Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
File:                     o5TKy9vYxM31SvFn4m1WJKUk4u4.mft (raw, json)
Hash identifier:          1GI+r/aVmZpcBWwEY+Un0sTGULcxaYC6W/h+08UTFaQ=
Subject key identifier:   8B:50:07:2D:20:15:D2:85:FD:81:C5:0A:F1:5A:71:1F:0E:47:E1:A0
Authority key identifier: A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE
Certificate issuer:       /CN=A918D7A4/serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE
Certificate serial:       DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
Manifest number:          DC
Signing time:             Wed 23 Jul 2025 05:49:23 +0000
Manifest this update:     Wed 23 Jul 2025 05:49:22 +0000
Manifest next update:     Wed 30 Jul 2025 05:49:22 +0000
Files and hashes:         1: o5TKy9vYxM31SvFn4m1WJKUk4u4.crl (hash: qmgI2K6R0zzdzsDQJn9VI+v/epYXLrMFHfSy8JqHywo=)
                          2: 8D61B05219AE11EFB41EAC2CC4F9AE02.roa (hash: Xw2sISfrALvudWqULocxNEzVc0wvy3kE1iz0dcAI+cw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl
                          rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 05:49:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D7A4, serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE
        Validity
            Not Before: Jul 23 05:49:22 2025 GMT
            Not After : Jul 30 05:49:22 2025 GMT
        Subject: CN=688077e2-559b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ee:94:a4:4c:c9:a5:c9:e3:85:fe:03:87:8c:
                    26:49:9e:e1:ff:ee:d9:d0:e6:a7:26:98:69:d5:95:
                    64:22:3b:a0:48:ae:66:d3:fc:ad:4f:7d:a6:c0:b7:
                    94:d4:de:2d:dd:cb:d3:f2:c5:f8:ec:c6:5e:5b:49:
                    47:c4:f7:ed:df:cd:3e:a4:72:b4:5c:c8:e2:9d:a7:
                    91:5c:d8:3b:f3:9b:53:44:27:d9:bc:44:a6:2b:e2:
                    7b:65:88:db:49:82:9f:f6:ef:13:af:78:bd:5b:8d:
                    24:f2:a4:db:12:95:2d:87:cd:ab:02:c1:b9:46:46:
                    36:e8:3f:60:5a:99:9e:d0:03:5a:95:0e:84:99:1b:
                    99:33:41:4d:3d:08:b7:b0:b9:63:43:ce:06:3c:78:
                    37:fe:1b:5e:49:cb:5a:0b:30:f4:a3:e9:e6:93:a5:
                    05:f7:a2:c2:5e:98:79:da:76:c3:cb:0a:16:fc:c6:
                    12:cc:87:77:1e:10:79:36:31:95:cc:d7:cb:a9:96:
                    93:8d:33:6d:8e:b6:29:d3:0c:0e:31:5d:17:da:27:
                    26:99:70:52:57:e6:66:87:7b:69:b1:e3:53:0f:23:
                    d0:bd:e7:fd:94:52:44:56:ef:af:d9:8e:a0:de:f0:
                    84:a1:92:8c:84:43:2f:4b:c5:f2:df:bd:af:42:ca:
                    f9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:50:07:2D:20:15:D2:85:FD:81:C5:0A:F1:5A:71:1F:0E:47:E1:A0
            X509v3 Authority Key Identifier:
                keyid:A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:fd:89:ad:03:f4:40:45:1c:d6:eb:62:5d:61:82:f9:64:94:
         00:61:69:1a:e1:d3:3e:ae:84:73:87:48:98:1d:5f:31:cb:2b:
         b5:6a:40:2d:c8:42:e7:0d:b4:5c:38:ae:86:eb:5a:6c:49:f9:
         a0:14:57:8b:c8:64:da:aa:04:a0:2f:23:bd:ad:cf:e8:c1:6b:
         c3:46:55:23:c4:49:ce:5a:63:70:4c:f9:5a:f3:42:db:73:a6:
         69:80:c3:4b:17:79:65:7a:bf:b0:68:b3:a6:b8:03:fd:47:25:
         05:f5:ad:39:b7:cf:68:f9:7e:6b:f3:d2:d9:45:21:d2:68:86:
         66:90:1b:a7:e6:4c:0d:07:60:fc:4c:d5:42:f4:12:4a:ae:aa:
         c4:cf:42:98:4f:78:07:48:93:6e:f5:4d:52:c1:50:73:60:15:
         58:bf:be:fe:f1:62:7e:88:37:9a:38:f3:e1:d1:bd:d9:d5:49:
         38:12:e4:bc:0c:99:e3:aa:a6:4d:55:7f:ed:0e:1f:84:79:b3:
         a7:8e:83:5b:12:06:a5:7c:18:e7:6a:88:c3:17:a2:12:ff:27:
         9e:e5:72:b8:c1:63:50:e0:05:2e:aa:86:af:1d:53:8d:32:62:
         8c:a5:e4:3a:dd:b0:03:04:69:fa:90:8f:ae:0e:a3:e8:e2:f4:
         be:df:db:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:16:04 2025 by rpki-client