Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft
File:                     Pa__vH6RLp_80qLg2SCOvJlwmyI.mft (raw, json)
Hash identifier:          KQvq6dTMq31a+svPO1M8+EFWoxqpHFo0bQ/VSrsWmi4=
Subject key identifier:   70:E0:C7:DC:BF:55:12:44:C6:FE:F1:2F:9B:A5:89:7E:2C:C7:0F:2F
Authority key identifier: 3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22
Certificate issuer:       /CN=A9179B50/serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22
Certificate serial:       063A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft
Manifest number:          0619
Signing time:             Mon 04 Aug 2025 23:14:14 +0000
Manifest this update:     Mon 04 Aug 2025 23:14:13 +0000
Manifest next update:     Mon 11 Aug 2025 23:14:13 +0000
Files and hashes:         1: Pa__vH6RLp_80qLg2SCOvJlwmyI.crl (hash: HLZgVLwd+iQ11znmmhNco62eSppIkvMtQkWLNfWr7OA=)
                          2: 5DE13E6AAF1211EB8138312CC4F9AE02.roa (hash: T0wdRehMbf/c1n+Lvi9w5jCq5pwGOxzzrXN8PvqF9IU=)
                          3: 5D49C24CAF1211EB8138312CC4F9AE02.roa (hash: t0PgB3trny3UGBtbQPXZ2oEACZpm7wPfgQYguo35iOE=)
                          4: 0CDA881EAF0311EB96FC344BC4F9AE02.roa (hash: jjYMFpQBMoseoddvz1xiuozNsn+9+akhZ3LH2vRoBv4=)
                          5: 96D7EE96AF0111EB8FE37446C4F9AE02.roa (hash: XobrFToMUwwxQ4hI6JoyUOwAGYgM+9dP9JteDhsTr+c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl
                          rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 23:14:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1594 (0x63a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179B50, serialNumber=3DAFFFBC7E912E9FFCD2A2E0D9208EBC99709B22
        Validity
            Not Before: Aug  4 23:14:13 2025 GMT
            Not After : Aug 11 23:14:13 2025 GMT
        Subject: CN=68913ec5-b643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:17:a2:3b:b4:85:0c:6e:45:d7:aa:d7:e0:
                    9c:b8:04:3a:c6:72:e5:c9:e1:c3:b1:0f:22:bc:35:
                    01:13:3a:0d:f5:e0:6c:b8:82:b4:de:21:c1:00:ee:
                    b4:88:7a:ce:fb:dd:ba:b4:4d:ff:e5:3e:71:7e:4d:
                    5c:11:52:1c:f2:e3:43:65:ec:3c:a7:6b:a0:79:58:
                    b4:9b:c3:90:32:a7:97:86:2f:cd:83:1e:6d:6b:db:
                    a6:c0:73:16:6d:79:35:1f:bf:46:79:25:27:94:d6:
                    04:b2:08:a7:d5:d0:c6:11:a3:e6:b0:d4:38:58:0d:
                    b4:13:25:0b:1a:06:3c:2a:50:dc:7b:cd:88:63:dc:
                    92:d7:ec:92:33:1f:4e:5c:37:37:77:fe:33:43:38:
                    03:90:9e:89:f6:35:63:ec:47:0b:c7:25:69:52:09:
                    c9:c6:88:15:ee:a6:a8:ad:46:78:7c:76:86:ae:63:
                    2c:7d:0e:51:52:b6:b5:10:94:cd:d8:08:fe:f0:c5:
                    c8:98:dc:30:d2:86:2f:04:e5:9b:91:fa:1e:9e:c1:
                    09:07:38:1b:f2:1b:20:63:91:53:14:e0:20:8a:f2:
                    ce:43:51:dc:5f:d0:0d:b2:55:19:c2:d8:3f:30:43:
                    59:d2:02:ce:5d:12:58:a6:c9:de:2d:1b:9b:da:0a:
                    7f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E0:C7:DC:BF:55:12:44:C6:FE:F1:2F:9B:A5:89:7E:2C:C7:0F:2F
            X509v3 Authority Key Identifier:
                keyid:3D:AF:FF:BC:7E:91:2E:9F:FC:D2:A2:E0:D9:20:8E:BC:99:70:9B:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pa__vH6RLp_80qLg2SCOvJlwmyI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179B50/C6C049B2AEFE11EB8093263EC4F9AE02/Pa__vH6RLp_80qLg2SCOvJlwmyI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:a3:8e:1e:ec:82:14:d5:9b:3c:8b:4c:0a:02:73:ff:11:df:
         d6:1e:55:7f:3e:e3:7a:b9:0a:fc:6a:db:44:09:8c:76:dd:74:
         bb:4b:3a:ec:8f:dd:b2:62:4a:94:e6:20:17:3b:f2:f5:3e:53:
         7f:96:b9:e0:c9:c7:2a:2a:20:27:01:a6:58:f4:d7:e9:ab:7c:
         65:f2:a4:69:4a:1a:d9:46:c2:27:3e:57:9e:47:3b:76:35:a5:
         d7:e5:9d:46:5c:b5:d9:18:1e:ca:c5:2d:6e:00:d5:e0:7b:4a:
         71:e7:0f:10:81:eb:2f:22:d7:30:32:47:1f:c9:14:68:d6:94:
         d3:3b:3f:06:18:99:71:13:fc:e3:06:42:0c:eb:4e:ba:c0:37:
         fc:a5:33:62:5d:b2:06:cb:e3:a9:05:08:79:da:a9:ca:0f:dd:
         f0:0a:ad:d2:f2:b9:0e:5f:c9:38:eb:da:92:5c:fe:8c:40:62:
         3c:d3:9f:0d:2b:92:5c:3f:2f:ca:13:cf:80:91:6e:dd:65:9c:
         91:0e:6e:57:d1:48:62:9b:91:c1:78:82:e7:5c:13:47:3e:35:
         76:d9:2b:e0:d8:01:88:82:e6:ed:6b:74:d4:1d:03:a9:43:be:
         51:71:28:ae:5a:b5:c6:d7:38:11:3d:69:8b:c4:71:03:bb:16:
         e9:6a:fc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:11:52 2025 by rpki-client