Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
File:                     _qS5bzmD92nHM5dFbBK5D2QkbHw.mft (raw, json)
Hash identifier:          84i36pxZxLJo1J63h41PsJ/EtZuzf0fL/xkXeDnQlBY=
Subject key identifier:   32:15:99:41:E2:C7:48:96:9E:44:3D:59:CB:6C:2F:6F:A0:9D:D6:80
Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C
Certificate issuer:       /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
Certificate serial:       188A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
Manifest number:          1873
Signing time:             Sun 24 Aug 2025 16:28:57 +0000
Manifest this update:     Sun 24 Aug 2025 16:28:56 +0000
Manifest next update:     Sun 31 Aug 2025 16:28:56 +0000
Files and hashes:         1: _qS5bzmD92nHM5dFbBK5D2QkbHw.crl (hash: TsfrBOS1gy43QzL7L8fpBvcOFED6DFfGSgJJ76Cu72c=)
                          2: 8C3BBD78F0D611EDAF996E15C4F9AE02.roa (hash: N7dx64GJQaTD+hfotgNWy8WEHDuKcv63Y/iKVEUUUcc=)
                          3: C6454260AA9A11E7B4776E52C4F9AE02.roa (hash: 0pdtzVqkZfrRuKXWFlClUIrZtwjYq09u9Tu2fAJzA2k=)
                          4: 7F77220A143811EE97A64D19C4F9AE02.roa (hash: ifAfuqdkBihiiYwd3cqT6s5KTTI/lvGZWL7UrWL4Qzs=)
                          5: 5A8744D8143411EEAB1A5D73C4F9AE02.roa (hash: x8Y3lIEpnx3SAsHPEwwS/VLgFTVHt3ABZ23zAnhnfc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl
                          rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Aug 2025 16:28:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6282 (0x188a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D36A, serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
        Validity
            Not Before: Aug 24 16:28:56 2025 GMT
            Not After : Aug 31 16:28:56 2025 GMT
        Subject: CN=68ab3dc8-cfbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:43:50:2c:5f:e6:02:35:fe:db:b8:33:9b:c7:
                    ed:03:3e:fc:3f:a5:15:03:b3:62:21:b3:2f:6a:77:
                    0f:e6:c6:73:2d:1c:c3:cd:b5:0d:bc:63:98:cc:e8:
                    7c:91:bf:fa:f3:c3:98:59:1b:13:68:6c:95:53:71:
                    04:de:27:76:78:4e:3d:d7:22:34:d6:d7:ed:61:3c:
                    54:14:59:71:17:89:ae:94:56:64:47:31:d9:e3:0b:
                    73:2c:e0:2a:ae:19:2d:59:46:9f:ae:8d:af:c3:19:
                    b5:f2:bc:f3:99:6a:c4:67:44:64:0c:4f:0a:33:a5:
                    72:95:29:78:72:29:38:c8:e1:79:37:88:5d:3f:1e:
                    1f:98:4b:38:ff:fb:2b:cc:cc:11:c3:6c:4b:80:2e:
                    98:56:47:ca:b2:1c:9f:55:20:71:c0:af:00:b6:32:
                    e7:dd:32:e2:04:92:eb:a1:bd:b0:c8:7b:6e:49:e7:
                    03:a4:5b:60:52:68:a2:0c:fb:34:a9:65:fc:9b:8d:
                    da:bf:0f:50:aa:84:d9:2d:23:08:bc:65:62:c3:ad:
                    3c:03:ed:5f:47:d9:2b:c0:6d:2e:ed:65:dc:16:f2:
                    22:0f:db:0a:20:f2:91:49:89:90:a6:e1:90:4d:a3:
                    26:a1:1a:89:d0:4f:37:bb:f0:70:dd:ee:22:89:fe:
                    65:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:15:99:41:E2:C7:48:96:9E:44:3D:59:CB:6C:2F:6F:A0:9D:D6:80
            X509v3 Authority Key Identifier:
                keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:77:57:23:0b:58:4e:9c:2d:d5:59:4e:0e:7a:cc:67:a9:8b:
         27:9d:92:77:02:24:6d:1c:24:0b:f3:1a:98:62:45:a4:79:75:
         74:59:50:a4:01:53:d3:68:8b:c3:53:3c:94:b8:e3:19:7a:ff:
         fe:b5:97:dc:48:b4:22:2b:81:f6:92:7e:26:f7:d7:53:96:e8:
         28:7a:2b:35:1c:64:6f:4b:8b:0d:bb:e0:eb:10:f5:ba:2b:d4:
         04:b6:88:bc:b1:76:5f:4b:13:7b:1b:f4:13:76:25:80:52:67:
         cf:0e:71:46:ee:ab:11:28:43:99:2e:a1:4c:cb:41:cb:0a:db:
         c8:f3:e4:54:cf:2c:bd:4e:97:d1:bb:2f:a9:83:53:50:a8:94:
         e5:af:3b:87:39:7f:34:f7:52:57:c7:c7:27:4f:7a:5a:f0:bb:
         4d:bd:71:b4:68:0d:d7:d8:24:48:a8:d0:a0:bc:4b:4d:5b:6e:
         b8:69:74:d1:3c:eb:21:3f:d6:b0:b8:92:e2:11:c1:55:80:2d:
         41:ba:b1:21:1b:bf:04:9a:ed:4c:f9:da:e2:d3:50:f6:11:05:
         ac:df:b6:cd:21:de:05:14:f2:8b:3b:c2:c2:12:4f:5c:d8:fa:
         89:67:70:e0:b8:38:b1:14:46:bf:91:38:01:ca:da:c0:b2:d2:
         6e:6d:61:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 21:40:42 2025 by rpki-client