Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
File:                     0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft (raw, json)
Hash identifier:          HHsS8b8/vHDQP9GOU7HuOqprQ2q2ff8+94pmBYJj/mo=
Subject key identifier:   0D:E4:74:3C:37:0C:15:45:AB:BE:9F:62:44:E9:58:D1:B7:01:72:53
Authority key identifier: D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16
Certificate issuer:       /CN=A9143684/serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16
Certificate serial:       018E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
Manifest number:          018E
Signing time:             Fri 08 Aug 2025 15:15:19 +0000
Manifest this update:     Fri 08 Aug 2025 15:15:18 +0000
Manifest next update:     Fri 15 Aug 2025 15:15:18 +0000
Files and hashes:         1: 0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl (hash: ki/L7C3MbtRP++I5D4DvHFC4PD1yk22vz6lThotGO1w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl
                          rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143684, serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16
        Validity
            Not Before: Aug  8 15:15:18 2025 GMT
            Not After : Aug 15 15:15:18 2025 GMT
        Subject: CN=68961486-d8bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e6:f5:b3:99:da:f8:20:98:fa:1f:b9:9b:25:
                    54:d3:9d:78:71:31:93:69:93:77:96:1d:36:1f:00:
                    0b:73:e8:10:b9:4c:25:18:6b:bf:96:82:cb:6e:6f:
                    fd:e7:e6:1a:80:90:32:55:ff:7e:8b:a2:b7:32:1d:
                    42:a4:74:80:77:19:ea:71:10:b4:11:8e:7d:f6:b9:
                    ca:5a:d9:5b:7f:35:60:aa:0a:03:60:8d:b9:83:14:
                    01:29:1e:39:00:96:30:25:76:95:62:41:e1:ee:94:
                    4e:99:e1:5d:67:58:99:17:4b:dc:69:a9:fb:3e:0c:
                    3a:1d:29:bb:a3:07:dc:8f:5c:30:bf:fb:5d:60:3f:
                    31:66:81:96:11:b0:2d:ac:ae:95:a7:b1:69:02:45:
                    62:49:a0:6d:45:1c:ff:22:44:e7:90:2f:a2:13:14:
                    99:19:7e:dd:63:a4:cb:1f:0b:51:1b:03:9f:9b:c9:
                    94:61:22:e3:08:ad:08:ec:da:65:49:39:2e:01:fd:
                    8e:cc:97:f1:4e:33:c3:9a:5a:f1:e9:d5:9c:9b:78:
                    55:76:42:23:8b:12:d2:a7:7d:6b:2e:d2:28:66:b3:
                    b7:db:72:8d:34:b0:06:7c:57:46:4e:60:4b:66:97:
                    30:df:91:93:21:58:d9:ed:6d:1e:7c:45:ae:88:7c:
                    df:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E4:74:3C:37:0C:15:45:AB:BE:9F:62:44:E9:58:D1:B7:01:72:53
            X509v3 Authority Key Identifier:
                keyid:D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:c3:da:ac:7b:f9:72:aa:6a:e8:c2:16:e3:19:f4:82:e2:8a:
         76:50:59:f7:4c:33:39:c7:f4:85:9e:3c:cc:eb:01:29:d3:a7:
         16:4e:29:4d:b0:14:ed:59:97:e2:eb:95:97:57:61:dc:39:01:
         72:f6:dd:83:ed:03:53:2a:ff:34:ba:02:d2:45:b6:b6:2f:47:
         5c:cc:0a:fb:6b:66:f5:2d:ad:6c:6a:a9:d9:40:42:dc:06:46:
         a1:0a:65:86:5c:41:32:46:9b:35:6e:a6:d2:cd:eb:1c:67:e7:
         82:ae:cd:70:ac:13:83:4d:a1:7e:62:47:b2:15:09:29:d1:2f:
         25:27:7b:4c:e6:90:e6:27:4c:98:f9:6d:93:1b:56:5e:70:25:
         ea:2e:75:e1:0b:e0:d3:da:66:34:67:ad:e7:7b:3a:a4:8b:c2:
         0b:87:d9:cc:d7:94:d9:b8:34:c2:15:f7:0d:e4:53:2d:ee:4d:
         05:b7:1b:2e:25:aa:1c:98:97:b2:14:a4:27:44:37:61:cd:24:
         aa:b5:fc:4d:ac:81:03:64:0f:b0:60:a0:d6:16:0c:c5:d6:10:
         2d:4a:40:4a:ee:49:92:ad:cb:2b:62:77:9c:0d:4a:1f:33:5f:
         cd:38:98:2b:e1:b8:c6:34:6b:bb:5f:a8:ca:ff:26:6e:f8:ae:
         25:4f:51:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:14:05 2025 by rpki-client