Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
File:                     cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft (raw, json)
Hash identifier:          6nrLWzC0e0u6422S7MdlGcEyPjzNO0AK9GOwEJG/H0s=
Subject key identifier:   0E:10:F9:64:14:64:97:3C:F9:3B:B3:CA:AC:5A:85:F6:5A:74:92:7A
Authority key identifier: 70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E
Certificate issuer:       /CN=A918B936/serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E
Certificate serial:       2129
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
Manifest number:          2129
Signing time:             Fri 08 Aug 2025 16:01:19 +0000
Manifest this update:     Fri 08 Aug 2025 16:01:18 +0000
Manifest next update:     Fri 15 Aug 2025 16:01:18 +0000
Files and hashes:         1: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl (hash: odrcv93ioZ8P6cmPKdVfvwTQQOUzgn7RjLJikJDkY70=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl
                          rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8489 (0x2129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B936, serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E
        Validity
            Not Before: Aug  8 16:01:18 2025 GMT
            Not After : Aug 15 16:01:18 2025 GMT
        Subject: CN=68961f4f-a02c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:a4:5c:7b:21:4b:9d:b4:8c:6e:28:5b:3f:6e:
                    6f:1f:2e:5e:5d:38:2f:04:56:41:ed:09:e9:db:64:
                    f1:c1:a4:e2:2f:f2:99:9e:f8:f8:ac:cd:f6:26:57:
                    cb:48:b9:17:f2:c0:07:64:73:6e:9c:74:3c:c5:ec:
                    80:12:21:fe:02:4e:0d:b7:87:99:3a:94:6e:0a:37:
                    96:f8:d0:87:4b:f9:6f:29:28:e7:34:91:15:92:2a:
                    cd:8c:73:95:f8:2f:3a:48:b5:47:58:20:10:57:9f:
                    fa:7c:98:a6:93:d0:b6:2e:d1:c1:f6:c4:15:e8:0f:
                    91:13:78:61:5d:75:f2:9e:9f:99:e7:04:f7:90:a1:
                    50:22:3d:19:1f:11:99:81:83:58:85:08:c6:ae:39:
                    86:1d:57:40:77:0d:e6:98:8e:05:90:8a:da:9a:14:
                    e1:ea:7f:45:da:71:4c:d1:a8:12:69:01:f2:44:f7:
                    85:98:13:2c:ed:f3:67:22:b5:9b:44:ad:4c:46:7b:
                    43:3d:74:e0:fd:20:7f:55:cc:65:35:b4:9c:3d:56:
                    36:ce:31:0f:2e:43:89:ee:bd:39:58:a7:99:4c:73:
                    36:75:f2:8d:c6:db:89:02:e7:67:60:1e:a7:a4:96:
                    96:ec:09:9a:2e:1b:b6:15:e9:1c:d8:b8:4b:8e:0c:
                    28:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:10:F9:64:14:64:97:3C:F9:3B:B3:CA:AC:5A:85:F6:5A:74:92:7A
            X509v3 Authority Key Identifier:
                keyid:70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:33:d9:db:8f:59:03:d1:7e:ed:b4:5a:99:0b:b4:87:67:37:
         bf:f8:55:12:89:4b:4c:2a:25:39:30:c4:a7:f2:2f:ef:07:26:
         d7:38:4d:9c:6c:2b:3e:48:c1:9a:1e:a2:2f:1f:4b:0e:3c:10:
         b4:09:f6:d9:fa:97:c1:15:68:77:3e:e8:cd:8a:cb:9c:c1:8d:
         0a:03:26:9f:8a:72:ed:33:dd:07:b5:cb:0a:27:e1:07:0c:e5:
         f9:e9:3d:90:4a:0f:cd:bc:fb:6c:c7:c3:c4:7a:86:1b:f1:b4:
         64:9f:90:dc:6e:8f:4d:7d:59:03:b1:14:98:d8:d4:ec:23:fc:
         12:7e:6b:d4:ad:45:b9:fa:e1:0b:59:f3:df:73:2f:18:49:bf:
         ee:8f:e6:ef:c0:66:f5:53:ae:83:a8:76:9b:e9:12:cb:81:e8:
         eb:1c:b4:0c:a9:c9:bf:4d:57:dd:24:c9:8d:e9:50:0d:16:17:
         68:ea:5e:fd:b5:48:1e:2e:f1:b8:db:95:b2:90:ef:d8:31:7b:
         79:07:8e:50:2f:a2:94:9d:8b:3a:8d:0c:a0:e7:91:de:1d:61:
         03:fa:31:ee:f3:c2:09:5c:91:96:07:0d:ce:d6:b8:ed:06:30:
         3f:96:0b:fe:f5:ed:56:ed:d1:e9:2d:a7:24:f2:ff:c8:a6:ec:
         d5:ee:96:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:28:50 2025 by rpki-client