Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
File:                     IL0_f5mO1D1fxPhindDBiOx92uA.mft (raw, json)
Hash identifier:          HqSlCjasv/5kHSMIS6AU1cncc7dwYLAER6slFgpjA48=
Subject key identifier:   63:51:82:CB:02:A8:C1:7A:9A:D6:8C:BA:FA:E1:36:72:50:C2:5B:33
Authority key identifier: 20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0
Certificate issuer:       /CN=A918E9A4/serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
Manifest number:          014C
Signing time:             Tue 05 Aug 2025 04:40:19 +0000
Manifest this update:     Tue 05 Aug 2025 04:40:19 +0000
Manifest next update:     Tue 12 Aug 2025 04:40:19 +0000
Files and hashes:         1: IL0_f5mO1D1fxPhindDBiOx92uA.crl (hash: 7n7B5ayawqxEcX7+9jYIgcWdLwv19xmfgMs0aFozjKs=)
                          2: 10EB474C730311EE9ADB6C46C4F9AE02.roa (hash: cWgOEcKhYYXBYZ1Qeif6nqia0tYqSc7zBIrXwtNmPdk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl
                          rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 04:40:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E9A4, serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0
        Validity
            Not Before: Aug  5 04:40:19 2025 GMT
            Not After : Aug 12 04:40:19 2025 GMT
        Subject: CN=68918b33-b049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:02:76:e3:2c:93:b6:8c:f1:09:5e:39:05:e2:
                    2c:ad:b8:0a:c3:2c:8c:d7:f2:5a:b9:07:e3:d9:ce:
                    f2:0e:9d:44:68:34:1b:ca:d4:7c:4a:66:be:fb:e6:
                    6a:e5:22:ed:d3:93:d9:a3:8f:9a:5a:98:a6:70:39:
                    d1:7a:e5:fb:b5:3b:2d:b8:78:09:46:b4:bc:42:90:
                    5a:4a:6e:fd:d2:32:91:4d:79:1c:e5:43:87:34:da:
                    6a:bd:b9:c9:89:2a:58:c9:c6:90:11:62:91:bd:8f:
                    7c:12:e3:71:83:9c:5b:56:74:6d:21:fc:c0:15:f8:
                    c6:a6:78:ad:95:22:a7:38:18:ca:ca:4c:26:97:a5:
                    10:4a:ed:a7:a3:0a:b9:34:15:df:7d:8d:74:38:1b:
                    c9:8e:d8:f0:85:0c:1e:69:72:1b:20:41:dc:f5:41:
                    a6:8f:ec:8e:72:7f:97:4a:4f:91:8a:22:8d:fd:d6:
                    23:7d:c8:a6:c9:77:16:3e:e6:71:00:d4:e7:61:19:
                    17:61:b0:6c:49:5e:f1:1f:7f:35:ef:03:0c:e1:60:
                    23:9f:a1:6b:a5:28:ac:85:55:ae:1f:ff:f3:fa:d3:
                    63:0d:35:22:10:97:d2:45:72:5b:14:b6:13:c8:e6:
                    2f:c5:69:bf:68:9a:7d:61:e6:6c:88:00:5b:96:a6:
                    79:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:51:82:CB:02:A8:C1:7A:9A:D6:8C:BA:FA:E1:36:72:50:C2:5B:33
            X509v3 Authority Key Identifier:
                keyid:20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ae:3f:8b:36:21:1b:5a:a9:5f:7a:cc:9a:e7:48:5f:da:28:
         49:ce:5c:66:1e:5e:d6:c5:52:f4:0f:6a:49:68:2c:e5:ce:e9:
         dc:1e:7a:4b:38:63:9a:48:3c:53:28:10:d8:55:84:6f:f9:9a:
         d3:1d:7a:b3:79:a8:7a:cb:43:07:ba:4a:a3:9b:8f:2e:06:c4:
         ac:f3:17:4d:94:ef:59:e3:cd:25:e9:0b:05:77:2f:d3:3f:d6:
         f1:8d:62:ea:02:83:3e:b7:c4:ad:07:95:f3:7c:a6:c0:95:fa:
         78:0f:94:64:e3:c9:af:57:f3:70:c4:23:92:ee:2c:bb:63:a7:
         ac:ee:b4:a0:01:0d:66:5c:bc:43:d3:f0:30:b7:82:23:7b:9d:
         78:54:3e:bc:a6:4b:9c:38:e2:eb:fd:70:11:ac:88:a6:d9:e7:
         32:ff:64:72:47:84:6d:f8:bf:69:94:a6:01:78:9f:a5:3d:d1:
         4d:55:57:40:db:64:a7:94:47:36:09:34:17:73:5f:48:d9:e8:
         33:b8:05:a4:75:0f:38:64:d1:40:b5:dd:16:06:88:60:2a:38:
         7d:67:c8:d2:57:2e:03:86:70:9f:da:47:b4:de:e0:0d:68:01:
         50:53:72:28:5f:9e:83:33:9b:7a:c8:27:ea:a1:30:2e:ff:91:
         7c:f0:87:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:13:01 2025 by rpki-client