Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
File:                     jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft (raw, json)
Hash identifier:          RVbipZcPGIoUqjWOwpXoaJyuWcOfjhAdrV1+Iv5xFRE=
Subject key identifier:   12:A6:CD:9E:AB:48:DC:D4:C6:C7:C4:2F:0E:0F:71:71:84:FF:2A:A5
Authority key identifier: 8E:1B:71:86:86:41:78:48:D9:D3:E6:22:63:C6:E0:D3:04:BD:37:EC
Certificate issuer:       /CN=A918DF0C/serialNumber=8E1B718686417848D9D3E62263C6E0D304BD37EC
Certificate serial:       079F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
Manifest number:          0798
Signing time:             Sun 10 Aug 2025 21:27:27 +0000
Manifest this update:     Sun 10 Aug 2025 21:27:26 +0000
Manifest next update:     Sun 17 Aug 2025 21:27:26 +0000
Files and hashes:         1: jhtxhoZBeEjZ0-YiY8bg0wS9N-w.crl (hash: V8Ix8oiKA/XtAY8NNiOSgtut/J2dJGb2D1cjtZJtQeE=)
                          2: 181D7270184711EBAD14343FC4F9AE02.roa (hash: 5QwGgc3JqdXZSTvBXI4oSH3gmsCO0bHwVogWGbZDobI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.crl
                          rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1951 (0x79f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DF0C, serialNumber=8E1B718686417848D9D3E62263C6E0D304BD37EC
        Validity
            Not Before: Aug 10 21:27:26 2025 GMT
            Not After : Aug 17 21:27:26 2025 GMT
        Subject: CN=68990ebe-a051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:65:d8:ca:9c:55:3b:72:b5:bd:1f:66:5f:f1:
                    2b:7b:63:a1:65:2f:98:10:ec:0f:c2:ad:98:14:da:
                    57:7a:80:66:ef:85:43:8e:41:32:c2:5c:4a:9e:2f:
                    84:89:41:f9:88:8f:ca:7d:37:c8:76:ba:6e:d4:ca:
                    61:b1:26:79:9c:b6:a9:ea:34:fa:47:86:3a:a5:c6:
                    16:99:fe:9e:99:4a:2d:cc:62:fb:32:ed:46:59:26:
                    e2:32:59:0b:57:b7:e4:2e:71:5c:49:10:7f:a8:87:
                    d0:b5:17:89:ca:54:15:c9:89:1d:41:b1:91:18:ed:
                    39:1e:e3:16:52:c1:2e:80:30:db:d4:08:dd:87:1b:
                    19:2d:b8:09:1e:9e:ec:93:30:f7:35:0c:bb:dc:c1:
                    d2:a2:c2:42:bc:a7:7f:92:ab:3e:96:28:f5:56:cd:
                    b1:75:82:29:bf:69:50:4c:7f:7b:15:66:53:46:29:
                    3e:01:42:d3:56:a5:25:c3:84:3e:ac:70:eb:0d:70:
                    f5:b1:ea:32:9c:eb:7e:86:92:dc:e2:78:8f:d4:a2:
                    3f:f7:78:1e:1a:12:9d:16:21:75:e0:64:49:bd:ee:
                    f7:b7:e1:6b:18:11:b5:54:08:2c:bc:95:a2:6d:20:
                    ff:57:6d:64:1b:9f:f5:c1:94:13:22:4a:06:9b:75:
                    63:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A6:CD:9E:AB:48:DC:D4:C6:C7:C4:2F:0E:0F:71:71:84:FF:2A:A5
            X509v3 Authority Key Identifier:
                keyid:8E:1B:71:86:86:41:78:48:D9:D3:E6:22:63:C6:E0:D3:04:BD:37:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:7c:b8:8e:22:03:16:bc:fc:f8:f5:6b:2f:32:98:25:69:d6:
         d8:0e:94:61:8d:0b:a1:8c:0a:c0:ce:ba:c1:c0:23:59:a1:d7:
         06:96:89:e3:82:8c:63:44:0c:bf:73:b6:15:c3:bd:65:45:fa:
         f4:fc:94:87:e1:d5:6a:82:52:ca:10:45:3f:5e:3d:d5:c0:e3:
         cf:05:3e:40:ce:96:3b:a7:2a:ca:2e:72:a3:f8:43:bc:23:28:
         64:3b:ae:f2:a7:c0:f8:0d:c2:5d:38:83:4d:1a:71:86:50:74:
         ab:be:7f:1e:ea:fd:d5:eb:c8:5c:55:70:f2:68:82:5e:f8:43:
         a7:c0:3b:ca:ce:fd:38:d8:9a:4d:74:42:0d:53:d4:4a:19:d3:
         71:d5:ca:08:ec:a5:d2:3a:10:a8:76:0b:a9:89:9b:c3:e1:36:
         93:7e:21:3a:52:a3:07:f9:45:67:02:c4:b9:aa:ef:11:00:7e:
         10:3e:aa:07:6b:c4:31:f7:dd:8f:44:0d:4f:ca:7e:af:74:0e:
         e9:92:8c:5a:1f:c3:92:66:0c:a1:9d:51:81:26:29:57:fd:68:
         90:4a:1b:aa:fc:4a:4f:7f:50:b6:b2:74:0a:2a:8e:8c:92:5d:
         0b:4c:a4:0a:1e:05:b8:0c:fa:0a:b5:05:fe:93:a8:b0:35:20:
         7c:61:35:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:43:29 2025 by rpki-client