Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft
File:                     em4wIQZCz0-7QXPzUnSOHqXCx8M.mft (raw, json)
Hash identifier:          km1MPiK6AjifNCI+efiT4w81grUPajjEvnPMcGzxWpc=
Subject key identifier:   E3:83:DF:26:F1:EC:68:9B:E3:69:8B:92:77:EF:C6:DC:91:7E:A2:39
Authority key identifier: 7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3
Certificate issuer:       /CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3
Certificate serial:       186D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft
Manifest number:          184C
Signing time:             Sat 06 Sep 2025 16:36:20 +0000
Manifest this update:     Sat 06 Sep 2025 16:36:19 +0000
Manifest next update:     Sat 13 Sep 2025 16:36:19 +0000
Files and hashes:         1: em4wIQZCz0-7QXPzUnSOHqXCx8M.crl (hash: rChNw5LX3SpiLwW6Jh07aVWI4Y+Q0QUMnNlVvYKe02Y=)
                          2: 708DE4A87AB011E8B7AB0E53C4F9AE02.roa (hash: 4Q+SEdvBQGfYmmHeFRyy/2R/EHACTjORm2A/+Pw5UxE=)
                          3: F49AA4A889C211EEADFCF27CC4F9AE02.roa (hash: p3nDO3WF2LVR/VuRYdJhLml5b3M6N0ju1bV/+dQUHBY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl
                          rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 16:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6253 (0x186d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D9FC, serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3
        Validity
            Not Before: Sep  6 16:36:19 2025 GMT
            Not After : Sep 13 16:36:19 2025 GMT
        Subject: CN=68bc6303-7085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d9:61:5f:b0:c8:74:10:cf:a2:aa:e0:e8:cb:
                    b5:15:12:5b:82:69:4f:8b:5a:90:95:fc:b0:a6:7d:
                    23:01:0c:72:8c:40:b0:9e:54:e1:b6:06:17:7f:56:
                    96:eb:dc:34:bb:22:3a:41:bc:41:64:24:c2:b5:3b:
                    ff:69:d9:ec:be:c5:28:18:4c:67:63:32:a3:de:8a:
                    6d:a1:77:f6:f4:28:66:0b:ec:4c:aa:05:c5:50:6a:
                    af:fa:b0:14:41:a8:c0:93:d3:45:ed:84:de:38:21:
                    7a:83:97:de:1f:86:d9:33:65:19:e5:f6:58:0a:aa:
                    5e:82:66:33:b0:19:a4:5c:a3:25:82:d7:46:20:9d:
                    ea:7f:1a:d4:8a:ba:a0:10:40:96:e6:48:f2:66:6b:
                    ca:87:24:6e:e6:59:2c:01:2b:db:77:5e:b0:31:28:
                    e3:c7:04:cd:8d:1c:42:31:4b:d9:51:ad:42:90:d6:
                    bc:3d:2e:45:6c:38:19:57:b1:df:ec:19:04:7e:55:
                    af:02:e1:fc:98:bf:77:e5:f6:2d:6b:be:a0:c5:77:
                    db:98:c6:08:8c:ee:78:13:eb:c4:c5:fe:f2:a8:4b:
                    18:bc:8f:59:16:56:28:ac:08:b3:26:88:2a:c9:3a:
                    4c:4d:fe:8f:5c:4c:14:8a:c1:c2:0a:3b:b2:b8:ec:
                    ee:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:83:DF:26:F1:EC:68:9B:E3:69:8B:92:77:EF:C6:DC:91:7E:A2:39
            X509v3 Authority Key Identifier:
                keyid:7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:b9:02:91:87:92:44:0d:af:0f:6b:c2:84:f9:20:a2:c7:aa:
         d1:7f:85:46:a0:5d:1b:3c:ae:e1:f2:b6:2f:71:e8:0c:49:c5:
         38:ae:89:63:1f:22:12:3c:17:da:a0:8c:ac:48:42:f8:24:e3:
         65:0e:fb:a5:8c:e9:f9:f1:17:fa:de:97:46:68:13:63:ef:50:
         8b:9a:d6:b8:aa:d4:26:73:d2:a1:81:90:9d:6b:c2:70:06:6a:
         47:f5:97:a4:de:95:cf:8c:a9:8e:31:15:71:0b:44:08:e0:29:
         40:f2:74:76:95:58:9a:52:8e:28:84:46:7a:0a:42:b0:2f:02:
         90:58:10:b6:61:43:6e:2f:c1:7f:b0:21:ab:6b:44:3c:9a:73:
         e1:08:e3:94:0e:10:12:67:10:62:b6:08:31:36:3d:6d:e8:36:
         3d:c0:d0:10:3e:6b:0e:f9:7b:d7:0b:e4:7b:a9:93:a1:21:0f:
         5b:aa:cb:cf:7a:c1:28:14:ee:cc:a0:11:2a:86:0b:3a:43:2c:
         58:2a:13:4d:38:94:3f:df:0d:e0:33:d9:0d:14:0d:cd:a2:97:
         d9:38:1f:5d:7b:4b:ef:72:2f:01:89:06:2f:5c:15:d2:8a:db:
         dd:2d:b6:9c:96:f4:91:18:e4:b2:5a:29:0b:98:b4:0f:88:ed:
         ad:80:d7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:46:28 2025 by rpki-client