul 22 16:22:29 2025 GMT
            Not After : Jul 29 16:22:29 2025 GMT
        Subject: CN=687fbac6-2b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:82:78:1c:1d:97:f9:93:b8:a8:a4:5b:33:b2:
                    f5:ab:78:85:b8:5b:b5:01:d2:d8:53:04:86:c1:8d:
                    64:66:35:ff:86:07:5e:50:b9:1e:8e:b7:9f:a6:f3:
                    c3:77:4d:20:5b:90:fe:72:6a:c7:9b:47:e6:e4:6b:
                    b0:9d:c0:f6:30:49:ec:a6:49:7e:1d:fd:6a:77:1a:
                    84:c4:64:58:c0:b1:ae:ba:07:08:b4:7e:66:8b:3d:
                    c5:55:45:d5:90:64:da:0f:9d:f2:64:92:df:8d:9d:
                    3c:ad:5e:41:1a:e1:bf:ec:70:ab:22:af:1b:79:ac:
                    5e:c4:f5:99:b3:14:0c:07:65:04:18:80:45:5f:3f:
                    db:0a:d7:93:c0:59:f0:aa:9c:e8:1b:56:20:5f:05:
                    19:70:8f:5b:d3:5e:64:47:59:f3:57:73:c2:5a:ab:
                    60:28:e3:eb:e6:bd:4a:d9:19:14:8c:d3:5d:dc:89:
                    f3:ad:1d:9f:c9:84:09:5d:1c:2c:19:86:8e:d9:8e:
                    0e:5a:e9:92:15:c2:75:cc:ec:00:15:d3:8b:fe:39:
                    74:b5:52:98:83:64:e9:e2:2b:f7:2e:7a:6d:09:0f:
                    e4:9b:d0:a7:52:ea:0b:dd:b8:4a:27:2b:49:f3:bc:
                    a5:f7:2d:d7:ba:64:a7:3e:ff:8c:8c:72:70:7d:2b:
                    39:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:12:BA:A1:4F:3B:08:B9:69:F9:4F:B6:48:88:A2:AA:0E:B6:91:30
            X509v3 Authority Key Identifier:
                keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:07:a0:19:1f:b4:b4:97:00:1c:8c:a2:27:c7:1f:62:d3:84:
         0e:66:d8:26:20:44:62:01:a6:3c:94:2b:08:19:08:5c:52:7c:
         72:37:60:7d:b2:c6:31:48:f6:19:dd:29:3a:64:3b:9c:5e:79:
         67:7e:23:56:f8:3e:4c:af:27:29:fa:b1:cd:af:6a:89:b5:58:
         96:ce:82:a0:c6:12:50:0a:e1:d3:fd:50:ae:cb:48:c2:1c:b2:
         fe:c9:7b:48:18:53:05:88:20:4c:b6:60:41:5a:6e:2e:07:60:
         48:b6:c0:e9:a4:35:f3:0e:fb:1b:ee:5c:c2:a0:16:69:c7:56:
         70:ca:b9:c1:3b:c3:30:c5:3b:c3:80:85:1c:ec:1f:74:92:7d:
         9c:b5:87:5c:eb:d6:47:a7:7a:9f:93:61:fd:8d:4a:24:7f:a1:
         c7:23:e3:b9:58:89:bb:45:f5:e8:c7:52:61:64:4c:0a:86:d2:
         e3:df:ec:99:0f:f6:ee:c9:c7:dc:dc:de:07:b0:23:a3:11:a7:
         15:a2:fc:8b:7e:cc:68:a2:85:27:c5:89:29:b9:d6:ed:e5:e1:
         07:07:27:9e:ca:cd:b0:42:7a:cc:f6:91:e7:8f:02:af:d3:9b:
         be:ed:48:50:04:70:55:6f:13:2b:50:19:62:47:f4:73:18:33:
         a0:d6:e9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:22:42 2025 by rpki-client