Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
File:                     h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft (raw, json)
Hash identifier:          bGugqDhpWODNBc+icY8jyR0XyiZoFDsqNXrOBQiyuME=
Subject key identifier:   66:A8:3F:31:AC:81:C4:BE:35:C5:7B:2B:F2:42:14:13:59:B2:D3:08
Authority key identifier: 87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04
Certificate issuer:       /CN=A912A294/serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04
Certificate serial:       019F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
Manifest number:          018A
Signing time:             Mon 11 Aug 2025 03:59:08 +0000
Manifest this update:     Mon 11 Aug 2025 03:59:07 +0000
Manifest next update:     Mon 18 Aug 2025 03:59:07 +0000
Files and hashes:         1: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl (hash: YAxsY7JVWaH+GBma9tLecFqeqNBhem5r3jP0Z7bGZjg=)
                          2: 60C72042052911F0A2361C50C4F9AE02.roa (hash: eoqR2rI7tCJcx2sHbbxw1cinGXO6kmie9biadQvkvGU=)
                          3: 64B5B49A052C11F0AFEC0478C4F9AE02.roa (hash: osIylBmoiOl0hS+6q4jLTN9ELMVNH7Z3hIxqCI6TGCM=)
                          4: 24661146FA7311EFB58C366CC4F9AE02.roa (hash: vJ/paOcsiCM0y/LcDeCNMcXQ0i9PBxkDy6/mQy96vcg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl
                          rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A294, serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04
        Validity
            Not Before: Aug 11 03:59:07 2025 GMT
            Not After : Aug 18 03:59:07 2025 GMT
        Subject: CN=68996a8b-bd22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c1:79:7d:0c:c1:6c:b9:4f:54:75:f1:0e:59:
                    27:fd:2f:09:87:39:5c:cd:19:c9:1e:c4:60:f4:5e:
                    bb:d3:aa:82:9d:19:43:9d:b0:ed:04:a4:1d:93:7c:
                    b2:da:38:de:4b:0d:b8:c4:fc:db:83:37:cd:50:79:
                    99:4e:6e:28:60:59:4f:d6:df:3e:7d:bb:f4:4f:fc:
                    83:0b:26:69:84:6a:4e:6f:f7:71:90:c3:69:c3:f0:
                    21:c0:38:42:fe:a1:9e:9e:3d:5c:a6:f9:da:20:8d:
                    36:66:dd:19:86:4d:3c:5e:09:53:a5:df:a8:24:bb:
                    0d:56:06:bb:a6:4a:7b:9f:28:f6:43:70:82:fa:43:
                    7f:34:42:0f:57:04:48:02:10:35:c3:f7:f2:2a:e9:
                    fa:e4:08:8e:e0:08:5c:e9:d2:b7:aa:cb:a8:3e:f5:
                    c0:77:65:2e:f9:74:e5:66:c4:85:fe:22:78:6d:16:
                    fb:09:cb:2f:07:6e:08:50:01:b2:48:97:06:f6:cc:
                    9e:83:c6:eb:fc:de:32:11:38:34:ff:9c:5a:cf:7a:
                    1f:42:5a:d2:0b:51:10:47:f2:e6:90:62:90:92:8e:
                    6a:a1:8f:16:c8:51:a8:cc:a2:0e:b7:50:58:a7:7f:
                    2a:28:8e:12:e8:cf:6d:81:1c:53:d1:67:82:fd:e8:
                    67:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A8:3F:31:AC:81:C4:BE:35:C5:7B:2B:F2:42:14:13:59:B2:D3:08
            X509v3 Authority Key Identifier:
                keyid:87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:64:0e:54:e6:dd:08:be:1e:1f:18:1d:4b:fc:3c:38:47:1d:
         9d:ab:5a:a3:11:87:51:3d:78:5d:a3:19:10:3b:c6:5b:e5:83:
         15:6f:f3:5e:11:eb:a4:f3:dd:f9:2e:5d:4d:be:12:90:fc:1c:
         30:f9:33:89:62:f6:67:1b:59:fd:cb:4f:d1:6e:a2:5f:be:66:
         93:3a:bd:e8:63:46:62:2d:35:58:20:03:35:7a:a0:b9:5c:42:
         ae:9e:5f:8b:ef:fd:a8:4e:92:bc:c4:af:0b:46:ae:84:35:4e:
         f9:4d:be:de:1c:ca:91:71:65:47:e5:d0:1a:7f:2a:56:74:4c:
         14:a4:79:0f:1c:1a:85:b1:59:de:e2:3b:93:54:69:2d:16:1a:
         7f:96:ac:b9:ef:76:5f:9e:62:3d:e5:2d:f1:c5:27:89:bc:96:
         b5:3a:fc:11:9e:d2:52:3b:c2:96:8b:04:cc:3e:2e:31:8b:6f:
         ed:65:74:26:cf:5a:c2:d3:4a:89:d9:86:35:4d:2c:c0:8e:1d:
         62:0e:17:78:98:58:cd:a8:c4:fe:02:ff:b6:db:0d:e3:b5:22:
         bd:58:7b:63:82:57:a7:2c:07:66:d5:83:55:c6:0c:5b:02:8e:
         ab:c1:e4:72:ad:33:29:9a:9f:c4:80:6d:c5:22:36:69:2e:b3:
         ca:54:55:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:30:04 2025 by rpki-client