Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
File:                     2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft (raw, json)
Hash identifier:          mUzHMDVOsiouBdWoAaj1bj8OH9FgLmgsU7uK/tX7xwQ=
Subject key identifier:   F5:CD:83:72:34:27:28:A6:BA:BB:DF:2E:61:E1:16:68:5D:EA:AE:AE
Authority key identifier: DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40
Certificate issuer:       /CN=A9190753/serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
Certificate serial:       015A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
Manifest number:          0157
Signing time:             Mon 21 Jul 2025 04:11:33 +0000
Manifest this update:     Mon 21 Jul 2025 04:11:33 +0000
Manifest next update:     Mon 28 Jul 2025 04:11:33 +0000
Files and hashes:         1: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl (hash: dsmdX49SizeNFjQq+uzjw+iCkhYiJonL3PlcK0HH+J4=)
                          2: DAB789C65B6D11EEA95BF025C4F9AE02.roa (hash: hNwMkMdjh5wXeGCbclXCuLBfGgwTuq5lN97tlwCY1b4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl
                          rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 04:11:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190753, serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
        Validity
            Not Before: Jul 21 04:11:33 2025 GMT
            Not After : Jul 28 04:11:33 2025 GMT
        Subject: CN=687dbdf5-4447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:59:7c:f1:a6:9d:5b:70:2b:b4:c0:d9:a7:af:
                    2b:49:72:b3:f7:db:f7:7b:96:10:37:de:07:81:5b:
                    0f:7f:8d:50:b3:98:53:e6:fc:ea:e1:84:46:71:43:
                    fc:ac:3f:f9:7e:7d:d9:a9:58:b3:fe:e0:b7:d1:ff:
                    f2:f4:2e:30:ec:1f:5c:ce:69:3c:98:c3:9f:e4:86:
                    0a:a8:ba:44:b5:ea:81:1f:ac:e5:82:5a:f2:9b:a2:
                    f8:9b:02:6e:0d:1c:43:a0:2e:72:45:63:1f:55:1d:
                    9a:6a:74:9d:8e:cf:11:c9:d7:65:18:0b:ca:a7:b5:
                    8e:ab:4e:e5:89:8d:26:9a:05:34:9d:ef:22:68:b0:
                    ad:31:32:d7:d7:c5:93:4b:08:8e:70:fd:9c:1b:d1:
                    82:bf:58:9a:86:74:86:f8:23:57:88:7f:b1:20:56:
                    f3:8c:7b:e2:22:44:90:e0:b1:8d:4d:e7:bb:db:d0:
                    b0:3c:11:cf:ab:40:ac:30:2c:c7:2c:62:36:37:03:
                    db:89:df:6c:57:8e:b7:b9:e4:2c:6d:c2:e5:fc:57:
                    02:8a:26:fd:3d:fe:f7:27:a1:ef:4d:e0:e8:4f:ef:
                    a0:fa:38:ea:8e:9c:c6:ef:49:58:9e:e8:45:aa:4d:
                    78:c3:35:d9:dd:49:4b:bc:2f:29:2b:81:1c:f1:2d:
                    3d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CD:83:72:34:27:28:A6:BA:BB:DF:2E:61:E1:16:68:5D:EA:AE:AE
            X509v3 Authority Key Identifier:
                keyid:DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:6f:4d:97:79:55:f4:53:9a:ca:2f:b3:2c:40:d5:e2:04:4d:
         f9:c6:c7:bd:74:3e:ca:44:4b:dc:4e:82:14:8d:3e:28:f2:d3:
         cd:c9:68:b7:99:36:07:f7:f9:e0:70:4f:b2:e7:18:6e:b7:3a:
         d8:5b:43:93:d0:6d:25:00:2c:05:5c:f8:22:b1:62:78:04:8c:
         73:6c:31:3d:e9:ac:9c:99:0e:f6:3b:b4:0b:70:d7:d2:41:c0:
         f4:bb:b1:66:c4:3b:11:25:8d:ac:c2:0f:c7:3b:3d:fd:b2:17:
         4a:f0:94:92:04:0e:ff:c0:3f:5b:ca:d4:74:67:f6:c0:24:d9:
         c6:6d:17:cc:86:06:79:ed:65:23:25:04:82:1f:21:e8:35:87:
         ef:a4:87:ce:a5:89:51:52:f3:6b:dd:44:78:94:5a:63:c8:a4:
         1c:37:17:4c:b6:4b:29:84:e4:67:4e:2b:51:75:e7:55:e9:e0:
         f1:af:45:72:9a:7a:fe:d2:63:aa:7d:2f:b1:91:3e:90:d3:1f:
         a6:a2:a3:4a:17:42:09:dd:f2:0b:82:d7:7c:e4:53:08:fb:19:
         31:84:81:7a:88:1a:e9:e3:54:2b:fc:85:70:9a:72:30:66:48:
         d1:0e:1d:4a:c6:f5:63:9e:5d:05:ae:67:1e:c7:47:7b:40:f5:
         c0:5e:2d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:06:02 2025 by rpki-client