Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft
File:                     47jqsa6RbflaLVWue7e7eaULSuc.mft (raw, json)
Hash identifier:          vLj4PnnPrl9Qr0xzwEFITSu0ZnhI7xpUCt0ZM/G0wbg=
Subject key identifier:   25:E6:17:77:91:E0:28:51:DF:EE:23:AB:D4:32:EF:AD:CE:B1:AF:7E
Authority key identifier: E3:B8:EA:B1:AE:91:6D:F9:5A:2D:55:AE:7B:B7:BB:79:A5:0B:4A:E7
Certificate issuer:       /CN=A918B591/serialNumber=E3B8EAB1AE916DF95A2D55AE7BB7BB79A50B4AE7
Certificate serial:       0754
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft
Manifest number:          074D
Signing time:             Fri 18 Jul 2025 21:57:25 +0000
Manifest this update:     Fri 18 Jul 2025 21:57:25 +0000
Manifest next update:     Fri 25 Jul 2025 21:57:25 +0000
Files and hashes:         1: 47jqsa6RbflaLVWue7e7eaULSuc.crl (hash: Qg3aePJohhje5Mbg3pCZ7TcmNK4FzTO96mva0YoXOk8=)
                          2: D2E2417A2F7211EB80969C22C4F9AE02.roa (hash: 3UjfHQVfq3UO/YNci1JaGMI0IHPo5Ydd8fwr47Rzrio=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.crl
                          rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 21:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1876 (0x754)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B591, serialNumber=E3B8EAB1AE916DF95A2D55AE7BB7BB79A50B4AE7
        Validity
            Not Before: Jul 18 21:57:25 2025 GMT
            Not After : Jul 25 21:57:25 2025 GMT
        Subject: CN=687ac345-4fcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:30:c7:b8:3e:15:59:f5:1f:ff:05:d9:be:0e:
                    13:e4:54:44:94:86:46:2e:ff:16:40:14:21:53:48:
                    c5:e8:f4:1c:ef:9e:ed:f7:d9:1a:2c:dc:80:b6:93:
                    29:d0:fd:59:91:e7:8d:9e:01:a4:f8:7b:e1:c1:0a:
                    d4:ab:4b:ca:56:1c:1e:12:b2:61:22:5b:21:54:9d:
                    d7:87:2c:13:ca:51:af:a8:28:27:ce:b3:8c:e2:f0:
                    68:d6:84:17:7a:88:9c:4b:d7:5c:7e:bc:03:26:0d:
                    aa:89:a5:88:19:3d:04:29:61:d2:4e:78:7e:23:5c:
                    50:bb:d4:6d:19:5a:26:b6:3c:bc:56:e1:0c:7d:f2:
                    0b:8e:40:a9:16:4d:de:33:ca:ba:88:c9:9a:1a:dd:
                    48:13:13:6c:89:37:81:7f:7b:e7:f0:ca:16:7e:f8:
                    36:e0:93:2f:7a:1e:10:5a:eb:6f:ed:af:6c:40:e7:
                    cc:dd:9e:85:68:d2:43:d9:5f:96:3a:7e:72:f6:15:
                    c4:f8:d0:0c:10:f5:9b:08:b4:45:ea:5c:a1:3d:3e:
                    b8:0c:b0:b5:70:ce:4d:00:a6:df:43:33:0a:f2:ca:
                    d7:a3:7c:5a:eb:5a:ee:29:d7:e3:57:b1:bb:06:b3:
                    54:a2:00:64:9c:58:a6:99:93:e4:8b:a4:e8:fe:18:
                    ef:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E6:17:77:91:E0:28:51:DF:EE:23:AB:D4:32:EF:AD:CE:B1:AF:7E
            X509v3 Authority Key Identifier:
                keyid:E3:B8:EA:B1:AE:91:6D:F9:5A:2D:55:AE:7B:B7:BB:79:A5:0B:4A:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47jqsa6RbflaLVWue7e7eaULSuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B591/D233C6462F7111EBB6ED3E22C4F9AE02/47jqsa6RbflaLVWue7e7eaULSuc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ee:63:17:45:b8:7d:b0:ea:d5:0c:22:41:d1:d2:1d:a4:1c:
         72:43:2a:cd:df:91:c3:40:40:8e:19:5a:32:70:b9:55:30:90:
         3a:3b:3b:88:a3:79:08:20:87:8a:7b:dd:54:bd:5f:07:1b:b4:
         43:42:7e:b4:f3:7c:7f:b9:16:22:27:69:7d:bd:35:59:e6:22:
         72:02:9c:93:2e:55:aa:b4:3a:b1:c8:a3:b0:3f:80:00:72:00:
         4f:c6:b8:ca:5c:14:17:93:81:61:39:54:9e:09:a8:96:41:df:
         5a:76:4e:4f:75:83:53:ce:9b:bd:7b:26:28:c0:9d:12:4d:6b:
         bd:8b:06:2e:ef:67:8b:c0:ad:11:03:be:57:e0:7f:92:58:3c:
         ce:ce:d6:1a:67:93:91:60:c7:61:89:89:25:fd:a9:11:df:11:
         74:67:af:7b:38:4c:61:8b:50:29:1f:d8:79:fc:4f:f0:a9:c7:
         dd:fb:50:33:91:69:89:09:fd:07:88:10:8f:33:84:1f:73:e9:
         fe:76:8d:1b:0c:6d:ba:ac:94:0d:f2:83:58:c5:ca:2b:66:72:
         a7:f7:8a:d9:6d:49:c4:f1:a6:1c:59:8c:7e:e6:ed:5d:a3:71:
         35:9c:3f:d2:f2:fa:6a:12:d0:96:0f:76:48:63:a4:40:f5:26:
         5c:0d:54:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 03:35:10 2025 by rpki-client