Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
File:                     X8Poba5DUxWI6wFdUB4xcSBfCFE.mft (raw, json)
Hash identifier:          O5HW+qKJ/rekIHcavHGm8D8dUNk3+23bquIZFeMN//Y=
Subject key identifier:   57:94:2B:9A:3C:CA:38:8D:5A:A9:B4:44:CA:65:74:91:99:6D:E0:44
Authority key identifier: 5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51
Certificate issuer:       /CN=A9190491/serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851
Certificate serial:       0747
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
Manifest number:          073C
Signing time:             Thu 24 Jul 2025 21:57:26 +0000
Manifest this update:     Thu 24 Jul 2025 21:57:26 +0000
Manifest next update:     Thu 31 Jul 2025 21:57:26 +0000
Files and hashes:         1: X8Poba5DUxWI6wFdUB4xcSBfCFE.crl (hash: LsJAiGHk1vGeSahOO6ogt0ZHgz8a4AuzL5xeAyRKHso=)
                          2: FA93793637C011EB97405947C4F9AE02.roa (hash: mkvl6eYOBUcYWRwYiBwVS0K1wVeK5CC5TdYufIA/AfQ=)
                          3: 59C3EE36683611EBAF38B01FC4F9AE02.roa (hash: 1+jxf6thWYfAYYLkfgmBPO3HMtuISkV6ufCHk+IUOxQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl
                          rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 21:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1863 (0x747)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190491, serialNumber=5FC3E86DAE43531588EB015D501E3171205F0851
        Validity
            Not Before: Jul 24 21:57:26 2025 GMT
            Not After : Jul 31 21:57:26 2025 GMT
        Subject: CN=6882ac46-2b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bd:7f:58:e2:9e:19:bf:3c:cf:96:a5:d0:18:
                    3d:11:23:2e:8b:9f:a9:0d:e5:7d:43:34:88:96:11:
                    a7:3b:f2:aa:4a:b3:4d:36:ed:a5:f1:24:cc:74:d9:
                    20:22:42:8e:1b:65:d0:b0:7f:ff:a0:5f:f0:c2:ff:
                    02:84:aa:9e:79:8e:4d:23:b3:39:95:a8:6e:c0:8b:
                    d0:c7:2f:cc:3a:83:89:da:c0:6f:8e:c8:e3:85:fb:
                    8d:76:f9:d0:d6:18:88:61:5e:10:06:ab:85:34:50:
                    1d:34:23:0c:ce:bb:a0:2b:c5:46:ac:2a:3f:e4:50:
                    ee:bb:6c:35:26:c2:f1:58:27:ab:c2:b5:04:0f:74:
                    a1:6f:2d:97:ff:ea:27:a7:fe:b9:ca:42:f6:86:27:
                    4f:9d:b5:03:1f:f1:a4:1d:bd:50:70:71:1c:1c:26:
                    5b:16:91:17:60:f5:b9:b0:65:08:50:9c:d9:94:fa:
                    89:b9:cf:1f:b1:f2:df:7f:fc:ba:f7:24:77:eb:9a:
                    2f:41:73:c0:63:f0:67:31:04:87:67:b3:52:90:7e:
                    7d:9d:8a:98:43:f1:6f:35:5f:28:c2:c2:5c:c1:4d:
                    b0:5f:a4:6b:b8:a0:84:4e:18:e6:a0:fc:60:22:a2:
                    9a:b2:22:cf:02:ea:90:6f:24:ed:50:61:9f:0d:df:
                    07:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:94:2B:9A:3C:CA:38:8D:5A:A9:B4:44:CA:65:74:91:99:6D:E0:44
            X509v3 Authority Key Identifier:
                keyid:5F:C3:E8:6D:AE:43:53:15:88:EB:01:5D:50:1E:31:71:20:5F:08:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8Poba5DUxWI6wFdUB4xcSBfCFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190491/929BDBC237BE11EB83AE1844C4F9AE02/X8Poba5DUxWI6wFdUB4xcSBfCFE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:d2:a6:00:5d:12:cc:14:cd:49:46:f4:11:34:b7:da:67:7a:
         9e:38:b0:2e:f3:a9:92:08:eb:fb:c6:f6:74:42:e9:6b:2f:78:
         ca:cc:6f:ae:2f:e0:a0:01:75:23:22:dc:b6:ba:8f:84:cf:6f:
         ab:0a:1b:ff:35:dc:c2:8a:46:a3:c5:4f:ee:d0:f7:1b:b9:1c:
         be:f5:12:e1:82:af:d6:91:a5:e0:23:53:9b:58:46:be:21:e8:
         ed:68:14:e2:d3:dd:de:91:bb:ab:97:5b:c1:2f:c8:32:9c:67:
         98:90:98:1c:58:c4:86:84:f6:ee:d3:ce:4e:43:85:9e:fd:26:
         4f:8d:c9:03:7b:e7:cc:bf:f9:7a:ef:07:60:01:d7:05:a9:cd:
         2c:cb:dd:c4:b7:b5:91:82:e5:61:23:9c:cd:10:d9:be:10:ed:
         a7:30:e4:92:04:1f:26:3f:88:58:a4:bd:d3:9f:92:ad:cf:0a:
         26:60:b2:d3:bc:c7:a3:19:17:69:c3:2c:7e:c6:66:5d:69:70:
         ee:d3:2f:29:a8:56:93:f8:aa:e1:13:23:65:8d:7c:16:a2:77:
         f1:d2:a9:1a:a8:58:ab:32:06:60:e4:0a:ea:68:68:b0:0e:9d:
         e9:95:c0:25:03:f2:9e:22:73:fc:90:b6:0b:20:24:e6:ca:58:
         a8:74:e5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:59:04 2025 by rpki-client