Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
File:                     tJhXdJtDHfMjL417C4OVpy_9GEk.mft (raw, json)
Hash identifier:          UbpWEbV2Q7CaiFFiQ3D6bFJlXNVyZMyLKDr1+Mq3ONA=
Subject key identifier:   F8:EF:AF:A8:CC:1A:63:07:E5:C4:8B:D7:C1:FE:82:BB:F5:79:82:0B
Authority key identifier: B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49
Certificate issuer:       /CN=A918E293/serialNumber=B49857749B431DF3232F8D7B0B8395A72FFD1849
Certificate serial:       0186
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
Manifest number:          0183
Signing time:             Wed 23 Jul 2025 03:50:08 +0000
Manifest this update:     Wed 23 Jul 2025 03:50:08 +0000
Manifest next update:     Wed 30 Jul 2025 03:50:08 +0000
Files and hashes:         1: tJhXdJtDHfMjL417C4OVpy_9GEk.crl (hash: yfN1eMZQH/y/w/o9rJA4Q0y3rvLOYWJAd3xYoJw55/4=)
                          2: D865F69A233111EE813C5D26C4F9AE02.roa (hash: Lb0hJu9MZe6wLWtHrKtqcwpP08rypBWIlAZybLR4Lp0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.crl
                          rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 03:50:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E293, serialNumber=B49857749B431DF3232F8D7B0B8395A72FFD1849
        Validity
            Not Before: Jul 23 03:50:08 2025 GMT
            Not After : Jul 30 03:50:08 2025 GMT
        Subject: CN=68805bf0-1937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ae:a7:c1:df:41:a7:b2:f3:d3:be:90:53:4e:
                    d7:f7:2d:c4:a8:f3:48:26:95:05:04:6a:ec:41:0a:
                    2b:95:d8:16:68:33:1f:ec:c4:55:08:e4:aa:e1:37:
                    0e:84:b1:6e:fb:04:3b:23:37:bf:b1:6b:f4:47:bc:
                    99:2d:c8:90:5a:7d:29:6e:6a:06:ea:ca:85:6c:d7:
                    24:bc:0c:9a:8a:31:02:50:5a:d5:13:6c:e1:29:af:
                    f9:9b:9b:b0:67:2f:da:de:59:77:72:bf:85:8c:33:
                    6b:93:1f:b8:bd:52:90:bd:f3:1d:e9:72:2c:a7:e4:
                    08:60:d9:86:d7:0b:27:bc:5e:63:82:a7:2e:19:63:
                    8f:56:87:71:9d:32:49:c3:13:02:58:4d:f2:13:7a:
                    9b:31:50:71:b3:e5:51:e4:55:38:11:cc:e1:95:e7:
                    c2:d6:b7:4c:6e:4d:88:77:41:4d:41:1f:e4:d2:8a:
                    b5:80:e4:60:d4:09:3d:d5:82:cb:31:8f:71:7d:5d:
                    48:5d:fe:e8:b7:5c:48:61:f0:3e:9e:c6:8b:94:b3:
                    d2:2f:38:4f:c2:fe:f0:4a:ca:16:0e:94:dc:b8:e5:
                    b6:48:05:42:4c:aa:c1:3e:a9:d9:85:1d:cf:15:f4:
                    f1:f4:b2:57:21:c0:1a:fa:b5:06:fd:07:c2:53:9f:
                    41:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EF:AF:A8:CC:1A:63:07:E5:C4:8B:D7:C1:FE:82:BB:F5:79:82:0B
            X509v3 Authority Key Identifier:
                keyid:B4:98:57:74:9B:43:1D:F3:23:2F:8D:7B:0B:83:95:A7:2F:FD:18:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJhXdJtDHfMjL417C4OVpy_9GEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E293/2841D92E17DC11EE88804A71C4F9AE02/tJhXdJtDHfMjL417C4OVpy_9GEk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:91:08:db:f9:ff:6d:fa:0f:69:ef:85:38:12:06:2c:82:cc:
         f6:c2:fa:da:6a:6f:cc:8c:c1:a2:00:a3:90:ab:34:ea:ec:78:
         17:3c:72:9f:85:bc:3c:69:fd:37:6f:02:a6:bd:52:81:9a:97:
         51:50:f7:44:54:9c:f1:be:3a:4a:5a:61:be:df:2c:33:93:46:
         99:77:89:9a:c4:a2:d3:3b:0b:a5:97:6d:03:42:74:9e:13:18:
         bc:f0:7f:0c:8c:ea:56:c5:34:ee:5e:47:b6:a4:3a:89:6e:de:
         d5:a2:89:1f:92:36:25:32:5a:1a:a7:f7:d3:ac:a1:30:ca:8a:
         8c:ec:cd:7b:ca:2c:0e:5f:a2:74:58:3f:79:59:be:12:b9:c8:
         91:48:b1:dc:71:ab:6d:db:78:50:03:69:df:fc:ca:0d:8a:60:
         3a:7c:a7:0e:d8:30:39:da:70:1b:17:70:ff:8c:63:17:ee:d3:
         9b:6b:46:20:c0:11:c1:c1:50:43:57:66:77:0e:4d:cd:bb:35:
         03:14:60:f1:f8:82:10:e5:a7:85:57:bd:6b:63:ed:c6:f5:50:
         91:df:bb:41:90:c9:9d:fe:ac:9d:08:b2:66:78:8e:c6:d4:21:
         9c:e4:d1:e1:08:d2:60:a9:15:d7:88:b1:34:ff:71:31:d3:d4:
         46:35:b9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 05:04:58 2025 by rpki-client