Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
File:                     xIqs603a7jxgQuZiFq15FQe0fGs.mft (raw, json)
Hash identifier:          W9puWv9jEGgCtFvrIMYQnm4LqV9YABC8oHP7pzq8rY8=
Subject key identifier:   D0:C6:A6:C8:54:EE:BB:12:58:97:16:D7:C7:B8:69:76:77:7C:C6:4B
Authority key identifier: C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B
Certificate issuer:       /CN=A918EF61/serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B
Certificate serial:       1913
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
Manifest number:          1909
Signing time:             Wed 18 Jun 2025 16:27:15 +0000
Manifest this update:     Wed 18 Jun 2025 16:27:14 +0000
Manifest next update:     Wed 25 Jun 2025 16:27:14 +0000
Files and hashes:         1: xIqs603a7jxgQuZiFq15FQe0fGs.crl (hash: TzI4wMdcz1R9ijserXCabLepCvXLKUogTTmQPCLkjsI=)
                          2: C44B0ADA83DA11E7AD4F156CC4F9AE02.roa (hash: ee6x0IQnWxU26dMdjthmXNqeRQ+45nsz1rLe7eGNses=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl
                          rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 16:27:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6419 (0x1913)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EF61, serialNumber=C48AACEB4DDAEE3C6042E66216AD791507B47C6B
        Validity
            Not Before: Jun 18 16:27:14 2025 GMT
            Not After : Jun 25 16:27:14 2025 GMT
        Subject: CN=6852e8e2-e660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4c:e6:7d:0f:84:7b:5a:08:cf:bc:fe:8b:f5:
                    f1:28:e8:29:b1:d3:9c:0a:5a:8e:a2:ff:39:30:c6:
                    a6:f9:a3:88:76:2e:02:77:5f:d0:95:42:0f:af:19:
                    8f:c4:3b:8c:83:e8:b9:73:77:36:fd:b1:8c:94:eb:
                    42:b8:89:68:0f:bb:7e:9f:ee:4e:0a:ee:d5:63:7f:
                    33:e7:91:f7:3c:34:a7:9e:63:0e:30:65:97:7d:c5:
                    6b:10:08:9b:16:19:25:48:2d:20:cd:d0:4e:77:f2:
                    e2:7f:ee:99:d1:c6:24:c1:2d:dd:01:14:9f:d6:ed:
                    0d:d1:4c:30:8c:35:23:6b:71:b5:ed:db:98:04:59:
                    6a:56:98:23:cb:ae:86:fd:7c:39:59:d8:8f:93:75:
                    0e:46:e4:2d:4e:5c:d0:bb:29:63:7d:45:22:f1:34:
                    a8:a4:5f:d8:11:ed:15:3f:6f:65:7f:8c:e8:f9:ec:
                    7d:4e:00:26:98:0d:1d:5d:8f:ed:d6:15:b9:72:9a:
                    f9:02:b0:a4:f6:c6:69:bd:7e:42:1d:c4:f2:b1:e3:
                    8e:61:52:df:b0:f3:86:ec:b5:56:61:85:a5:5b:8d:
                    c9:7f:62:f9:6a:bc:80:7f:ab:df:c3:2c:68:c7:88:
                    44:53:8f:9a:b0:eb:27:b8:61:06:35:cb:a0:28:90:
                    bf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C6:A6:C8:54:EE:BB:12:58:97:16:D7:C7:B8:69:76:77:7C:C6:4B
            X509v3 Authority Key Identifier:
                keyid:C4:8A:AC:EB:4D:DA:EE:3C:60:42:E6:62:16:AD:79:15:07:B4:7C:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIqs603a7jxgQuZiFq15FQe0fGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF61/16A6DC6083DA11E7A003736BC4F9AE02/xIqs603a7jxgQuZiFq15FQe0fGs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:58:f9:65:cc:8c:8f:74:79:f2:14:6b:ff:0a:a6:f9:7f:76:
         c7:85:f4:28:bb:28:90:d2:7f:d2:16:4d:65:11:16:32:34:5b:
         e8:a2:28:ed:72:36:ba:94:b7:51:69:05:7e:99:1d:ab:c9:0d:
         ef:33:1e:a9:4e:eb:3d:db:71:ea:02:0c:05:e8:8a:2a:ea:12:
         ec:4c:80:e0:98:b7:92:75:8b:1b:f0:58:6f:68:b7:30:a6:de:
         45:cc:07:06:6a:18:06:43:ef:fc:c2:24:bb:ea:8d:33:f0:e8:
         4b:40:2d:43:54:bd:e4:02:6a:8a:3b:3a:39:53:17:50:a3:4f:
         a0:18:cf:f5:e7:9f:73:d6:67:83:77:f3:0e:93:ca:f8:24:20:
         c0:ab:4f:11:16:59:da:db:1d:26:b5:e4:0b:fb:97:65:3e:43:
         52:92:d9:8e:80:0d:9b:ba:a0:bc:b3:4f:c5:c3:c6:20:53:d1:
         4e:48:a2:4c:ad:81:e1:10:89:b9:65:f1:2d:12:94:da:c0:4b:
         e5:78:33:43:ad:ef:a7:34:f9:7a:e2:12:d3:fe:d4:27:61:b8:
         f7:c2:34:d4:40:4e:c3:f3:b4:33:90:68:33:4d:7e:d9:49:6e:
         5f:e1:46:85:a7:c5:64:34:63:8d:1a:30:84:bc:b9:86:75:9d:
         1a:3f:cf:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 22:39:35 2025 by rpki-client