Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft
File:                     1pesTITI0RmFX1oM3aY13R44Xuc.mft (raw, json)
Hash identifier:          6wlJ1pn0BsypXx344Mnt6aiLBDMO3yKBV0R9dyH0B5c=
Subject key identifier:   73:FB:CA:AD:59:93:7A:02:ED:64:03:78:EC:F0:44:B2:4F:E6:3D:12
Authority key identifier: D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7
Certificate issuer:       /CN=A918A9FC/serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7
Certificate serial:       34C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft
Manifest number:          34B8
Signing time:             Sun 10 Aug 2025 14:59:20 +0000
Manifest this update:     Sun 10 Aug 2025 14:59:20 +0000
Manifest next update:     Sun 17 Aug 2025 14:59:20 +0000
Files and hashes:         1: 1pesTITI0RmFX1oM3aY13R44Xuc.crl (hash: PTMalPDwFwAVdkCrQz1YG1YcNcdeCsg11vbGx61jAkg=)
                          2: 7859AE6A0B5511EABCBC343DC4F9AE02.roa (hash: jWpGewbGAxCVZEy9uZnR7Tfw1mCynOwqfq2TLC2QUUM=)
                          3: EADCDA1C8D9611EEBE392A3CC4F9AE02.roa (hash: KB0yl0ZQRg2b/pl7UMxerf5AoFGQw8HVHTGUQ+jATl8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl
                          rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13509 (0x34c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A9FC, serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7
        Validity
            Not Before: Aug 10 14:59:20 2025 GMT
            Not After : Aug 17 14:59:20 2025 GMT
        Subject: CN=6898b3c8-917c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b1:fe:f8:af:31:45:d4:c7:6f:58:19:6c:93:
                    d3:15:89:e5:57:f6:5e:4d:4c:f6:2f:7b:3f:1e:93:
                    79:92:c0:94:2a:cc:e1:5b:5c:8c:2c:9d:15:8b:26:
                    14:aa:32:95:75:77:56:b3:19:e7:18:76:ad:2d:48:
                    72:68:06:9c:03:7f:44:89:aa:bb:21:7b:6d:3b:38:
                    31:a2:fb:03:31:1d:b0:57:20:09:4b:98:32:b0:bc:
                    02:bd:f3:dc:3a:ee:e7:5a:72:c0:91:8d:ce:3c:8f:
                    be:75:48:24:54:60:26:df:b2:93:81:f4:72:49:6a:
                    04:89:09:15:73:63:14:06:f2:3c:b0:5f:d9:d3:d1:
                    64:49:72:3a:47:cd:b4:c7:4d:38:b6:0d:00:ef:e5:
                    a0:bb:ca:22:ce:8b:68:89:8b:27:f9:04:a6:54:f7:
                    5b:0a:72:a1:79:1b:b0:77:b7:dc:55:40:f4:b6:20:
                    7e:17:06:e6:35:b0:2b:05:29:b1:08:cc:c4:f8:0c:
                    b4:23:c8:bf:45:66:d7:79:40:49:ce:1f:f9:1e:52:
                    e1:de:d7:08:9d:a2:84:4b:5d:92:76:ef:97:c2:16:
                    05:f4:88:ab:01:4d:0a:e0:ba:43:c5:cd:31:68:75:
                    28:5d:e3:a5:97:e0:ec:c5:ed:17:cc:1d:69:f2:09:
                    94:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FB:CA:AD:59:93:7A:02:ED:64:03:78:EC:F0:44:B2:4F:E6:3D:12
            X509v3 Authority Key Identifier:
                keyid:D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:16:be:38:80:f3:86:11:64:11:3e:6b:38:af:c0:b0:08:f7:
         40:6f:5a:a8:76:4f:01:75:02:10:23:5e:6e:59:1e:a6:ff:61:
         db:35:4b:bd:00:5e:fc:76:c5:0e:e3:d6:fc:fa:88:65:3a:4c:
         45:28:a2:19:45:c3:be:86:7d:a4:b6:9a:a3:3d:7b:80:2e:b0:
         20:7b:33:5d:18:70:ed:b3:f1:bd:02:f2:fd:60:95:25:d2:54:
         fd:a6:0e:24:1e:28:42:73:59:7e:79:6c:92:93:e2:11:e7:40:
         ba:7e:da:71:36:4e:0b:8b:3f:ab:30:98:c3:51:27:1f:47:de:
         07:f0:14:52:f8:0c:df:e3:0f:da:08:71:85:44:7e:26:33:37:
         65:ad:9a:63:ea:e5:76:82:9e:ee:17:1c:9c:ea:91:3d:6f:27:
         53:2c:55:4f:67:00:b8:08:f3:6b:59:d6:67:5f:24:5a:ee:7f:
         91:f1:17:32:72:22:90:9f:34:13:40:b0:2f:f9:c3:7f:8d:fa:
         b8:01:6a:25:33:4b:41:a5:4a:1a:2b:05:6a:8d:0a:fa:63:41:
         c5:d4:d5:51:ba:16:2b:0e:ae:44:91:9b:fe:22:b7:45:f5:48:
         9f:af:3d:1d:b9:63:ed:83:01:5b:a6:a5:55:3a:03:be:0e:1e:
         23:5b:7f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:18:14 2025 by rpki-client