Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
File:                     pN7tlZPlkTA6mwOYBh_o71GGZco.mft (raw, json)
Hash identifier:          Zqg4x+h33vRX2NlcB2Jcg2HMduUF2LvTuzge62wXSrY=
Subject key identifier:   0D:B9:A4:76:15:FC:35:DA:47:B2:D4:E2:70:EA:94:7A:9B:E9:CB:42
Authority key identifier: A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA
Certificate issuer:       /CN=A918CABF/serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA
Certificate serial:       015D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
Manifest number:          015A
Signing time:             Fri 08 Aug 2025 19:30:48 +0000
Manifest this update:     Fri 08 Aug 2025 19:30:47 +0000
Manifest next update:     Fri 15 Aug 2025 19:30:47 +0000
Files and hashes:         1: pN7tlZPlkTA6mwOYBh_o71GGZco.crl (hash: 1CWD5byVVMlLDzfcki1wxbOD4ikQoYdTmALH2zsyYiU=)
                          2: E12607CE6F0411EEA5298939C4F9AE02.roa (hash: 8l049HuRfYTZKVjmyHEuH/syy1lOm3iSGmRbwY8PSnM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl
                          rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CABF, serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA
        Validity
            Not Before: Aug  8 19:30:47 2025 GMT
            Not After : Aug 15 19:30:47 2025 GMT
        Subject: CN=68965067-690f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:96:cd:47:0f:85:c0:06:ba:08:b4:70:fc:39:
                    6d:0f:15:8f:31:90:e5:28:54:f6:27:4f:f0:3a:62:
                    b4:de:41:fa:4c:1b:9c:19:5f:92:b5:73:89:98:b9:
                    3d:ef:ff:b6:d1:b1:3b:96:ed:2c:90:3b:b4:2f:5a:
                    9c:eb:6c:91:62:7f:e1:4b:6e:a6:ac:fb:cf:b1:43:
                    05:55:bd:5e:8c:e4:a8:1e:ff:8a:ea:a7:2c:fb:0f:
                    15:62:d6:cb:2b:c8:5e:79:47:2d:19:be:a9:85:43:
                    93:11:c5:9b:f7:10:28:08:82:e8:7c:2c:c6:90:00:
                    a5:63:67:71:21:42:d6:90:66:14:b7:f8:ac:85:d4:
                    ab:a4:f8:79:6b:45:8f:4e:c3:92:f2:20:5b:2d:d1:
                    b9:96:46:2f:70:57:13:37:32:10:ae:0c:0f:75:ba:
                    f1:a6:f6:26:c2:56:1a:bf:cc:65:19:ef:ea:33:a6:
                    b3:d0:05:44:bb:b5:b1:0e:ed:ac:7a:ce:91:db:69:
                    c0:25:e3:99:c2:a7:5e:52:84:bc:25:82:64:16:9d:
                    3e:da:96:be:6d:4b:b7:51:be:c1:9b:79:8a:35:d2:
                    87:f3:fd:66:ba:0d:bc:be:9b:0e:79:85:f9:54:98:
                    3d:bb:b6:86:37:c9:2d:ad:c5:0c:60:c5:87:e8:26:
                    bf:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B9:A4:76:15:FC:35:DA:47:B2:D4:E2:70:EA:94:7A:9B:E9:CB:42
            X509v3 Authority Key Identifier:
                keyid:A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:b3:de:10:5d:b2:a5:0d:08:e1:0b:f4:08:0a:d1:ec:6b:5f:
         25:9f:cd:57:9c:75:dc:6a:0c:05:bb:45:64:61:5c:eb:99:1d:
         71:78:2a:0d:71:11:b3:68:97:67:53:46:cd:ca:04:f5:b9:1e:
         ac:06:fe:2f:85:76:92:85:5f:3a:60:3a:36:6a:b3:20:17:53:
         5a:37:18:8e:50:a2:78:a4:2f:01:52:d8:1c:d1:3f:fb:ab:5b:
         c9:82:0e:8c:78:04:b8:ef:56:84:5b:c0:d6:1e:2b:07:0d:33:
         99:f2:de:33:3f:b8:da:89:ce:5b:4e:fa:b9:26:9c:46:20:09:
         1c:94:a0:d5:d7:5b:46:63:93:97:72:4e:2b:cc:9f:4b:5a:45:
         23:72:7c:32:ee:a5:ac:9b:b7:36:d8:1c:5c:f3:8d:87:9d:c6:
         a1:8f:b7:21:56:4d:da:c4:6b:e1:21:70:bf:c9:84:6c:41:03:
         af:81:26:a9:50:0e:8e:68:d2:af:de:9f:e7:d3:e3:5a:86:f6:
         be:06:bb:09:40:21:e4:ba:96:7a:3d:10:e5:6b:ce:76:4f:50:
         64:26:ee:92:0d:b4:ff:0c:7d:78:d8:09:28:05:6c:7c:6e:05:
         e0:ba:05:df:0a:69:65:21:53:92:13:26:78:3c:89:5b:f8:07:
         99:6a:90:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:46:11 2025 by rpki-client