Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft
File:                     h2JAwXQl4PPi4Vds30t527-rVe4.mft (raw, json)
Hash identifier:          UL4Pb5Rs3Oro9pXAFapBqr1pnOpY3FGLsNYixdeelHA=
Subject key identifier:   7D:B5:7F:17:23:66:01:AF:44:46:1D:AB:5A:B3:13:16:58:E6:8B:60
Authority key identifier: 87:62:40:C1:74:25:E0:F3:E2:E1:57:6C:DF:4B:79:DB:BF:AB:55:EE
Certificate issuer:       /CN=A918FE4B/serialNumber=876240C17425E0F3E2E1576CDF4B79DBBFAB55EE
Certificate serial:       01EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2JAwXQl4PPi4Vds30t527-rVe4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft
Manifest number:          020F
Signing time:             Tue 05 Aug 2025 03:06:38 +0000
Manifest this update:     Tue 05 Aug 2025 03:06:38 +0000
Manifest next update:     Tue 12 Aug 2025 03:06:37 +0000
Files and hashes:         1: h2JAwXQl4PPi4Vds30t527-rVe4.crl (hash: TMnppT85qQQVGghMTfCTgBKN2aN9pqgy6NKCz7Pegkk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.crl
                          rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2JAwXQl4PPi4Vds30t527-rVe4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 03:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FE4B, serialNumber=876240C17425E0F3E2E1576CDF4B79DBBFAB55EE
        Validity
            Not Before: Aug  5 03:06:38 2025 GMT
            Not After : Aug 12 03:06:37 2025 GMT
        Subject: CN=6891753e-9d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:82:d1:89:8a:0e:38:7e:0a:c2:f4:ec:ab:26:
                    98:bf:c4:6e:1b:8d:8d:41:a1:1b:41:d3:4d:4b:b2:
                    d3:c1:7d:08:02:1d:93:4a:7b:54:70:3d:64:56:2d:
                    0d:70:51:5b:2f:2a:df:8a:98:c0:26:49:99:6a:9d:
                    33:56:6b:fa:f5:db:a5:57:e9:04:f6:58:1b:98:d1:
                    64:d0:d8:4b:90:11:89:b9:32:40:f1:7e:54:51:97:
                    21:07:0c:08:a3:ee:fa:be:8e:17:bf:45:5d:d4:2c:
                    9f:58:e4:5a:b8:ca:d4:5f:2e:26:89:a9:a2:dd:15:
                    b0:2d:c1:cf:20:56:b4:da:e6:ba:90:1d:b5:c0:70:
                    b4:ca:a3:f9:17:5a:ee:63:4d:42:4a:32:c8:bf:51:
                    ec:29:9a:5b:4c:74:38:95:97:b4:d7:87:25:97:ad:
                    67:75:61:2f:06:30:5a:c0:33:ed:a6:27:db:38:f0:
                    9c:b9:61:df:c8:fb:9e:ed:47:4c:a4:93:29:4c:97:
                    21:8d:03:22:b1:cc:1a:0c:69:94:10:d8:ba:ef:65:
                    36:fb:39:b1:2a:cf:b5:e6:02:81:2b:2b:31:ac:9a:
                    ff:a9:66:24:36:19:c1:07:01:e8:c1:91:8f:33:99:
                    4e:53:bb:67:cd:30:c2:bc:5a:a4:57:fe:2f:25:62:
                    d7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B5:7F:17:23:66:01:AF:44:46:1D:AB:5A:B3:13:16:58:E6:8B:60
            X509v3 Authority Key Identifier:
                keyid:87:62:40:C1:74:25:E0:F3:E2:E1:57:6C:DF:4B:79:DB:BF:AB:55:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2JAwXQl4PPi4Vds30t527-rVe4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:12:36:12:d3:2d:cc:9a:fd:e5:37:6e:9e:d2:07:6c:ad:a5:
         52:16:23:97:de:47:00:8d:e8:71:9a:c1:80:76:bd:44:80:f5:
         df:61:32:44:d8:76:91:2e:9b:90:ee:8f:42:3e:de:19:db:43:
         15:bb:9e:3c:b9:50:24:ca:84:65:71:70:e9:88:9e:66:54:a7:
         7b:c5:9b:7f:88:b8:f1:3a:99:5c:d5:3f:81:c9:19:5b:89:31:
         44:90:57:f8:6e:bc:58:2d:2f:b1:cf:d1:36:5b:52:24:a2:34:
         e2:5c:45:e8:54:a8:e1:67:b6:27:6b:e8:b3:11:16:e5:ea:05:
         dd:fa:41:d9:8a:ca:ee:78:ce:f5:f0:b5:ea:e0:96:6b:d5:71:
         85:1a:23:8a:23:c3:2f:04:6a:18:0d:70:72:f1:b5:df:45:3a:
         0a:7b:59:63:47:d3:4f:cc:9d:60:d6:b0:9d:15:af:f6:ca:49:
         0b:79:b7:5a:ce:77:8e:6a:95:c9:52:f7:0b:b6:c5:cf:1d:03:
         14:bc:10:99:a2:f5:96:59:51:04:27:22:83:71:fb:50:7c:7c:
         a4:75:5e:49:39:3f:a4:6c:91:a4:33:8d:dd:7f:8f:2b:09:47:
         97:2b:a5:6e:06:f5:40:67:d7:2b:60:d1:25:96:1b:27:a0:96:
         b7:42:64:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:38:52 2025 by rpki-client