Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft
File:                     czPiYYsz1lD-GNg_eCVFwj1PWp4.mft (raw, json)
Hash identifier:          ZJriFXtBvnSOReadguM7pntKTaJDEQ0RTI6iKrOeVVY=
Subject key identifier:   92:FB:B4:88:DE:F7:D6:3E:D2:B3:FB:27:1B:AA:29:30:A6:42:7E:A4
Authority key identifier: 73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E
Certificate issuer:       /CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E
Certificate serial:       0C80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft
Manifest number:          0C78
Signing time:             Wed 20 Aug 2025 18:24:23 +0000
Manifest this update:     Wed 20 Aug 2025 18:24:23 +0000
Manifest next update:     Wed 27 Aug 2025 18:24:23 +0000
Files and hashes:         1: czPiYYsz1lD-GNg_eCVFwj1PWp4.crl (hash: EoSxNamF3FkM2oUnIq3csUdljP7cyPgjanEmHidoo+U=)
                          2: 0C1D4BF8038F11EA82150D4AC4F9AE02.roa (hash: 9YzaKoB55vA+zQdVAh6WHpgfW7yVGA2AYZZFRxBBOuM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl
                          rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 18:24:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3200 (0xc80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918098B, serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E
        Validity
            Not Before: Aug 20 18:24:23 2025 GMT
            Not After : Aug 27 18:24:23 2025 GMT
        Subject: CN=68a612d7-2945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:56:a7:03:44:5e:0c:96:a3:01:ef:93:b3:12:
                    27:79:90:cb:6c:b5:ec:7f:ba:f9:73:62:61:86:6a:
                    6f:34:e9:8d:d7:e2:a0:50:d6:7b:78:cd:00:2b:14:
                    fc:c8:88:95:4b:dd:33:5c:85:ad:55:2a:18:b1:96:
                    a8:08:97:f9:d8:ce:0a:1c:11:d4:3f:bf:c1:1c:15:
                    91:cf:a5:94:3a:55:e2:42:70:17:bd:69:14:de:3e:
                    ac:7e:3f:4b:cf:ff:14:e1:3b:6c:e1:b4:d4:c9:3d:
                    64:ab:0b:79:1e:fe:4e:62:d5:fd:1e:71:e2:e2:72:
                    35:67:d1:43:c3:38:09:6d:b3:64:87:89:64:fc:d6:
                    8e:f7:3d:74:9c:16:80:85:ab:76:34:9a:f8:c1:d0:
                    76:d0:3c:ae:28:64:2a:c8:99:ac:10:33:3f:60:c2:
                    f4:7b:d9:b6:7a:fe:81:29:20:80:c6:68:2d:32:71:
                    11:6f:51:20:c1:0c:d6:45:64:36:71:e3:6b:25:f0:
                    fb:d6:14:63:93:08:61:b7:6b:1f:4a:60:f5:14:fd:
                    d5:39:ec:8c:61:d5:ae:8d:9c:25:01:50:e0:f1:80:
                    05:e5:f3:d6:1b:7d:a1:5f:cd:06:a0:17:6e:10:dd:
                    b0:ef:01:f3:db:80:1a:d3:f2:05:4c:34:1c:9f:09:
                    93:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FB:B4:88:DE:F7:D6:3E:D2:B3:FB:27:1B:AA:29:30:A6:42:7E:A4
            X509v3 Authority Key Identifier:
                keyid:73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:5f:d7:9b:ff:13:2c:f0:8e:34:3e:f0:d2:aa:d8:2d:88:97:
         59:44:11:0e:41:7b:61:9f:69:66:17:73:e3:27:25:94:21:63:
         a2:26:34:08:55:9f:ea:83:85:0c:75:7b:0a:2e:96:9f:d3:88:
         ad:b2:40:02:d5:42:f4:39:15:93:b9:08:4b:ac:ae:fd:7c:79:
         cb:64:03:03:47:37:84:ee:71:63:7d:da:04:b4:67:a1:fe:e5:
         f7:a0:3b:aa:76:8c:28:17:0e:d1:20:fb:a0:2d:f7:36:73:a1:
         69:e5:15:61:c8:b1:72:05:ff:1f:07:f7:3f:a8:04:11:35:e9:
         f2:93:6b:bf:4f:06:ac:7a:2c:41:19:b1:cf:3c:93:6e:ed:42:
         11:39:7f:63:39:2c:e1:d1:cf:42:20:f1:03:07:27:ed:fe:fc:
         e0:15:3b:20:53:e3:b9:ad:9d:b0:de:2d:c0:a9:9b:45:d6:a0:
         72:af:21:7f:15:25:fe:18:e2:2c:30:3d:db:b7:c4:0d:e3:16:
         75:3b:ef:70:85:b1:94:6b:eb:be:35:6f:81:12:9d:28:20:55:
         bf:d1:1e:2a:33:0f:f6:c9:f0:a9:fa:ea:7b:53:78:6c:24:1e:
         30:eb:c0:71:0d:6d:23:ce:14:57:95:f2:a3:9b:f8:16:f9:de:
         b9:6e:f3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 22 16:32:11 2025 by rpki-client