Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
File:                     l_m5BihHZTCOwmiFXVY9q5GGMFs.mft (raw, json)
Hash identifier:          DcX9uh6bf+Js9TxvX+21ToyJVnWMxa1/eKq8ytUkzEs=
Subject key identifier:   D3:ED:8C:8D:F5:78:62:29:A2:97:D3:06:39:C3:2C:A6:F5:B7:33:AD
Authority key identifier: 97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B
Certificate issuer:       /CN=A918E4E6/serialNumber=97F9B906284765308EC268855D563DAB9186305B
Certificate serial:       0C97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
Manifest number:          0C91
Signing time:             Wed 06 Aug 2025 18:24:08 +0000
Manifest this update:     Wed 06 Aug 2025 18:24:08 +0000
Manifest next update:     Wed 13 Aug 2025 18:24:08 +0000
Files and hashes:         1: l_m5BihHZTCOwmiFXVY9q5GGMFs.crl (hash: 5ePbIUIg11SMDMSjj3802HOMjFFZ2CSc5c68BT9TVfk=)
                          2: 9C9660D4FC6E11E9BC6D4822C4F9AE02.roa (hash: xyYlJncaSUNWmGDmUFY6Ptm1YpyAyeIUKxqpTgZgQ8c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl
                          rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 18:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3223 (0xc97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E4E6, serialNumber=97F9B906284765308EC268855D563DAB9186305B
        Validity
            Not Before: Aug  6 18:24:08 2025 GMT
            Not After : Aug 13 18:24:08 2025 GMT
        Subject: CN=68939dc8-eaac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7b:e4:0a:07:72:a9:ac:bb:8f:94:3c:3c:a7:
                    41:83:ee:3e:06:76:6f:33:9e:42:24:07:37:58:55:
                    2d:a1:8f:81:44:05:c4:e3:27:84:40:6e:af:86:c0:
                    7c:cf:47:b8:b9:6d:6f:c4:b1:15:51:1b:73:36:8d:
                    6f:c9:c2:96:1b:ae:7d:eb:21:cf:09:92:0b:38:59:
                    cc:2d:72:d9:c2:fc:65:66:46:1c:0f:b3:85:81:9b:
                    85:ee:73:99:4a:5e:4f:7c:07:23:92:ce:4f:e0:c0:
                    eb:b8:18:fa:a9:89:ef:03:d5:9c:d3:02:9b:04:88:
                    49:30:f4:24:9d:d7:5a:88:07:08:a5:3a:1d:16:8b:
                    15:d5:47:cc:19:b0:7e:27:0c:1c:02:fb:31:4d:d1:
                    22:50:6a:bd:ad:20:58:50:c2:cb:46:83:2d:85:f1:
                    50:73:4f:9b:f4:71:fd:92:85:6f:3d:4b:6c:84:b6:
                    4b:d7:93:8d:23:5d:2d:62:02:c3:13:f8:9c:ca:e4:
                    d2:2f:19:b1:f3:4f:26:86:bb:1f:06:ef:2d:97:66:
                    17:ac:f6:52:3e:ee:3e:84:30:0e:fd:23:13:27:a9:
                    eb:e0:24:98:ed:81:7b:1e:db:e2:ed:a3:8c:c2:5c:
                    62:d0:08:b0:e4:ed:81:25:be:77:97:63:85:da:f2:
                    5f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:ED:8C:8D:F5:78:62:29:A2:97:D3:06:39:C3:2C:A6:F5:B7:33:AD
            X509v3 Authority Key Identifier:
                keyid:97:F9:B9:06:28:47:65:30:8E:C2:68:85:5D:56:3D:AB:91:86:30:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_m5BihHZTCOwmiFXVY9q5GGMFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4E6/2B3B2FCEFC6D11E98FC2C91CC4F9AE02/l_m5BihHZTCOwmiFXVY9q5GGMFs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:aa:81:6c:76:db:d5:de:89:c8:2d:7b:96:54:99:8b:df:03:
         f9:12:bb:52:0a:d9:1b:a3:17:d4:74:05:27:2e:21:33:01:ae:
         8a:90:55:43:4d:21:2a:ac:fa:83:09:b5:ac:b4:05:dc:f1:b6:
         99:4d:a4:f0:6e:27:1a:a0:16:47:2a:39:f1:63:ee:18:47:1e:
         49:f7:78:fd:dd:9c:7a:a7:4a:9b:be:50:01:c6:88:62:cf:f3:
         13:8d:9f:6a:2d:69:5f:a4:d1:44:69:8d:c8:c6:d1:57:3e:9e:
         52:b0:cf:7e:75:63:d4:8b:42:f6:76:c9:cf:bf:08:d9:89:ec:
         76:f9:45:f7:12:0b:c6:32:da:de:76:e8:d1:c3:db:8a:5b:0a:
         e2:64:0f:49:43:b5:e4:df:f5:46:53:69:01:59:26:39:e2:e3:
         d8:a0:6f:fa:81:d4:a6:9e:52:92:18:9d:93:b9:37:d8:5b:b3:
         da:97:b4:ae:4d:29:e4:86:86:76:bf:6e:53:da:dc:31:f5:37:
         8a:d8:8a:79:7a:44:9f:02:5e:90:53:da:ca:61:fc:89:79:52:
         5c:7c:61:f7:e2:7d:07:b5:41:cc:a6:c2:da:c7:9a:8c:63:92:
         1e:e9:b8:76:3c:30:0e:0c:e4:71:3d:45:af:ba:8d:90:f6:45:
         c1:9b:21:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:08:20 2025 by rpki-client