Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
File:                     18TeE2hvQ1WFNoORXlQd7XU66zo.mft (raw, json)
Hash identifier:          XYmdsouXRzNt3piWiAwqSWCCEX9Kk5fDqS05Sf7xEQc=
Subject key identifier:   9D:DB:07:8B:7B:4F:6F:72:20:FC:96:8D:24:D3:B6:3A:40:CD:10:4B
Authority key identifier: D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A
Certificate issuer:       /CN=A919C776/serialNumber=D7C4DE13686F4355853683915E541DED753AEB3A
Certificate serial:       D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
Manifest number:          CD
Signing time:             Sat 31 May 2025 06:06:25 +0000
Manifest this update:     Sat 31 May 2025 06:06:24 +0000
Manifest next update:     Sat 07 Jun 2025 06:06:24 +0000
Files and hashes:         1: 18TeE2hvQ1WFNoORXlQd7XU66zo.crl (hash: VCXtyTK8mhPOJEfvkJPD8cxl+go/vBZASMMNk8cHTUM=)
                          2: 13294E34F1F411EFA2B4CF73C4F9AE02.roa (hash: iki08QDP5XEruwrZp5s7EN6qNz49GGaxPj3VQKkAdd0=)
                          3: 35A11C66086C11EFB8BD7815C4F9AE02.roa (hash: 5SAU/1iHdwmbAl4BLE+wteuzB4BwaZSuEXvHLbOPVjI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.crl
                          rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 06:06:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C776, serialNumber=D7C4DE13686F4355853683915E541DED753AEB3A
        Validity
            Not Before: May 31 06:06:24 2025 GMT
            Not After : Jun  7 06:06:24 2025 GMT
        Subject: CN=683a9c61-e7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:09:58:23:ac:bf:9b:c4:92:09:78:6c:6e:03:
                    57:e6:d3:a8:48:d3:b3:03:47:4c:77:49:fa:4b:89:
                    d2:e8:39:c3:93:1a:41:ed:91:a9:92:9f:94:e5:06:
                    c2:9b:9f:a0:0b:b2:6a:e1:e3:6a:71:f6:43:1e:04:
                    7c:73:b3:94:bc:eb:21:1b:91:ba:c2:86:93:71:b2:
                    cd:d9:cf:5d:de:85:20:a5:8f:c6:7a:84:91:ab:e2:
                    57:de:e8:2e:9d:7e:37:ad:8f:ca:f7:08:bd:1c:1d:
                    08:8b:b4:83:eb:c0:a0:07:8a:4d:f2:b2:4b:fc:4f:
                    87:69:da:b3:56:af:d0:ec:96:d2:86:86:0c:eb:cc:
                    7c:b1:bc:95:8d:ac:92:2a:b2:41:4e:be:1d:4e:44:
                    56:83:f2:88:85:3a:95:34:bc:a0:52:2e:c7:58:84:
                    b9:18:66:d9:33:09:21:70:5f:b8:74:7f:a8:8b:db:
                    25:48:4a:bd:c1:67:a3:87:ac:53:25:d9:80:d6:3d:
                    2c:64:be:ab:e5:4b:7b:1e:c7:07:ba:1c:f1:57:01:
                    24:09:8b:3f:1b:ea:d6:82:65:95:0f:0b:7c:e4:2f:
                    28:96:a4:b6:88:60:dc:7d:40:58:9d:61:fb:38:dc:
                    5d:e2:00:71:24:57:83:0f:55:44:c0:8a:08:8f:8d:
                    65:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DB:07:8B:7B:4F:6F:72:20:FC:96:8D:24:D3:B6:3A:40:CD:10:4B
            X509v3 Authority Key Identifier:
                keyid:D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5e:7e:f7:80:40:a0:9a:7e:07:86:c7:47:e2:74:07:e2:03:
         e8:c2:a7:9f:fa:13:88:77:34:a6:df:4a:53:5d:c1:ab:73:40:
         51:1d:9e:0a:f4:0a:7b:62:b5:1f:2b:77:e5:5d:00:14:91:e2:
         21:d0:ac:fb:86:36:84:49:a9:fc:f1:b5:af:69:77:82:ce:63:
         81:68:ea:6b:5b:60:75:20:f0:4e:34:05:17:67:d7:81:db:2a:
         77:5a:8d:bb:bb:db:22:f6:72:0c:64:a1:a5:a2:27:83:6e:e8:
         00:bb:38:b1:0b:19:82:3a:ee:80:89:8d:28:1a:d7:a9:6c:0d:
         3b:be:84:f6:21:33:98:ef:d0:7f:f5:48:12:97:c0:08:8f:19:
         16:b5:3b:56:fb:9a:cb:a4:86:ce:ed:0a:96:91:ca:f3:ac:ef:
         fe:a7:89:aa:17:9f:15:dd:7f:cf:f2:ff:a0:dd:ea:d1:59:36:
         40:dc:03:ef:1a:18:3a:ee:3e:ae:f4:1a:9d:0c:cc:a2:23:39:
         30:f6:77:93:c9:d1:31:90:09:6a:77:98:78:8b:a2:2c:2d:ba:
         2e:b3:41:77:20:92:46:5b:81:0e:17:2e:50:66:64:9b:e7:26:
         21:dd:19:39:a4:3c:db:0d:cc:33:3c:85:16:d9:d4:b7:e9:ee:
         8a:b0:ad:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:54:47 2025 by rpki-client