Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
File:                     _qS5bzmD92nHM5dFbBK5D2QkbHw.mft (raw, json)
Hash identifier:          4Jwl+fxDIg8Cr4nzghwp4wdVizDs7k9RRMoHzxNVtKw=
Subject key identifier:   D8:E2:30:0F:A4:7E:86:75:E4:BF:F3:AB:95:8A:6F:9F:3B:DE:78:CB
Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C
Certificate issuer:       /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
Certificate serial:       1882
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
Manifest number:          186B
Signing time:             Fri 08 Aug 2025 16:39:32 +0000
Manifest this update:     Fri 08 Aug 2025 16:39:31 +0000
Manifest next update:     Fri 15 Aug 2025 16:39:31 +0000
Files and hashes:         1: _qS5bzmD92nHM5dFbBK5D2QkbHw.crl (hash: 9AP+MYb0Uf3vj7pASkMEdHhSkXqUtDnrwz8fkIXAXXY=)
                          2: 8C3BBD78F0D611EDAF996E15C4F9AE02.roa (hash: N7dx64GJQaTD+hfotgNWy8WEHDuKcv63Y/iKVEUUUcc=)
                          3: C6454260AA9A11E7B4776E52C4F9AE02.roa (hash: 0pdtzVqkZfrRuKXWFlClUIrZtwjYq09u9Tu2fAJzA2k=)
                          4: 7F77220A143811EE97A64D19C4F9AE02.roa (hash: ifAfuqdkBihiiYwd3cqT6s5KTTI/lvGZWL7UrWL4Qzs=)
                          5: 5A8744D8143411EEAB1A5D73C4F9AE02.roa (hash: x8Y3lIEpnx3SAsHPEwwS/VLgFTVHt3ABZ23zAnhnfc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl
                          rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6274 (0x1882)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D36A, serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
        Validity
            Not Before: Aug  8 16:39:31 2025 GMT
            Not After : Aug 15 16:39:31 2025 GMT
        Subject: CN=68962844-de40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:da:12:29:70:c7:8d:7f:82:74:ca:e3:f9:af:
                    a7:c6:98:e7:39:d0:3f:55:dd:a7:bc:21:52:e5:3c:
                    89:7c:c8:7b:d4:12:1d:e7:25:b0:e3:85:6b:bb:f6:
                    0f:cc:96:39:ac:c3:ea:11:ed:06:0e:50:ee:3e:b7:
                    a5:e8:70:64:c8:50:4a:d9:c1:cd:a8:24:d9:5b:32:
                    49:56:d0:74:0f:71:a0:26:ab:0f:5f:03:54:12:5f:
                    31:55:1c:0e:43:56:09:fc:ac:d8:58:05:20:bd:c4:
                    37:b5:e1:57:83:e7:cf:0b:0e:c0:a0:b4:67:c8:b4:
                    86:82:80:c0:15:f6:32:9e:0f:ff:44:6a:c5:96:f0:
                    1f:43:61:d3:3d:e4:74:24:62:0d:f8:2d:c8:4e:7d:
                    49:d7:c1:79:5a:3b:0a:e5:14:1f:df:de:74:d7:c4:
                    13:a3:7e:36:46:f7:f5:67:e4:ab:a5:2a:55:c3:1c:
                    f1:84:2b:f9:3f:f9:6d:66:2e:50:7b:f6:76:cd:fd:
                    2b:08:f7:87:d5:57:8f:65:31:92:07:ef:4a:cc:02:
                    8e:1d:12:8b:00:78:f4:0f:c3:b3:bb:65:a6:bc:60:
                    73:dd:14:ce:92:b9:2e:a4:6f:eb:68:77:16:81:0b:
                    b9:d3:16:f9:0e:c3:79:19:0f:31:35:82:e5:83:84:
                    c7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E2:30:0F:A4:7E:86:75:E4:BF:F3:AB:95:8A:6F:9F:3B:DE:78:CB
            X509v3 Authority Key Identifier:
                keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a5:7a:8c:9e:d4:0c:9a:c5:4e:b8:e1:8c:09:79:36:c4:80:
         78:14:ac:c9:2d:0e:4a:f1:79:99:af:0c:0e:0a:24:e3:7e:5a:
         7d:0a:c4:3b:63:fd:01:0e:01:2a:b0:c7:95:fb:8b:92:4c:f5:
         32:b9:ee:db:33:ad:2a:cc:dd:7f:df:00:05:72:cb:24:f5:80:
         f2:90:2d:1b:f7:27:6e:07:f3:96:54:3d:0f:92:66:85:df:67:
         59:aa:e4:72:ab:76:f3:68:08:ff:c0:44:ce:d1:90:25:00:82:
         41:f2:4d:66:42:01:b9:75:f8:d7:0b:e2:f5:53:d4:0e:fb:7c:
         43:63:96:cb:ef:0a:52:fc:22:b3:fb:e1:42:5e:97:cd:c4:bd:
         17:a5:4c:15:70:3f:10:87:d9:6a:a1:fe:ad:14:92:f9:14:87:
         aa:fc:a3:50:84:53:3d:db:a3:5b:2c:fa:10:03:f3:ff:83:90:
         93:40:33:ca:40:55:aa:c0:92:a1:5f:73:49:79:e9:da:67:91:
         86:a5:43:ef:24:11:7f:7e:5d:58:b7:fc:74:99:6b:83:69:97:
         f7:9c:63:f4:80:4a:23:3d:e6:5a:72:a3:af:46:a5:aa:a0:e2:
         72:9c:f1:3e:e7:1e:e5:9d:05:47:29:7c:c7:f5:0e:b3:51:65:
         40:d6:f0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:57:33 2025 by rpki-client