Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft
File:                     cV0939fSp5kTexOT1KjPorHU02Q.mft (raw, json)
Hash identifier:          lHTTBFaGRvKoMYq7XMHdam7MW7YtEjxI/MAAp8I13Ws=
Subject key identifier:   DB:02:E2:B1:A9:8F:98:72:F4:3F:6F:E5:44:E8:1E:03:A5:1C:3B:14
Authority key identifier: 71:5D:3D:DF:D7:D2:A7:99:13:7B:13:93:D4:A8:CF:A2:B1:D4:D3:64
Certificate issuer:       /CN=A918A695/serialNumber=715D3DDFD7D2A799137B1393D4A8CFA2B1D4D364
Certificate serial:       C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft
Manifest number:          BF
Signing time:             Tue 09 Sep 2025 05:58:48 +0000
Manifest this update:     Tue 09 Sep 2025 05:58:48 +0000
Manifest next update:     Tue 16 Sep 2025 05:58:48 +0000
Files and hashes:         1: cV0939fSp5kTexOT1KjPorHU02Q.crl (hash: GnIjxJOeBGOITAHsYb5dUvgVlBjKi4lzL9A+u0gRAN0=)
                          2: 8BAFDC4C691E11EF9AC4F168C4F9AE02.roa (hash: ho9e+hBvfRrUv61HQybAcXR0qZ4hUME6WoyxclRolHQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.crl
                          rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 05:58:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A695, serialNumber=715D3DDFD7D2A799137B1393D4A8CFA2B1D4D364
        Validity
            Not Before: Sep  9 05:58:48 2025 GMT
            Not After : Sep 16 05:58:48 2025 GMT
        Subject: CN=68bfc218-1b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:be:69:b8:75:6b:e5:50:e1:c4:6e:22:92:c8:
                    a7:d4:df:73:36:e6:e0:28:02:ae:4a:fe:51:6d:04:
                    f2:89:fd:3c:bf:67:84:f3:ee:fa:fa:48:a7:16:18:
                    6b:bb:35:0f:89:54:ae:b9:a4:11:c0:1c:d7:19:cf:
                    a0:37:21:df:1b:1e:f4:83:7f:f3:e2:9c:ca:02:8d:
                    a9:64:42:ac:9f:02:72:e6:90:e8:a4:87:b3:cb:b3:
                    e1:54:94:27:08:25:15:28:89:a7:ce:d6:24:70:cd:
                    47:cc:77:a0:fd:7d:4e:76:ae:1b:e1:4c:cc:39:fb:
                    87:9b:2d:72:86:2d:b2:82:a6:32:14:f4:76:db:27:
                    77:b9:91:1d:dc:74:81:47:47:ee:fe:79:29:37:9f:
                    93:22:b8:b1:c4:35:3e:82:41:bf:39:b7:24:d1:95:
                    10:23:50:fa:77:d4:02:50:3e:2c:67:59:99:47:d5:
                    91:40:93:9a:85:08:15:c2:26:17:0e:3a:24:7b:87:
                    82:91:16:7e:be:16:e3:f2:3f:eb:3c:86:cb:5d:0c:
                    42:0e:9b:6c:e1:ee:82:ca:3b:c9:dd:f1:3b:60:51:
                    c6:d9:a5:91:9c:16:5b:24:5c:68:f8:16:14:17:8b:
                    15:af:a8:65:65:6f:19:a0:81:f9:5c:36:08:96:2e:
                    9d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:02:E2:B1:A9:8F:98:72:F4:3F:6F:E5:44:E8:1E:03:A5:1C:3B:14
            X509v3 Authority Key Identifier:
                keyid:71:5D:3D:DF:D7:D2:A7:99:13:7B:13:93:D4:A8:CF:A2:B1:D4:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:40:e1:ff:50:a4:79:74:89:3b:a7:21:a6:ca:44:21:d6:1a:
         ae:bc:13:07:76:65:d9:0b:c9:db:ac:15:b9:41:67:d8:9c:c4:
         35:f2:be:29:6e:86:19:00:cb:2c:2a:da:0d:51:e2:68:cb:2a:
         8b:6e:e1:45:53:17:73:13:e1:df:51:53:49:a7:d6:91:06:cd:
         06:e8:92:bc:79:d0:e4:d1:ec:2e:ce:b9:2f:b9:6b:0a:10:51:
         f4:e6:51:ca:61:9e:27:2d:d6:50:ff:f7:54:65:31:b6:63:54:
         b9:ff:f4:a8:0f:e8:ba:93:5f:82:0f:67:fa:cf:b1:29:c4:39:
         fd:4d:b3:d5:d9:98:b9:81:81:74:15:30:a9:5f:f2:88:7e:51:
         be:ca:d5:29:50:7a:2a:cc:04:b3:d0:47:0e:a6:5d:2b:73:c8:
         65:03:15:c6:7e:26:52:33:12:f3:a1:3d:19:0c:69:2a:5f:ac:
         e8:df:83:0f:08:2f:63:15:72:7d:74:d5:6b:86:20:73:b5:5e:
         df:eb:e6:c4:c5:3e:ca:1e:43:dd:02:2d:fe:89:a3:6a:83:9d:
         b3:84:7d:1c:b5:f6:39:3b:e3:4d:2b:80:80:d8:f2:80:e5:86:
         6e:03:39:69:c7:e7:10:5f:97:19:21:a3:b7:d3:4e:4a:e6:55:
         6c:b1:ac:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:19:46 2025 by rpki-client