Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
File:                     4bkQuccxDJ9lWU_G6JifyVOzblE.mft (raw, json)
Hash identifier:          E+xAVowwV1XBSBKt5bJApRpbyap7OXu8ciW/5+Hw1rE=
Subject key identifier:   C0:8D:8E:46:88:C5:9A:EB:2F:52:B2:5A:8C:59:D2:9C:C2:1D:10:C9
Authority key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51
Certificate issuer:       /CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51
Certificate serial:       049A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
Manifest number:          0490
Signing time:             Thu 04 Sep 2025 20:57:33 +0000
Manifest this update:     Thu 04 Sep 2025 20:57:33 +0000
Manifest next update:     Thu 11 Sep 2025 20:57:33 +0000
Files and hashes:         1: 4bkQuccxDJ9lWU_G6JifyVOzblE.crl (hash: 5c6JgcKA/D3tt/ZKtZz5IlIF3MFe1291xfFvCprEm90=)
                          2: 4B1D585250EA11EC8FF55B24C4F9AE02.roa (hash: lWr4ljnX2/yEjyiQoz0OgG+PVsyj+yPc7sx1n1rIGWY=)
                          3: B38D932050EF11EC8583962BC4F9AE02.roa (hash: vGjVKyfhGouNwPbyNw8ueo4siItyyWgs22PxyDfp4xs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl
                          rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 20:57:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1178 (0x49a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178EB0, serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51
        Validity
            Not Before: Sep  4 20:57:33 2025 GMT
            Not After : Sep 11 20:57:33 2025 GMT
        Subject: CN=68b9fd3d-8965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c1:50:6f:72:5a:1f:be:c3:a1:6f:60:5e:97:
                    06:62:6f:21:dc:ee:3e:ab:ff:f5:bf:70:02:cf:7c:
                    72:32:74:ba:1a:a9:f7:7c:7e:b8:55:20:b1:f4:16:
                    52:ad:d9:f4:92:1f:88:50:fb:38:28:45:96:2f:1b:
                    a7:4e:e1:fc:76:22:39:99:fd:b8:21:ac:4a:69:c4:
                    9e:7d:28:f5:c1:1d:20:b7:3b:86:58:88:f0:7d:22:
                    8c:9c:83:2d:61:b3:58:b6:2d:74:c7:9f:41:d9:20:
                    d0:11:a4:9e:2f:2d:9a:89:19:c8:36:7c:c6:d3:35:
                    18:43:ab:fa:b4:0a:f8:67:2b:d8:8a:ee:fd:1f:6b:
                    04:3c:d2:01:6d:9a:e6:29:b8:cc:c4:10:ec:10:79:
                    e9:df:71:6d:ba:ba:46:4c:40:9f:b7:9e:e9:e3:07:
                    aa:cc:a0:2d:ec:a2:ec:45:e4:f0:25:62:a2:88:70:
                    a0:9d:33:51:b3:99:3c:16:a9:bb:8f:3d:89:ca:5a:
                    d0:78:ee:2c:1a:a9:39:f4:a3:08:10:d2:bc:42:1c:
                    0b:60:85:c5:3a:5a:6b:96:c6:fe:fc:2c:2b:bb:6f:
                    81:29:2c:96:75:9a:f1:56:bc:7a:7f:03:8a:82:fe:
                    3c:3f:f7:98:d9:46:b2:c9:6d:fc:8d:c8:e3:a1:4b:
                    10:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8D:8E:46:88:C5:9A:EB:2F:52:B2:5A:8C:59:D2:9C:C2:1D:10:C9
            X509v3 Authority Key Identifier:
                keyid:E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:dc:e5:b0:26:96:06:d0:31:3a:2d:c3:59:9b:f9:d2:db:3a:
         f6:6f:5a:c0:b7:b1:f0:02:ff:c2:92:0e:6b:73:04:cb:58:c7:
         e7:36:b9:51:16:00:07:5a:f0:bb:e3:c0:55:7f:0d:98:39:e3:
         69:2b:bb:9f:8d:24:ea:2f:4c:a6:56:fa:90:9d:ff:7a:b9:77:
         45:9d:2d:52:c8:8d:e4:a5:ae:1a:a1:fd:40:2a:a4:37:70:2e:
         ad:bc:5d:87:cd:dd:d4:3a:86:7d:42:4e:d2:a8:b9:03:00:5a:
         76:e2:1d:10:fb:76:a0:51:59:7f:ac:44:f9:a8:01:8f:5b:9e:
         ad:95:bb:c8:20:bb:72:55:ac:3c:5f:02:fe:d5:03:b7:fa:87:
         a7:b2:a5:9c:ab:c2:ce:23:fd:a9:ee:92:9b:b2:15:d0:1f:b2:
         1c:cd:35:b2:13:8c:b6:ea:3c:b6:5b:88:68:51:88:ac:d5:b3:
         50:39:c4:16:3c:6f:33:d3:c4:31:bb:f7:6b:1c:df:1f:a0:a8:
         11:ff:66:48:19:ac:14:5a:8a:a3:11:14:94:77:16:51:f2:4f:
         71:f5:a4:99:9a:9e:99:c1:f3:3a:c9:23:0c:be:84:27:3d:7d:
         a3:33:01:73:e4:f4:ff:60:4d:a3:11:36:eb:c1:21:98:03:98:
         87:d5:b9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 21:12:18 2025 by rpki-client