Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
File:                     aEWjVwdX5r8sBIWsIXib_1AFHpo.mft (raw, json)
Hash identifier:          nweN5TxuGRzGso1rHE9Yzlq0aJq4IP8IGHZc/oghlk0=
Subject key identifier:   73:C0:DA:77:DE:1F:86:8F:87:0F:85:E3:89:1E:4A:7E:35:D8:93:FA
Authority key identifier: 68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A
Certificate issuer:       /CN=A913500A/serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A
Certificate serial:       016D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
Manifest number:          016A
Signing time:             Tue 05 Aug 2025 04:18:44 +0000
Manifest this update:     Tue 05 Aug 2025 04:18:43 +0000
Manifest next update:     Tue 12 Aug 2025 04:18:43 +0000
Files and hashes:         1: aEWjVwdX5r8sBIWsIXib_1AFHpo.crl (hash: slOXTyUmrAHEA9+DZdUdxOiMPmHok6Yiq0cR/IPSyaA=)
                          2: 0CE4B8C6474911EEA995D74FC4F9AE02.roa (hash: o8XeNpRnuUBlVWA6mPKxdSovFEQUWjBzrI7Rs+4BJAM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl
                          rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 04:18:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913500A, serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A
        Validity
            Not Before: Aug  5 04:18:43 2025 GMT
            Not After : Aug 12 04:18:43 2025 GMT
        Subject: CN=68918624-55a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:98:64:00:ab:58:40:b2:ff:dc:8f:11:2e:74:
                    ce:2b:3a:6c:5f:7e:f3:97:70:fb:ce:ea:26:77:85:
                    64:c2:1a:1f:27:26:f5:24:4f:30:a4:bb:b8:9a:bf:
                    c4:57:4f:ad:11:38:7a:b7:fc:80:db:97:46:dd:d0:
                    cf:f7:18:8f:61:9f:c3:01:89:2b:b9:a1:38:e3:2b:
                    d2:f2:f4:1a:0d:52:4e:ec:6a:61:20:f8:f2:f9:fb:
                    df:10:ef:d7:69:69:f8:cf:c9:5e:05:42:49:4a:d5:
                    81:6d:e6:c6:d0:3b:36:3b:ec:64:11:9f:4a:b0:24:
                    46:d1:f3:2c:be:35:68:6e:0d:22:c5:87:20:4e:a4:
                    bc:9c:0c:39:bd:5a:36:9d:e0:90:ff:a0:7d:3b:f8:
                    67:21:2e:d5:b1:83:bc:15:40:64:83:7b:a7:c2:2b:
                    eb:ca:3e:03:58:56:e0:35:51:22:04:22:50:18:f1:
                    84:86:55:21:57:62:5a:66:ef:70:f0:06:91:2d:e7:
                    f1:27:0e:80:a3:84:12:76:5c:56:4e:7f:ee:cd:ec:
                    e5:5a:c7:cc:69:55:f0:6b:42:5d:bf:91:da:db:08:
                    33:d6:ac:d0:68:8f:b0:28:d2:11:67:09:12:52:92:
                    f4:1f:c1:1e:fe:18:d0:5c:97:08:f9:ea:07:7c:ac:
                    47:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C0:DA:77:DE:1F:86:8F:87:0F:85:E3:89:1E:4A:7E:35:D8:93:FA
            X509v3 Authority Key Identifier:
                keyid:68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:1d:6a:e1:0a:57:2b:12:06:de:99:dd:a0:44:2a:3c:1e:58:
         a6:f1:03:99:2e:25:c8:a5:13:c0:25:c9:c8:28:24:ab:44:40:
         ce:19:44:68:68:02:ef:c0:d9:98:ac:92:17:c8:d4:81:63:91:
         e0:4b:1d:ce:85:3b:48:b6:c9:ba:11:fe:78:e1:8c:87:6e:c5:
         43:6c:cb:17:27:2d:76:aa:d2:89:28:14:a4:b4:3d:4c:21:4d:
         83:3b:3f:a1:aa:f2:68:67:70:72:4f:27:c8:a7:88:c0:ea:47:
         69:49:1c:78:b2:ee:31:83:14:cf:c0:e0:72:01:97:03:e1:25:
         6b:92:38:83:7b:f2:ad:2a:24:3e:84:5a:7f:9b:27:51:fd:5e:
         ce:a8:d4:96:9e:e6:a4:25:5b:91:e5:25:3d:b5:c7:f6:6b:54:
         59:a8:27:fd:11:65:65:40:c9:d8:ab:e0:ef:46:54:f0:dc:ec:
         35:9d:71:0b:56:ad:94:d3:29:7b:21:43:44:18:3f:ee:40:e1:
         53:d1:42:17:ed:0e:71:46:51:2d:d3:fb:34:37:5a:12:56:18:
         bc:39:fc:3d:c0:65:0a:7c:2a:c4:de:b7:cf:f9:be:49:22:9c:
         51:4e:d1:ef:eb:50:b1:9d:83:b8:1c:f5:6b:f6:de:6c:70:7d:
         6c:53:66:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:21:17 2025 by rpki-client