Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
File:                     2v3gvG4K06iVvHVtbDGh5httODs.mft (raw, json)
Hash identifier:          BoXII5T/LkyhG7fTZ9u6CEJSudrIVD/jPEXl7L1ztU8=
Subject key identifier:   11:02:90:B5:33:4B:EE:79:AF:55:3A:17:2C:24:5A:C0:B9:52:CD:41
Authority key identifier: DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B
Certificate issuer:       /CN=A918FCE2/serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
Certificate serial:       0888
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
Manifest number:          0875
Signing time:             Fri 08 Aug 2025 21:01:57 +0000
Manifest this update:     Fri 08 Aug 2025 21:01:56 +0000
Manifest next update:     Fri 15 Aug 2025 21:01:56 +0000
Files and hashes:         1: 2v3gvG4K06iVvHVtbDGh5httODs.crl (hash: mhzoNo5StTS0QEwoE1BYyMcENVhGyFfMS4c+m3Z0zEA=)
                          2: 311DA6AA78F611EFAFD81B5BC4F9AE02.roa (hash: N273KJZBVvsgocX2roxdV3igs8iuW9HGezq7GTon2t0=)
                          3: 312D1714A6F211EFBD311B19C4F9AE02.roa (hash: 3WiuON+DZCyyzbg9J4hxbgh73YCM3rOmSlSP3M274IM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl
                          rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2184 (0x888)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FCE2, serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
        Validity
            Not Before: Aug  8 21:01:56 2025 GMT
            Not After : Aug 15 21:01:56 2025 GMT
        Subject: CN=689665c4-739b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bb:5e:2d:ce:b3:7e:60:c1:44:c1:c2:7b:e3:
                    cd:a5:dd:42:01:1a:52:c9:ed:e8:74:00:88:05:5a:
                    6e:0a:8b:cf:5e:2f:73:a9:74:7f:1c:ec:ed:b8:1a:
                    25:30:d3:bb:82:f6:3e:d8:70:95:53:4f:39:d1:4e:
                    b9:39:91:26:6f:47:1d:06:1f:e0:25:3f:f3:76:60:
                    6d:89:85:96:a4:9e:57:29:9a:23:6d:85:1d:49:69:
                    8e:18:ae:94:23:0b:15:4f:a3:32:9b:92:c1:9b:ec:
                    78:0d:09:25:b6:42:dd:27:a6:fd:12:44:fa:f6:d0:
                    0a:10:17:90:e2:3a:87:b2:30:a6:51:9b:d6:8c:16:
                    84:9e:f2:f3:fe:39:17:66:a0:4b:ff:ed:e9:33:a1:
                    73:e1:34:28:fc:99:4c:8f:37:4d:8c:40:05:17:3c:
                    4f:db:a3:e8:e8:08:7c:e5:38:6c:4a:2a:74:ab:52:
                    54:9f:56:73:5c:01:bb:71:0d:1a:4e:35:aa:73:96:
                    70:1a:47:26:b6:c3:74:e8:8d:3e:5b:7a:d3:e8:9f:
                    24:20:9b:ec:d1:f9:80:8c:21:47:ed:fc:8c:5b:bf:
                    b5:cf:ec:84:6d:77:12:06:32:63:d5:5a:99:9b:ca:
                    96:fb:f9:95:e8:35:ad:39:f1:81:d9:2f:ce:80:a0:
                    c6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:02:90:B5:33:4B:EE:79:AF:55:3A:17:2C:24:5A:C0:B9:52:CD:41
            X509v3 Authority Key Identifier:
                keyid:DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:2a:2a:5e:25:2e:2f:3f:20:33:d9:18:6b:45:07:98:51:07:
         18:6c:c1:f8:90:b0:ca:69:29:d9:e2:08:02:95:4d:51:8c:3a:
         b8:df:7e:86:3c:94:bc:b1:d6:f7:b4:29:62:b7:63:88:5d:8b:
         b0:91:be:76:46:58:44:54:50:c5:07:fa:a9:d8:53:90:e9:51:
         fc:9e:5b:6d:24:2f:3c:7a:51:d5:58:b3:74:93:d3:10:6b:a7:
         1b:e7:91:35:9e:ef:6e:64:91:5d:52:d1:6b:30:8d:3c:fd:a9:
         e8:c4:c8:6b:2f:a1:55:36:6a:23:6d:c5:9e:b7:be:f9:dd:c9:
         93:7d:20:ef:e9:29:49:6e:11:c3:5a:d0:29:30:85:f9:e6:e7:
         6e:ae:9e:39:e9:88:0c:c4:64:72:9d:26:d3:c3:03:3f:58:86:
         31:b5:7e:6a:ce:f7:e4:6e:88:3e:68:87:61:e2:df:05:0e:71:
         67:14:9e:e6:3c:4c:c3:de:f5:d0:d4:a0:49:0f:c3:6e:b8:e8:
         25:16:c2:60:04:c3:9c:54:9d:65:1a:5c:e2:93:0c:04:0d:2b:
         1a:fe:b8:4f:a2:24:37:32:d0:f8:38:eb:52:38:46:63:9e:57:
         94:1e:ae:dc:a4:d7:bf:2b:5f:b3:5f:a6:88:b5:41:87:ab:24:
         da:28:0e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:50:10 2025 by rpki-client