Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
File:                     rLLFTvC2TcIQCkhqe49ZMkute0k.mft (raw, json)
Hash identifier:          thPJQlICzX4v87uKGu5li5ycpLM/e/AhxwZXVJ9Xohw=
Subject key identifier:   5C:6B:01:24:18:E3:B0:08:8F:28:02:30:54:98:62:6B:5D:05:9F:5F
Authority key identifier: AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
Certificate issuer:       /CN=A9185673/serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
Certificate serial:       0196
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
Manifest number:          0190
Signing time:             Sun 07 Sep 2025 03:55:19 +0000
Manifest this update:     Sun 07 Sep 2025 03:55:18 +0000
Manifest next update:     Sun 14 Sep 2025 03:55:18 +0000
Files and hashes:         1: rLLFTvC2TcIQCkhqe49ZMkute0k.crl (hash: 7IliMwBOI9CXHXCowhfRGoJxP4b+BfVYfPKu8a1Ftl8=)
                          2: C4D5BB009B5411EFBBEFF384C4F9AE02.roa (hash: QDeaqdoBnFXV+JmRiyCNSIMZmZka/hyC5/9UzKXY3ZA=)
                          3: B76A1A109B5411EF9756FD79C4F9AE02.roa (hash: nEnauNcK30SC5dUj0ntjcanTMyK24OfS+HXF4N9+TpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl
                          rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 03:55:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185673, serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
        Validity
            Not Before: Sep  7 03:55:18 2025 GMT
            Not After : Sep 14 03:55:18 2025 GMT
        Subject: CN=68bd0227-66ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:13:94:47:92:05:d2:ea:99:c1:49:4a:36:1e:
                    b6:06:82:5c:b8:26:63:8d:a2:d5:94:61:0a:60:7d:
                    a4:3d:09:bc:29:df:61:d9:06:e7:12:bd:63:fd:10:
                    c1:c2:f6:7e:8e:5d:88:ce:0a:43:11:9c:4b:3d:3c:
                    b3:66:76:3a:21:d6:f3:98:6c:6c:7c:27:54:de:f1:
                    22:6f:d5:34:4d:6c:8b:f2:be:48:dd:90:7a:96:7e:
                    7b:ca:ee:9c:e4:5b:de:dc:0f:c0:ef:99:63:9a:0b:
                    21:ff:25:10:3d:0c:30:6c:63:c6:51:25:02:cb:df:
                    e4:5c:9b:bb:3f:76:59:82:f3:a5:5b:7b:4f:73:a4:
                    b5:ff:44:1f:1e:bd:75:15:66:0e:94:fe:16:7d:4f:
                    1a:73:06:6d:9d:72:cc:64:4a:3c:f1:25:ac:d8:d9:
                    83:c3:ab:bb:2e:9e:f4:1e:d6:7b:72:31:d9:3d:c3:
                    9b:f0:e4:3d:3a:68:82:d4:ef:cc:c7:e9:62:06:b7:
                    b3:bd:5e:37:bf:69:f5:87:7c:a9:b4:8c:fe:84:7d:
                    21:1a:7d:e6:fa:80:f4:0f:fd:d5:dc:5d:87:d1:77:
                    bb:02:87:87:ec:9f:38:63:1d:a3:a1:43:f5:19:cd:
                    57:a1:ff:33:d4:e8:89:39:77:df:5d:b1:72:d3:5b:
                    b4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:6B:01:24:18:E3:B0:08:8F:28:02:30:54:98:62:6B:5D:05:9F:5F
            X509v3 Authority Key Identifier:
                keyid:AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:fc:28:15:4b:f4:f9:bd:eb:15:71:0d:e8:00:8d:67:f6:99:
         14:fd:67:72:d1:fd:bc:f0:c6:80:1a:53:53:e7:16:f3:6f:a8:
         d6:ec:86:c5:e1:c7:dd:12:38:10:e6:16:cb:12:33:c9:df:bc:
         05:19:71:cc:e3:a7:45:49:e7:c3:9f:20:59:93:a5:21:0d:19:
         92:5b:f4:ee:67:fc:bd:00:24:d0:1c:18:96:0a:bf:c8:f3:ca:
         af:93:1d:4f:23:ce:34:9c:78:e7:78:47:5d:36:2c:e4:dd:f3:
         5c:d3:5a:8a:8d:68:2c:d2:20:96:61:82:e9:0f:0b:5b:5a:0f:
         96:a2:41:29:db:56:62:4c:17:db:5d:94:a3:ce:2a:3b:65:20:
         71:7f:17:32:13:9b:84:5a:52:1b:23:0f:db:f4:d7:87:cb:53:
         fe:38:60:6b:5b:33:7e:da:98:78:94:4c:1c:ed:93:bb:23:40:
         a7:d8:15:4f:e6:b1:3c:10:c8:a0:48:55:79:32:f5:55:57:a6:
         a2:e6:21:0b:c2:d7:5a:4b:c0:47:74:d9:03:ff:90:97:b7:76:
         03:d3:02:9a:c4:07:20:03:11:b7:56:b9:a3:28:05:10:c9:50:
         3a:e7:03:80:07:82:1b:33:47:29:ff:7e:70:d5:b0:91:21:58:
         9d:ea:9a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:32:05 2025 by rpki-client