Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
File:                     s2MvNI2Zt8k-43IQ13M9KC8UWko.mft (raw, json)
Hash identifier:          3n8NEXdjj6PT4GgTWtoLYHIwwiQdQfWTXmmhyJSghec=
Subject key identifier:   31:8A:C1:FB:8A:F8:87:0B:C5:42:86:56:1C:72:25:07:D5:49:56:EC
Authority key identifier: B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A
Certificate issuer:       /CN=A918E74A/serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A
Certificate serial:       01C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
Manifest number:          01C3
Signing time:             Sat 09 Aug 2025 03:19:00 +0000
Manifest this update:     Sat 09 Aug 2025 03:19:00 +0000
Manifest next update:     Sat 16 Aug 2025 03:19:00 +0000
Files and hashes:         1: s2MvNI2Zt8k-43IQ13M9KC8UWko.crl (hash: 1+4er6b3Wo2u9mKJ2Q05uTV8SW3Y8iI90sEnTAZ6i/o=)
                          2: A0B1EDDCC24011ED80139928C4F9AE02.roa (hash: iHBYWe6ERJgNXTSiQBDXZCN/lwk7Ia+HfQGsPjr80VQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl
                          rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454 (0x1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E74A, serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A
        Validity
            Not Before: Aug  9 03:19:00 2025 GMT
            Not After : Aug 16 03:19:00 2025 GMT
        Subject: CN=6896be24-40b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ee:88:38:7d:90:48:d2:9d:7b:a5:94:be:6e:
                    10:25:c1:20:95:2d:21:11:b3:5b:4d:ac:af:c8:c7:
                    36:86:09:54:ab:54:52:0a:65:c4:cd:d1:ef:d4:6d:
                    4c:7c:38:c0:2d:96:cc:13:ef:c9:ab:ff:50:de:12:
                    e0:38:50:77:82:93:cc:c7:40:07:f2:6c:eb:ba:b2:
                    68:50:49:d9:f0:15:37:c4:3d:b8:c1:47:96:b0:6a:
                    97:8d:69:f0:67:29:5e:4f:c5:3e:90:0f:54:86:b8:
                    5e:92:56:de:27:c6:29:47:87:3e:a4:6b:8b:18:c7:
                    22:3c:90:7f:73:86:d3:fd:29:1f:c6:17:8d:80:0a:
                    a5:b3:66:82:b2:f3:af:f0:29:85:e1:2c:e5:94:13:
                    95:f3:38:b5:22:85:85:91:67:5c:4d:cd:ea:09:7e:
                    ad:5a:50:0a:88:09:ff:8c:3b:7b:d9:08:f2:14:0b:
                    8e:5c:63:1e:06:ca:1b:fc:4f:d0:70:63:34:08:d1:
                    73:e7:03:de:b1:94:e8:50:4a:20:86:ac:1f:f6:bc:
                    fe:99:a5:c5:ba:19:85:2e:b4:43:3f:a2:9c:9c:78:
                    d1:b3:91:05:e3:8a:86:0d:18:b7:3c:fb:cb:96:ef:
                    02:4d:03:94:8f:4b:2b:50:c9:fd:83:a6:2b:42:45:
                    72:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8A:C1:FB:8A:F8:87:0B:C5:42:86:56:1C:72:25:07:D5:49:56:EC
            X509v3 Authority Key Identifier:
                keyid:B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ae:9f:08:12:c3:9d:02:87:7e:5d:da:4d:cc:6e:0d:70:b5:
         ee:85:14:ad:75:c1:3a:52:19:e5:f0:d7:6b:6d:ab:7f:f2:50:
         88:d5:31:3e:82:ce:33:1d:00:eb:ec:7a:41:25:3c:90:77:1c:
         d4:c9:8e:52:e7:ad:8e:70:3e:31:84:5a:c1:bc:c3:d2:5a:bf:
         d8:d5:2a:87:19:e6:bb:3e:79:6c:31:3b:06:4a:28:64:65:30:
         70:9c:8a:f0:40:15:58:31:0e:e6:0c:05:d7:ae:d8:52:77:5c:
         8a:f3:d8:57:9c:e8:3f:ea:6a:f2:3b:56:77:49:24:76:04:85:
         42:4f:96:5f:04:1e:b7:7c:6a:15:21:fc:03:04:23:60:08:0a:
         fc:b0:64:90:61:e1:8b:3d:91:9c:3a:17:23:96:72:90:66:71:
         68:15:5f:fe:61:08:e8:4f:02:58:29:a5:31:26:cd:e4:7c:b5:
         81:38:fc:55:17:f3:71:52:41:dd:6c:47:fe:ed:1a:29:e6:7c:
         7b:3e:2e:c6:1e:80:60:17:f5:b3:81:79:01:3e:88:62:7d:ac:
         e9:36:92:3b:ea:b1:eb:f8:5e:da:e2:28:93:f3:70:98:f9:b4:
         46:06:86:4e:23:49:6b:03:0d:39:b6:eb:ca:f7:91:fd:ec:c7:
         70:c3:d8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:14:44 2025 by rpki-client