Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
File:                     W71m6GM06ZgX4sbVvOt9rQIPyoo.mft (raw, json)
Hash identifier:          hqqpUXWgBC+KJStIMOfdbgqEjSCwxs2oAd8lY5hOZ0E=
Subject key identifier:   43:98:2E:75:88:29:96:09:69:A0:DB:F5:1C:DF:22:D7:3E:F8:7F:64
Authority key identifier: 5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A
Certificate issuer:       /CN=A918E80E/serialNumber=5BBD66E86334E99817E2C6D5BCEB7DAD020FCA8A
Certificate serial:       0915
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
Manifest number:          0908
Signing time:             Thu 18 Sep 2025 20:34:25 +0000
Manifest this update:     Thu 18 Sep 2025 20:34:25 +0000
Manifest next update:     Thu 25 Sep 2025 20:34:25 +0000
Files and hashes:         1: W71m6GM06ZgX4sbVvOt9rQIPyoo.crl (hash: YlWhSF9CXevhp2veLvUO1PtvtM9EtR3oK+P0CWIHuZg=)
                          2: 16745A82B1CD11EA9A31DA7DC4F9AE02.roa (hash: glSctB67kcgRNgcA0b3/jW6A3plk8SZgtFK9qI9gKIo=)
                          3: 15C562A2B1CD11EA9A31DA7DC4F9AE02.roa (hash: NkR/nF+Vmt/Gcc86ZcEETph8N4g/HWKaL5fwvV3ReJM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl
                          rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 20:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2325 (0x915)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E80E, serialNumber=5BBD66E86334E99817E2C6D5BCEB7DAD020FCA8A
        Validity
            Not Before: Sep 18 20:34:25 2025 GMT
            Not After : Sep 25 20:34:25 2025 GMT
        Subject: CN=68cc6cd1-4c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ec:e6:c1:bf:5c:c1:df:5a:ff:4f:64:4e:04:
                    1e:c5:84:3e:84:2f:d7:be:81:30:ff:27:2c:85:7a:
                    8d:0f:72:d0:5d:2e:4d:e2:ed:67:53:26:94:d1:f5:
                    20:14:16:ec:dd:4a:5d:fd:3b:6f:54:07:8e:ee:a7:
                    29:1d:78:09:a3:97:03:26:47:c1:99:73:3a:a0:62:
                    21:a4:f3:01:bb:fc:8c:aa:6c:5f:28:4f:bd:f8:a8:
                    46:82:c7:20:ad:d0:d6:c3:c8:f4:b2:99:ca:3d:f3:
                    55:88:e5:e7:d7:2d:09:27:89:76:53:87:05:0c:50:
                    8e:cd:11:e0:7f:f3:fc:c0:2b:84:8d:48:fc:13:69:
                    85:75:0e:da:e4:d6:73:7a:46:47:62:84:eb:7b:be:
                    1c:60:a4:eb:d0:ab:ad:67:39:da:aa:62:60:92:da:
                    6b:b2:6f:fb:59:62:a4:53:47:31:c4:54:45:27:0f:
                    9f:0d:77:23:87:1b:67:1c:39:8b:75:62:73:91:b1:
                    52:12:4b:8d:9b:08:43:60:46:24:27:68:5f:84:8d:
                    f1:0b:67:ea:79:70:1b:33:b1:be:1a:8c:06:2b:fe:
                    63:32:a3:ba:92:ba:13:bf:07:0f:92:1e:ed:82:9c:
                    f9:cc:86:3f:70:ee:16:0c:57:8e:ea:3b:2e:bb:ba:
                    c5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:98:2E:75:88:29:96:09:69:A0:DB:F5:1C:DF:22:D7:3E:F8:7F:64
            X509v3 Authority Key Identifier:
                keyid:5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a3:af:42:76:06:94:cd:50:ce:a4:25:48:ea:f3:a5:7b:b0:
         3f:12:72:1f:91:54:41:b2:6f:1c:1b:13:99:e1:6e:d9:9c:ed:
         fd:ad:0e:78:9b:6f:02:0f:a5:5a:0a:1b:cd:8b:b1:c8:a8:a0:
         af:db:4e:25:cd:e0:81:5a:b0:65:7e:59:ff:f0:a7:2e:cd:1d:
         1f:83:81:6d:7e:be:58:d2:42:95:8b:b2:c3:4b:e2:52:14:19:
         15:fd:80:b9:10:02:a3:0f:51:3f:31:71:2d:ff:e9:55:2f:bd:
         9d:e4:b6:c8:42:d5:2e:32:d7:a6:4b:9b:62:66:5a:72:f0:31:
         45:4e:e3:01:7e:ad:1d:f8:00:4f:36:dd:25:05:38:33:0c:2a:
         d7:7e:9e:9b:34:0c:59:d6:7e:12:71:c6:db:5d:c2:fd:cd:54:
         95:a3:34:4c:f6:2f:4b:d8:cf:6c:cf:b4:b1:9c:df:33:5c:d9:
         f5:a4:84:48:b5:b9:bf:b9:dc:26:97:0e:a6:29:00:d6:b8:58:
         7b:26:bd:b9:a5:3e:bc:73:95:6e:2e:3d:a5:fd:8e:5e:ea:f9:
         3f:ac:f5:0f:c6:93:eb:e1:54:2b:7b:dd:c8:0a:63:47:f6:e2:
         f5:24:3d:3e:2d:7c:77:9c:0e:9e:fa:81:fe:60:e3:a0:af:a6:
         0f:ec:10:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:36:04 2025 by rpki-client