Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
File:                     K0TIiRquK4of20jr9KV-mJrrc2M.mft (raw, json)
Hash identifier:          17xHBIsT6UVGzYAu++JoxBIqDgys/4a06TWmHY54omU=
Subject key identifier:   0D:24:71:78:79:9D:AC:EB:8A:73:69:70:CE:66:FB:95:79:DE:E4:FB
Authority key identifier: 2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63
Certificate issuer:       /CN=A918BBBA/serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363
Certificate serial:       0482
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
Manifest number:          047E
Signing time:             Mon 21 Jul 2025 00:16:52 +0000
Manifest this update:     Mon 21 Jul 2025 00:16:51 +0000
Manifest next update:     Mon 28 Jul 2025 00:16:51 +0000
Files and hashes:         1: K0TIiRquK4of20jr9KV-mJrrc2M.crl (hash: uFwuRSwfrm4I5e2gbOSepoJatAYCkQx2aY7KxrtM1ts=)
                          2: 0CD36EF4500B11EC9430721DC4F9AE02.roa (hash: gK2u6xOFSxtr+xoZ4+/hIrNybEaw24qFNSOsiwBKiyM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl
                          rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 00:16:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1154 (0x482)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BBBA, serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363
        Validity
            Not Before: Jul 21 00:16:51 2025 GMT
            Not After : Jul 28 00:16:51 2025 GMT
        Subject: CN=687d86f3-4e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:da:5d:2b:dd:e0:f0:bd:45:aa:ec:4e:d6:c7:
                    97:51:40:b1:72:79:c8:ea:1a:ce:dd:c9:01:f4:ee:
                    96:c7:a7:85:23:0b:07:a2:a6:21:fb:8e:38:07:38:
                    f5:71:50:82:42:bb:b4:de:62:b4:4e:38:dd:e8:4c:
                    b8:9f:8d:1e:27:a7:54:67:c1:20:ed:1d:d0:5f:9d:
                    0f:ae:c0:6f:47:02:a1:3c:c0:ca:34:c5:82:38:82:
                    20:4d:d0:6b:1e:00:7f:af:0e:70:e0:50:fe:5b:1c:
                    86:6c:af:cf:87:fe:5f:12:d7:40:3f:17:53:bf:a2:
                    20:b9:6f:e2:31:8e:61:e1:6e:b4:21:77:0c:75:3b:
                    9f:4f:da:65:38:44:4a:77:2f:3d:24:c5:99:50:8a:
                    21:b9:23:9e:2f:af:6c:e8:32:4d:a3:05:bb:a2:36:
                    f1:20:32:be:f6:1d:92:be:43:ad:ae:8f:df:d3:a7:
                    20:e1:38:95:79:c8:56:ca:f4:98:8d:ee:86:1a:67:
                    25:fd:bb:d2:21:f7:2a:35:a8:78:52:f0:99:23:2d:
                    00:d3:6a:12:9c:60:96:34:d4:07:16:0a:27:4b:8d:
                    63:f2:27:a3:e6:c4:23:82:03:c4:32:bb:e8:12:57:
                    94:35:76:12:1b:50:4c:03:cb:30:75:f1:e3:03:6b:
                    62:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:24:71:78:79:9D:AC:EB:8A:73:69:70:CE:66:FB:95:79:DE:E4:FB
            X509v3 Authority Key Identifier:
                keyid:2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:42:30:74:8d:b6:34:90:b2:12:6c:d0:12:36:68:b1:a6:92:
         22:06:c6:4b:48:27:7b:02:1b:e6:59:0f:99:56:b2:ce:7f:ff:
         50:54:e8:36:7b:5e:0c:34:dc:6a:55:89:59:58:58:38:1e:e5:
         59:f8:ce:00:ef:c3:44:26:39:d7:b4:e7:64:3a:92:5e:00:68:
         3f:40:be:8e:a5:0a:c2:a0:c7:f8:ee:05:46:00:bf:cf:9c:45:
         bc:6f:1e:46:9c:da:08:4a:93:75:6d:91:67:08:00:2f:2d:32:
         54:dd:76:35:34:2a:ef:22:66:ca:c7:ab:36:ec:7b:1f:9d:5d:
         65:8d:10:7e:48:23:73:fb:ad:f8:f2:cb:41:0f:2c:0b:46:2f:
         dd:a2:8f:e0:15:45:58:e8:8a:a2:a0:fb:58:2f:99:b6:07:cc:
         08:4f:0b:0f:a4:3c:57:97:f4:6d:26:9d:42:ec:33:e1:b5:89:
         97:9e:92:90:ae:5f:42:53:6d:7d:23:08:e6:24:fd:0a:4d:84:
         9b:04:ac:d2:8f:a3:d4:8f:fc:42:ba:93:18:c2:47:40:f0:f6:
         5d:e8:a9:da:db:2c:b3:ec:0c:1b:7b:1b:14:06:a2:37:6f:26:
         ee:41:27:fe:b3:57:d6:85:d7:39:7d:f5:b3:f8:4c:3a:6d:8c:
         33:97:f9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:45:17 2025 by rpki-client