Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
File:                     5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft (raw, json)
Hash identifier:          I6idbNiWCtNhS35W8zqzPeyaO4uR3kmwjSNv8CFv+pk=
Subject key identifier:   E2:5C:33:9D:93:F1:BC:14:53:26:C6:E3:46:D7:CE:11:50:C4:CD:91
Authority key identifier: E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF
Certificate issuer:       /CN=A9187313/serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF
Certificate serial:       1993
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
Manifest number:          1974
Signing time:             Sun 24 Aug 2025 16:22:59 +0000
Manifest this update:     Sun 24 Aug 2025 16:22:58 +0000
Manifest next update:     Sun 31 Aug 2025 16:22:58 +0000
Files and hashes:         1: 5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl (hash: kfAA95ousFJdBHmimPECzwDZ9ayAIHWeSdXKPnN/d3A=)
                          2: 98E572FC777011E7BF7EED10C4F9AE02.roa (hash: lV2/2NW27xVZaBILThpNeuepTXhQgC2yA5suVSBt5Mg=)
                          3: 9787989A777011E7BF7EED10C4F9AE02.roa (hash: /pOoncr1KzYRXYjLbZuRohrO0FiLH7LyekaH9trend8=)
                          4: 97F31854777011E7BF7EED10C4F9AE02.roa (hash: 7+Ks4jZyLMHPbzW7FZP/GDFbxrDItsZ+/jUs9u2MSic=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl
                          rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Aug 2025 16:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6547 (0x1993)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187313, serialNumber=E5672BBF18C4CFEBD3F472D13B48771372D34EDF
        Validity
            Not Before: Aug 24 16:22:58 2025 GMT
            Not After : Aug 31 16:22:58 2025 GMT
        Subject: CN=68ab3c62-962b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:00:59:21:54:91:c0:53:7d:1f:8e:38:59:86:
                    96:c7:b2:e1:f2:d7:d5:96:fe:f2:ac:ed:dd:d1:e3:
                    ea:7a:be:b6:8a:5f:63:6f:61:fc:cb:bd:d6:e8:4b:
                    bb:c7:3e:23:3f:f7:d2:2f:bb:aa:66:74:bb:d8:7a:
                    ad:b1:48:01:2d:73:13:fa:87:28:27:65:ec:64:8a:
                    ce:27:0a:e8:0f:fd:16:aa:b6:55:d0:db:b2:82:7c:
                    b8:9b:5b:b1:c6:4b:04:6c:d6:2b:b0:ff:01:6f:1f:
                    da:4d:20:ee:f6:82:f2:a6:f0:ff:04:2c:ac:58:ca:
                    5d:9e:7a:f3:df:3d:52:97:4c:4d:68:e9:d7:18:84:
                    82:30:8d:58:58:9e:9b:02:cc:28:09:23:b4:a8:64:
                    49:4f:cf:23:94:ce:d4:68:bd:5a:11:b3:22:06:42:
                    6e:96:37:7e:fd:91:98:8d:c3:b0:fb:67:91:ee:91:
                    32:ce:17:7c:5e:7a:d3:bf:89:b6:45:7d:e1:ee:da:
                    29:f9:a3:56:44:6d:8e:b2:23:b9:29:17:5a:a4:e4:
                    e1:3e:3b:df:ad:a7:4e:57:3c:49:1a:ad:0b:f1:78:
                    59:3c:18:48:9e:8c:2d:08:66:4f:f3:f9:d3:30:6f:
                    8d:83:eb:8a:de:23:45:2b:5f:dc:f3:37:38:92:c8:
                    d8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5C:33:9D:93:F1:BC:14:53:26:C6:E3:46:D7:CE:11:50:C4:CD:91
            X509v3 Authority Key Identifier:
                keyid:E5:67:2B:BF:18:C4:CF:EB:D3:F4:72:D1:3B:48:77:13:72:D3:4E:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5WcrvxjEz-vT9HLRO0h3E3LTTt8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187313/3C34EC0A776F11E782AD6D0EC4F9AE02/5WcrvxjEz-vT9HLRO0h3E3LTTt8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:99:c9:9c:2c:49:e3:cd:c8:c4:0c:c0:0e:b0:d0:1d:4c:bf:
         b2:8d:6b:1c:2c:18:c1:26:0a:45:9e:12:7e:f6:cd:25:7d:c7:
         02:33:18:02:09:04:10:32:68:ce:b7:09:19:b1:9b:56:ce:2d:
         2f:d8:8d:2a:19:a5:39:c7:19:56:16:2b:d8:d2:fd:1a:b2:a9:
         ba:bb:c8:78:38:01:04:ac:d4:53:3c:2d:97:f1:3d:fd:69:e5:
         0b:0a:c2:a2:c8:0a:6c:ae:86:e4:65:97:40:c9:ee:01:25:d7:
         d4:2a:d3:89:5a:fd:ea:5f:c8:94:be:b6:36:08:ee:1b:74:a1:
         08:1f:ec:8a:ac:5f:22:77:08:28:60:b9:20:04:b4:5e:5a:b4:
         c2:57:18:a2:b6:2c:6a:fd:da:a5:0d:b2:21:1e:3f:00:f8:51:
         75:8e:13:82:c1:0e:59:f1:4f:a0:b8:a6:42:23:d9:2d:e1:78:
         22:e6:e6:fa:02:85:8b:56:d3:e7:01:ad:81:69:7d:9f:51:1a:
         c3:90:d3:7c:08:bc:d1:3e:b8:cc:0e:f4:58:b4:98:ac:95:11:
         e2:03:1d:14:87:95:85:38:7c:ba:f5:44:8a:f2:b9:9a:7d:9d:
         20:90:b5:3b:ab:da:1c:1a:88:5a:d6:c9:31:ae:e8:09:8e:6a:
         ca:69:94:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 22:11:27 2025 by rpki-client