Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft
File:                     Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft (raw, json)
Hash identifier:          ctl/aNSJaHO3ea68sazDN1d5Cz52cc1l6VvQjyKIZoQ=
Subject key identifier:   D0:26:2C:BD:B0:C4:84:41:DF:32:A8:56:C1:0D:90:16:BA:3A:42:72
Authority key identifier: 12:AB:BE:9D:4E:59:98:58:59:81:34:9A:5F:A9:B7:5F:DA:BC:58:76
Certificate issuer:       /CN=A91B778A/serialNumber=12ABBE9D4E5998585981349A5FA9B75FDABC5876
Certificate serial:       0184
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft
Manifest number:          0181
Signing time:             Wed 13 Aug 2025 04:06:22 +0000
Manifest this update:     Wed 13 Aug 2025 04:06:21 +0000
Manifest next update:     Wed 20 Aug 2025 04:06:21 +0000
Files and hashes:         1: Equ-nU5ZmFhZgTSaX6m3X9q8WHY.crl (hash: KmJgrTZseFZTBTaCjC5k2eBdrbzmd1W/t/gj8Q1BXrM=)
                          2: A60B75F62B7B11EEA4D0FA24C4F9AE02.roa (hash: QlGjMXDN4esCEiynluo/msiy33cpphW/TtlNsWHyAK4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.crl
                          rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 04:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B778A, serialNumber=12ABBE9D4E5998585981349A5FA9B75FDABC5876
        Validity
            Not Before: Aug 13 04:06:21 2025 GMT
            Not After : Aug 20 04:06:21 2025 GMT
        Subject: CN=689c0f3d-6ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:28:14:63:57:5c:c3:ff:5d:95:94:04:de:42:
                    6a:fa:da:f8:c9:fe:92:b5:4e:e5:4c:54:82:e5:55:
                    cd:d2:15:7e:1f:91:f0:fe:29:ee:50:03:aa:49:e1:
                    03:3f:6a:2e:e8:f5:a6:8c:f6:1c:79:5d:f5:b2:b7:
                    f9:a1:9e:ef:f4:10:22:61:d3:5e:0a:7e:8e:1b:ba:
                    e3:14:db:96:25:16:24:fd:34:66:56:8b:2e:f2:eb:
                    00:69:4a:d6:34:d1:ef:83:17:aa:0c:ec:b5:79:06:
                    1b:77:0c:26:1f:a6:42:7e:50:3a:7d:ba:02:82:60:
                    18:11:3b:cf:7e:b3:96:53:28:42:6e:3e:59:a4:7d:
                    e7:65:b2:30:d5:e8:34:73:62:34:e9:ae:f9:51:55:
                    14:da:70:cb:30:0d:37:61:ae:15:54:9c:1e:27:40:
                    5d:e8:cb:c0:03:61:44:19:72:23:17:c3:5e:3f:f5:
                    96:07:96:25:85:40:2f:a6:cd:3b:f4:a5:29:1e:cb:
                    1a:2d:04:a6:02:35:ef:9f:d2:15:06:41:87:d6:92:
                    38:c2:a3:0c:9c:a9:80:fa:00:e4:d0:cd:09:5f:9e:
                    30:27:88:28:86:8c:8a:00:7e:8f:0c:94:0c:41:47:
                    d1:32:c4:ed:d7:7b:fb:01:56:88:49:c9:bc:c3:80:
                    ff:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:26:2C:BD:B0:C4:84:41:DF:32:A8:56:C1:0D:90:16:BA:3A:42:72
            X509v3 Authority Key Identifier:
                keyid:12:AB:BE:9D:4E:59:98:58:59:81:34:9A:5F:A9:B7:5F:DA:BC:58:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:e7:be:da:d9:67:23:9a:b1:d6:fa:4e:04:be:6a:0d:92:6b:
         d1:18:c0:a5:77:63:77:f0:57:90:ea:55:37:9a:7e:ef:1b:b4:
         d5:79:c8:e4:97:d4:37:26:90:89:ef:55:53:07:ed:e6:69:3a:
         ba:bd:5e:b3:4f:12:15:74:13:a6:a9:ea:6c:d7:a6:2c:f3:2d:
         5b:6f:ec:19:0d:f7:c9:e6:7e:a4:6f:1a:ed:69:af:ac:72:cc:
         69:7c:ff:3d:be:cf:af:92:43:60:61:85:37:a4:8d:0e:28:61:
         fa:84:5d:e9:8c:6e:56:32:c8:93:8b:06:0a:e2:2e:59:0e:a6:
         fd:ad:be:2a:ac:1f:3a:85:e8:67:5a:06:35:96:b4:58:81:64:
         ce:03:72:23:9e:d1:bf:71:c4:55:5a:f4:ad:d9:79:ed:59:31:
         b5:d3:d6:22:fa:c3:cb:3c:d8:0f:49:d0:7e:72:67:a8:c3:d9:
         b4:17:71:df:dc:69:e0:c7:84:fa:71:42:f5:38:77:21:c8:80:
         93:b3:58:be:df:63:c6:6f:eb:be:14:32:7e:8c:72:4d:3b:87:
         9d:f5:eb:21:85:0d:43:01:81:71:b4:d7:5e:fd:3c:2e:cd:72:
         ed:f8:32:62:00:d9:f7:40:6e:68:b7:5b:a5:03:c3:7f:22:b0:
         e2:43:09:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 09:46:35 2025 by rpki-client