Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
File:                     w5O8331Fpxlv881tMNYjDfT9xX0.mft (raw, json)
Hash identifier:          +uRzYbn/8u2gSdFSAdJnCIQxeKpc9sX06RHY+5eyAig=
Subject key identifier:   8C:31:7A:C7:E5:FA:78:6F:7F:3D:77:04:02:B3:68:3D:3B:9C:C2:E1
Authority key identifier: C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D
Certificate issuer:       /CN=A916ED2B/serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D
Certificate serial:       BE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
Manifest number:          BC
Signing time:             Sat 19 Jul 2025 06:06:41 +0000
Manifest this update:     Sat 19 Jul 2025 06:06:41 +0000
Manifest next update:     Sat 26 Jul 2025 06:06:41 +0000
Files and hashes:         1: w5O8331Fpxlv881tMNYjDfT9xX0.crl (hash: wsc39idYUG9mAgYHQkoxSIO+CF1SNGwA7jzs/LFSr2U=)
                          2: 2B4804B845B211EF9B812019C4F9AE02.roa (hash: nLqd4iOtl1GLw2Gq5WmxNPMWDRnWSTF7f/Jyns3zXvM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl
                          rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 06:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ED2B, serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D
        Validity
            Not Before: Jul 19 06:06:41 2025 GMT
            Not After : Jul 26 06:06:41 2025 GMT
        Subject: CN=687b35f1-d5b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b3:c3:bf:b5:37:25:1c:e6:36:8a:56:45:97:
                    1f:1c:e4:ec:ec:3a:2d:0c:c7:b5:9f:0e:49:c2:91:
                    cb:27:fa:56:43:b8:0e:be:ce:54:45:d7:99:30:86:
                    ed:cc:b9:fd:f3:6c:dc:fc:45:3e:4b:1e:7a:0b:68:
                    cf:68:b0:67:6a:7d:61:a1:8c:14:fa:35:39:d6:24:
                    bc:b3:61:de:3e:80:b0:6c:ec:8f:99:87:d0:4d:35:
                    01:98:cb:a5:63:4b:23:c0:85:32:06:cc:01:37:89:
                    2e:cf:2d:61:de:7c:71:fd:09:ce:f8:d7:51:dc:67:
                    05:64:18:74:45:5c:26:2a:43:7f:f8:12:c7:2d:b4:
                    34:09:9a:04:df:e5:36:b4:8d:e7:5e:fa:c8:37:30:
                    ba:f1:23:8d:51:e2:ba:24:9d:be:f2:c7:ea:1d:04:
                    96:ba:d2:a2:3e:2e:47:fd:13:20:6e:b7:4f:e2:69:
                    98:6b:b2:05:5f:55:c6:30:ce:99:a7:7e:b5:bf:07:
                    1d:bf:44:3b:24:ff:2e:95:5e:eb:43:b3:40:de:b2:
                    e7:37:b7:df:66:80:97:4a:b0:89:ce:14:28:77:2b:
                    a2:fc:47:45:aa:cf:f7:19:97:87:49:0a:c6:5a:cc:
                    eb:c0:91:e6:0a:5e:95:ed:e1:54:00:36:71:cb:42:
                    a4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:31:7A:C7:E5:FA:78:6F:7F:3D:77:04:02:B3:68:3D:3B:9C:C2:E1
            X509v3 Authority Key Identifier:
                keyid:C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:69:f0:03:7c:44:26:a9:91:3f:c0:08:69:70:40:82:4b:95:
         bb:69:af:b6:46:9c:d0:18:d8:cb:21:b4:07:f3:d6:9b:b1:9f:
         ab:c3:09:96:33:db:fd:fc:43:b8:8d:52:c6:6b:62:7d:cb:94:
         04:81:93:c0:77:b6:b1:1f:af:25:e1:79:8c:40:30:72:e4:3b:
         eb:07:6e:5d:39:c9:8b:44:f1:5f:e9:d2:37:29:c9:b9:91:a1:
         7f:7d:9a:27:6d:9f:aa:25:bb:ac:3c:3f:34:39:58:b7:92:b4:
         7f:c9:05:b4:22:43:cf:fd:5d:db:d2:51:81:84:37:08:c9:d1:
         c7:8d:c1:05:d6:1b:20:b0:87:83:21:b5:bc:df:27:b1:6c:44:
         6b:c6:45:2a:fa:44:aa:24:d2:04:21:7d:3f:36:93:c0:e4:b3:
         4e:fb:7b:45:64:6e:e2:5c:cc:07:df:be:82:e3:00:b4:1e:9b:
         59:b3:94:d9:15:56:66:b9:55:4d:6c:8a:6f:c6:21:c0:a3:b6:
         37:76:ab:36:ff:c0:f1:70:70:2d:d0:c3:aa:30:e0:11:da:cd:
         99:50:ed:43:43:70:8c:17:9d:9d:1d:da:ed:a1:a4:e8:c5:8d:
         59:82:5e:e4:b6:45:f2:d9:10:fc:dd:74:9e:7a:50:37:dd:00:
         81:ea:f0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:51:13 2025 by rpki-client