Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft
File:                     r7pNwfpFiSSQIyMcb-7j96cdpA4.mft (raw, json)
Hash identifier:          cppH7g1aLUZdnWBAXdfl4BiZ39VYDFvUkY8h0LioLvQ=
Subject key identifier:   86:F8:6F:80:C7:CF:81:C3:58:40:30:69:2C:0F:E4:7E:E9:82:BB:F2
Authority key identifier: AF:BA:4D:C1:FA:45:89:24:90:23:23:1C:6F:EE:E3:F7:A7:1D:A4:0E
Certificate issuer:       /CN=A919B663/serialNumber=AFBA4DC1FA4589249023231C6FEEE3F7A71DA40E
Certificate serial:       0185
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft
Manifest number:          0181
Signing time:             Sat 09 Aug 2025 04:01:54 +0000
Manifest this update:     Sat 09 Aug 2025 04:01:53 +0000
Manifest next update:     Sat 16 Aug 2025 04:01:53 +0000
Files and hashes:         1: r7pNwfpFiSSQIyMcb-7j96cdpA4.crl (hash: 6z/mOL4OLcMrDQ2Zwh4wUKs3ANqEDfuUDtBRv/qR+EY=)
                          2: 91F274442F2B11EE928A2881C4F9AE02.roa (hash: GyWEom6S3q07RtuEwFpriwJsgcHzGa54vXUp1K8wG2w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.crl
                          rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B663, serialNumber=AFBA4DC1FA4589249023231C6FEEE3F7A71DA40E
        Validity
            Not Before: Aug  9 04:01:53 2025 GMT
            Not After : Aug 16 04:01:53 2025 GMT
        Subject: CN=6896c831-c21b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:44:80:52:a4:7a:af:f8:aa:05:94:05:3c:9a:
                    f2:f0:d7:cf:f9:6e:73:d5:55:ca:81:6e:0f:f4:65:
                    37:c9:61:7d:43:f3:05:b5:8c:6b:23:9d:ee:8d:cb:
                    47:91:28:a5:48:55:7c:0b:3d:7e:27:90:90:60:b8:
                    e5:c2:c4:44:1d:5f:24:35:80:62:e6:e7:5b:2f:19:
                    13:51:61:5f:02:b9:a1:83:32:d7:7a:86:00:85:d8:
                    99:f1:76:14:ff:6a:5b:99:e4:8a:71:0e:71:b5:07:
                    7c:e1:89:34:88:c3:28:74:65:e9:e7:42:43:5a:18:
                    27:80:65:7b:ec:d1:03:2d:91:b3:ba:49:63:1a:1d:
                    63:99:f1:98:8f:0b:1a:72:1d:3a:58:67:e0:5b:46:
                    95:f0:24:a9:7a:a8:69:00:55:af:88:81:e2:1c:43:
                    73:3a:06:28:81:ba:d5:08:d0:1c:c0:b3:dd:a9:6f:
                    23:94:4f:98:e9:da:c0:fe:99:b7:48:eb:7a:a3:3a:
                    cf:0f:3a:8a:3b:7c:20:e8:56:88:db:1b:17:9c:57:
                    69:42:55:9a:26:4f:a1:c0:b3:d9:d6:1d:53:80:15:
                    da:bb:2a:ef:0e:53:20:bc:fc:50:db:b6:23:cc:37:
                    d3:99:26:45:3e:a0:b2:0e:c9:e5:b5:91:ac:27:51:
                    46:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F8:6F:80:C7:CF:81:C3:58:40:30:69:2C:0F:E4:7E:E9:82:BB:F2
            X509v3 Authority Key Identifier:
                keyid:AF:BA:4D:C1:FA:45:89:24:90:23:23:1C:6F:EE:E3:F7:A7:1D:A4:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:5b:c3:62:27:4f:af:9b:8b:d1:03:3d:6c:56:bc:a4:9c:2f:
         3e:a4:e0:35:0c:70:14:e0:ed:9f:f5:8d:d9:e5:e3:f0:34:61:
         2c:c8:3c:20:8c:38:fd:b4:58:43:e7:4d:6f:c4:6d:6b:18:c3:
         12:f7:24:c4:a2:d5:f3:14:c1:bf:c7:fb:1c:74:b6:f8:17:11:
         92:b1:10:02:4c:0a:25:dc:4e:8c:4a:86:26:48:8f:9c:a0:6b:
         13:ed:8c:52:2f:dc:67:df:49:d8:0c:be:36:cd:a1:b9:6f:b1:
         bf:dd:c2:c5:38:6a:ea:dc:08:d6:f1:f7:24:2b:d5:99:f4:5c:
         53:d3:1e:8d:ec:c8:67:ad:14:91:cb:fe:9f:ce:1d:2c:58:f6:
         cf:d0:4b:5f:74:31:02:1d:7a:f2:ff:42:96:22:7b:3f:ed:78:
         4b:bf:b3:33:d5:91:dd:3c:66:cf:36:45:79:df:cd:74:d0:5e:
         94:42:2c:f3:ad:d7:a3:63:05:a3:9d:83:27:83:35:8a:cd:d7:
         75:35:85:c0:e0:03:52:c0:f5:b2:0d:8b:db:4b:f1:54:db:1e:
         49:68:8e:f6:5f:6d:2b:32:c8:b0:b5:b2:92:20:82:e4:c6:c8:
         06:96:5b:65:2a:a7:6b:fd:e0:f1:2c:15:18:16:13:0f:09:3f:
         7d:a2:5f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:23:06 2025 by rpki-client