Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
File:                     o5TKy9vYxM31SvFn4m1WJKUk4u4.mft (raw, json)
Hash identifier:          ZLYdMM+TZxe+uRFySabMgwhb7GLiMtkS/fATZiWO06g=
Subject key identifier:   96:DF:DE:F0:CC:80:B5:B4:EE:CC:3A:E2:9B:DD:3A:9A:CD:65:30:8E
Authority key identifier: A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE
Certificate issuer:       /CN=A918D7A4/serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE
Certificate serial:       DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
Manifest number:          DB
Signing time:             Mon 21 Jul 2025 05:40:50 +0000
Manifest this update:     Mon 21 Jul 2025 05:40:50 +0000
Manifest next update:     Mon 28 Jul 2025 05:40:50 +0000
Files and hashes:         1: o5TKy9vYxM31SvFn4m1WJKUk4u4.crl (hash: ybt/5oybHYd6m5ycnWfIa1Zr8lm+jo9KWTnApqyuCS8=)
                          2: 8D61B05219AE11EFB41EAC2CC4F9AE02.roa (hash: Xw2sISfrALvudWqULocxNEzVc0wvy3kE1iz0dcAI+cw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl
                          rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 05:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D7A4, serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE
        Validity
            Not Before: Jul 21 05:40:50 2025 GMT
            Not After : Jul 28 05:40:50 2025 GMT
        Subject: CN=687dd2e2-2601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:14:1e:a6:bb:34:b0:db:d4:80:34:34:33:7c:
                    bf:4f:2e:6f:1a:18:ce:94:dc:4c:0b:18:a4:02:f8:
                    6c:60:72:e3:58:13:6f:68:96:72:9a:69:dd:19:e2:
                    59:62:be:89:88:ac:6d:37:44:11:4b:de:16:89:57:
                    42:a3:e4:3a:1b:dd:ef:53:21:7c:e5:97:8d:33:13:
                    e1:b6:65:69:c0:7c:9c:10:b5:5f:0f:30:8a:cc:cf:
                    de:79:34:75:20:61:1e:14:f9:30:b4:ad:bf:32:e1:
                    63:2b:03:dd:f7:8d:b2:27:47:9c:b9:f8:f9:48:9f:
                    79:8f:c2:bf:63:f0:6d:a2:d4:87:a3:b1:f7:81:87:
                    e2:96:fc:24:31:31:9b:6f:70:c4:83:31:58:7d:d0:
                    d6:67:47:6f:6f:42:ad:15:f5:cd:4d:6b:48:02:44:
                    b6:4e:fe:c0:c6:38:d6:82:82:f5:0f:e2:fa:00:db:
                    9f:81:c0:4d:d3:d8:58:c8:64:a8:0f:a4:5e:ff:38:
                    35:27:a4:4c:20:a8:43:d6:25:30:ca:21:21:a7:17:
                    22:1d:c0:c6:74:bf:fd:fc:7e:d3:21:5a:c8:43:ae:
                    66:3c:70:1b:14:d9:9d:13:90:7d:e8:0f:b8:b9:d6:
                    65:b2:f8:69:36:07:e0:15:49:d7:6b:a5:d6:1f:2f:
                    95:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DF:DE:F0:CC:80:B5:B4:EE:CC:3A:E2:9B:DD:3A:9A:CD:65:30:8E
            X509v3 Authority Key Identifier:
                keyid:A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:54:d1:3c:30:3f:d7:52:3b:45:de:27:fb:23:dd:a6:33:5b:
         c7:d4:73:2f:63:81:55:94:e0:11:e8:97:76:da:5e:0b:73:00:
         59:56:7e:d1:8e:85:f1:58:73:09:d7:50:55:e2:df:be:8e:9d:
         23:60:46:89:77:c8:86:f4:45:e8:2b:2b:04:b8:31:dc:a7:bf:
         26:d3:c7:3e:56:59:a7:44:1f:04:54:34:25:32:d2:61:4a:68:
         04:69:2e:7f:65:91:3a:06:d6:35:81:00:89:e2:89:4e:b4:de:
         89:a0:95:8d:0c:70:be:a0:bc:e4:52:52:a0:01:40:a2:3a:0b:
         bd:00:a9:c1:63:cb:37:22:aa:f6:61:0f:5d:86:89:4a:83:0a:
         c5:d4:3e:14:b8:1d:3e:a3:40:f4:e1:00:b6:2c:5b:dc:a0:0d:
         db:73:7b:8f:40:29:1a:78:a4:2a:ec:13:74:87:3a:1a:0b:bc:
         92:d3:6f:55:69:c5:d8:1f:82:af:07:2b:1d:a8:d6:c4:d7:2d:
         7a:9f:66:39:9f:3c:ed:6e:88:5e:a4:03:5f:61:29:79:be:9e:
         79:3f:52:06:83:c6:de:ab:ba:ce:dc:bd:6e:91:5f:6e:7a:3d:
         6c:a1:80:f1:9e:05:1f:3c:bc:4a:5e:01:17:ed:cc:03:e4:39:
         f4:6a:6f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:46:37 2025 by rpki-client