Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
File:                     c0H2TqslF-qZON3k-wqBTly7fnc.mft (raw, json)
Hash identifier:          IP4btp6uXlschWqW7FPGLY5CJbEcq/GKk/dyCEXer4Y=
Subject key identifier:   C0:21:A8:A5:67:BA:B1:D1:C3:85:00:6C:F3:2C:B4:92:1D:4A:7F:3B
Authority key identifier: 73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
Certificate issuer:       /CN=A912184B/serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Certificate serial:       1E63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
Manifest number:          1E49
Signing time:             Wed 22 Oct 2025 16:18:18 +0000
Manifest this update:     Wed 22 Oct 2025 16:18:18 +0000
Manifest next update:     Wed 29 Oct 2025 16:18:18 +0000
Files and hashes:         1: c0H2TqslF-qZON3k-wqBTly7fnc.crl (hash: Nnw351A9H2qL3cnc/4z9HiqLCsQwxvItbulhom35mxY=)
                          2: 22DC230C299311F0B32D9F82C4F9AE02.roa (hash: KiZSjsjHSWTeGrVHyQ1fRZOy4p6+ElPmGCwKFduLkFA=)
                          3: 8144C55412E611E98A4A6A35C4F9AE02.roa (hash: HcaovZ/E4LVI99vShwEF3DVWudHVhbjCDuMnNSp75nw=)
                          4: 51D65180A2DC11E9B63C6C2BC4F9AE02.roa (hash: lziphfAQalP1g1qd41FgsGMuQq4aElhXOf7iBsezcaw=)
                          5: 234A6628299311F0B32D9F82C4F9AE02.roa (hash: D4LXE7yxCKGNNUhuHC7/Q5q8EQPtCwzUchpxHBJ/u58=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
                          rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Oct 2025 16:18:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7779 (0x1e63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912184B, serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
        Validity
            Not Before: Oct 22 16:18:18 2025 GMT
            Not After : Oct 29 16:18:18 2025 GMT
        Subject: CN=68f903ca-0e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4b:82:62:93:59:3e:3d:9c:ee:3c:55:b2:bc:
                    d7:e4:e4:5e:08:cd:1e:b1:65:8f:22:e4:6c:64:1d:
                    88:39:9c:d8:81:53:8a:04:5f:3e:b1:03:95:e3:f8:
                    1b:9b:32:c6:85:8a:c8:a2:fc:3c:61:fa:93:f9:13:
                    3f:92:f4:87:8c:41:ae:55:ae:2f:a3:39:de:36:ff:
                    ef:80:7f:7a:62:24:2b:2b:b1:1d:8a:bc:fe:a4:82:
                    9a:82:ac:1a:f3:8a:2f:9b:c4:1d:9a:fe:9d:bc:2e:
                    79:cb:34:1e:73:8c:11:59:77:59:8d:e8:64:f9:70:
                    43:fb:06:dc:64:6d:54:21:60:b0:33:be:9a:60:63:
                    1b:e8:25:8d:02:e2:3d:4f:15:4b:11:09:3c:97:04:
                    b7:27:2c:7a:9d:15:ff:a6:62:78:ea:b7:21:13:5d:
                    01:03:d8:91:3e:2d:b3:24:28:67:38:b5:64:62:6d:
                    23:1c:2c:b0:ac:22:b7:66:38:b0:0b:51:53:e7:1c:
                    0d:87:5f:d5:e1:3f:10:34:3e:97:8c:5e:98:05:dd:
                    3e:54:be:6d:94:af:ca:7b:aa:02:a8:b2:4d:e4:c0:
                    79:d5:06:30:23:6a:12:09:a9:ef:9e:77:07:82:ed:
                    9e:5c:b8:0e:e7:05:0e:c2:bc:f2:30:37:21:c3:2a:
                    ee:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:21:A8:A5:67:BA:B1:D1:C3:85:00:6C:F3:2C:B4:92:1D:4A:7F:3B
            X509v3 Authority Key Identifier:
                keyid:73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:02:8b:34:9c:a9:58:ad:74:07:b3:d6:7d:04:6f:a0:f7:f3:
         8c:6f:0c:de:27:2c:6d:29:38:e4:d1:dc:72:a4:62:fe:f1:64:
         df:43:f3:52:28:0b:3a:21:3a:d4:85:97:3d:28:b4:79:88:0a:
         2e:ee:61:e9:96:d1:86:d9:28:73:5f:22:ed:2d:cb:2d:db:fa:
         bb:8b:25:51:8c:2b:a7:95:e0:e8:bc:8a:56:9f:38:59:41:2d:
         eb:1d:3b:0e:7e:6e:07:4f:d4:24:2b:23:f6:78:cb:15:af:14:
         a0:d5:c7:5f:e2:92:f1:17:90:cb:f2:d9:b1:55:32:2a:6f:72:
         fb:65:f4:9c:f0:7b:17:63:f1:9f:d9:2d:3f:8e:7d:7f:ff:4b:
         33:12:33:05:2d:24:ae:7a:84:dd:4f:ce:8c:3f:b1:d7:da:9f:
         21:68:0e:c6:53:e6:57:7b:23:f6:fa:1d:4a:26:e9:da:2c:a4:
         c6:ce:36:ec:e6:e3:06:9b:27:61:d1:88:cd:be:9a:79:5e:16:
         76:85:29:a0:ba:96:62:f4:ed:ea:3f:87:23:2e:ae:12:67:8a:
         7b:6b:9e:a8:0b:b0:7a:bb:45:c6:20:1f:28:a6:06:e9:fa:52:
         28:f0:c1:fe:f0:d3:95:9b:fe:bb:7c:b6:ca:a3:b6:da:ba:56:
         c7:43:dd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 09:53:34 2025 by rpki-client