Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft
File:                     _pB9p6f5k3mm_UY90X0ltNUB3-g.mft (raw, json)
Hash identifier:          Bmm9cmUcUNY1MU2rRlv0GFzyfW0+L5+sQ13qnaZwRus=
Subject key identifier:   34:D5:49:B9:48:75:B8:66:2C:E3:15:30:9A:F8:48:64:23:A2:A8:F9
Authority key identifier: FE:90:7D:A7:A7:F9:93:79:A6:FD:46:3D:D1:7D:25:B4:D5:01:DF:E8
Certificate issuer:       /CN=A918D7D0/serialNumber=FE907DA7A7F99379A6FD463DD17D25B4D501DFE8
Certificate serial:       0823
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft
Manifest number:          147F
Signing time:             Sun 20 Jul 2025 18:20:30 +0000
Manifest this update:     Sun 20 Jul 2025 18:20:30 +0000
Manifest next update:     Sun 27 Jul 2025 18:20:30 +0000
Files and hashes:         1: _pB9p6f5k3mm_UY90X0ltNUB3-g.crl (hash: +KqaXrKDW6GnEa/bJfRlBm6PcQMHx/6EsGfAkxHGNso=)
                          2: 57B4ADB0066A11ECA8CBA567C4F9AE02.roa (hash: CrwjFPg8gDUHmyLmt3AGGq8klRcYSMyETp380bqgF2I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.crl
                          rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 18:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2083 (0x823)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D7D0, serialNumber=FE907DA7A7F99379A6FD463DD17D25B4D501DFE8
        Validity
            Not Before: Jul 20 18:20:30 2025 GMT
            Not After : Jul 27 18:20:30 2025 GMT
        Subject: CN=687d336e-2c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cc:a1:0f:84:6d:56:74:9e:88:75:93:18:26:
                    8b:8e:2e:35:ae:d1:a3:b9:43:d6:20:eb:e3:2a:42:
                    43:c4:45:41:f9:46:eb:84:6f:5f:84:69:3e:69:28:
                    75:0c:3b:48:46:9c:3d:80:02:40:10:dc:1e:fd:d3:
                    23:ea:9d:af:e8:bb:a2:97:9f:86:4c:2e:c5:23:67:
                    bd:50:bb:ca:2e:89:8f:1e:6a:be:a6:98:b1:b3:19:
                    e6:39:e7:81:36:34:e1:f8:39:10:ff:82:a2:c8:df:
                    d7:56:d7:54:72:f1:19:cd:fc:3a:0a:0b:78:ae:3a:
                    07:69:ca:10:cf:0b:c3:33:ca:5a:40:3a:8e:0a:5b:
                    8c:c7:c4:f4:79:5a:f9:2a:fc:48:83:5e:ab:77:1c:
                    a3:de:31:23:a8:b3:9f:e3:eb:09:2e:13:f6:0a:42:
                    44:6e:81:79:2f:e0:26:5e:a0:27:2f:4c:2f:50:8f:
                    b3:15:52:41:48:5d:2a:dd:30:30:53:53:2c:f9:71:
                    c4:48:8f:91:54:82:6b:8a:87:2d:80:00:70:25:8a:
                    02:9c:f1:b1:5e:65:4d:25:a8:86:f6:85:84:8b:e7:
                    19:94:ed:c3:93:ce:1e:b6:63:8f:4e:6a:59:57:e0:
                    9d:39:3e:bc:30:b4:61:ee:e8:83:cc:1d:82:f8:a5:
                    ea:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D5:49:B9:48:75:B8:66:2C:E3:15:30:9A:F8:48:64:23:A2:A8:F9
            X509v3 Authority Key Identifier:
                keyid:FE:90:7D:A7:A7:F9:93:79:A6:FD:46:3D:D1:7D:25:B4:D5:01:DF:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:0e:72:47:5c:09:f2:c5:2f:29:0a:e0:9b:c9:22:12:cf:1a:
         c1:9d:10:ff:c5:46:aa:8a:13:45:fa:d0:cf:73:df:6f:06:45:
         2d:bc:6e:37:58:47:3f:98:df:d9:a9:df:f3:74:33:fe:11:5a:
         e4:37:3a:64:de:62:f6:2a:ff:05:f2:2b:37:51:26:bf:18:ad:
         97:6d:d3:1b:cd:52:cd:7f:b4:8e:53:ac:24:81:9b:90:dd:08:
         1a:01:2e:a2:ad:e5:bd:73:27:28:86:c2:c1:29:93:e3:5b:87:
         9a:3d:fd:3a:8c:f2:16:80:b5:16:2f:0f:05:5c:33:df:af:3a:
         94:b7:54:dc:f9:bb:3d:ff:af:06:b7:44:c8:fa:9d:fa:45:5b:
         77:a8:75:38:5b:24:d6:7f:90:81:f9:52:33:a3:13:07:98:38:
         f4:58:e4:a3:04:59:6d:51:86:7f:bb:e6:94:a0:99:5a:a8:4a:
         3f:99:01:13:ec:52:3f:cc:79:8e:94:66:ba:53:49:09:83:f1:
         f3:ed:67:16:38:b3:da:97:a4:b7:23:4c:7b:f9:df:cc:7d:82:
         5d:46:d4:06:59:50:60:3b:1e:61:cb:df:cf:54:23:c4:5f:e9:
         b9:61:71:dc:84:36:af:72:65:14:55:2f:6f:60:54:0e:37:b9:
         ef:5d:e6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:07:40 2025 by rpki-client