Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
File:                     u9Lp2RPGRcigUZJHTP-olruaTqY.mft (raw, json)
Hash identifier:          edPdnGzSxhATe0a/VU5yR5bYmzetpqfVvPZVWzWqEcE=
Subject key identifier:   C1:D4:E5:12:DD:12:15:5C:92:CF:C0:4D:C4:ED:CD:D1:20:E3:6E:75
Authority key identifier: BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6
Certificate issuer:       /CN=A9111B00/serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
Certificate serial:       01E3
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
Manifest number:          01E0
Signing time:             Thu 03 Jul 2025 02:45:44 +0000
Manifest this update:     Thu 03 Jul 2025 02:45:44 +0000
Manifest next update:     Thu 10 Jul 2025 02:45:44 +0000
Files and hashes:         1: u9Lp2RPGRcigUZJHTP-olruaTqY.crl (hash: JKYWc8qYntAZlscgVjxaE979t7ysfryg/WlpclmRd+k=)
                          2: 46DE5C7875DD11ED86945E46C4F9AE02.roa (hash: i1JD8msSihYz7KvKL8WS56vjnbp4Wnh0IyWM047eZr4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl
                          rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 02:45:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483 (0x1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111B00, serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
        Validity
            Not Before: Jul  3 02:45:44 2025 GMT
            Not After : Jul 10 02:45:44 2025 GMT
        Subject: CN=6865eed8-da2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:84:54:1f:19:28:0e:88:41:a5:36:70:49:05:
                    0c:a9:36:c5:4e:fd:ce:de:98:1d:d7:df:6c:da:75:
                    56:e5:c4:ad:a8:3b:95:30:94:fc:03:bc:56:a1:2e:
                    10:5a:53:bc:92:8a:7e:58:54:1a:e1:1c:ed:11:aa:
                    3f:43:e4:b4:07:6e:f1:de:30:d3:af:15:72:3a:23:
                    9e:80:e2:38:8d:89:d0:b2:4e:57:29:20:a0:98:fe:
                    5e:8a:56:62:6b:0a:df:df:64:32:c6:7d:c6:f2:c2:
                    16:05:55:73:9f:9c:78:e8:b6:64:80:1b:8f:85:a5:
                    ea:5f:a1:c3:3d:f3:fd:0d:76:be:17:9d:44:22:d5:
                    d8:75:15:0c:1e:dd:b7:27:77:46:f8:eb:2b:ee:6b:
                    35:c8:e7:f3:f1:a0:6d:f0:8c:6a:a4:ea:7d:42:15:
                    9b:12:f8:22:d5:0b:ec:58:33:09:a1:08:6f:27:b3:
                    15:97:b0:cb:2a:65:40:b0:20:3b:43:9b:e9:77:1a:
                    2a:6c:2e:c8:ec:2f:87:12:df:76:57:4d:dc:16:39:
                    61:a9:fd:3b:35:36:30:7b:75:5e:af:03:0a:47:fa:
                    6f:0f:c6:f6:f4:e2:85:68:22:69:b6:55:ee:33:aa:
                    df:c0:a7:d1:a6:81:03:f9:91:e3:85:cb:d3:78:66:
                    d4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D4:E5:12:DD:12:15:5C:92:CF:C0:4D:C4:ED:CD:D1:20:E3:6E:75
            X509v3 Authority Key Identifier:
                keyid:BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:8d:01:d5:d6:a3:8e:d5:84:78:95:be:1a:c1:8a:e0:5c:53:
         bd:a0:e6:ed:77:c3:ae:a9:1a:f2:75:42:ef:93:6b:dd:ef:ed:
         46:00:b0:9b:85:1e:36:68:7f:aa:93:4d:eb:05:70:5e:9d:a8:
         e0:1d:02:bf:07:68:94:9e:67:78:b7:8f:42:14:a4:5f:0d:69:
         2f:a7:cc:b4:ff:67:59:53:1d:35:60:d7:d8:ec:fa:a1:e0:e2:
         0c:b7:42:11:27:e8:5b:7b:4a:f4:8f:6a:bf:3d:42:1c:98:48:
         7a:b0:b2:f1:e6:95:0e:be:32:b4:70:8b:9e:f0:1b:6a:79:61:
         2a:69:01:5f:a7:c7:09:36:0f:71:44:2e:83:dc:16:62:1e:de:
         ff:9f:ce:a8:d5:8f:39:d9:2a:af:4b:01:e1:1a:93:bc:75:f0:
         9d:2e:73:ea:d8:68:96:89:7e:81:a3:6f:95:26:db:29:4f:0a:
         3c:52:28:34:06:f6:71:f0:e2:da:38:40:a2:cc:30:da:c5:56:
         eb:77:3f:cf:c3:7a:b9:48:47:d7:95:01:5d:fe:19:cd:a0:44:
         09:9d:58:d0:e1:bb:c4:7d:2b:f5:ec:ce:72:9e:81:d2:34:9e:
         e6:2f:50:63:5b:19:45:1a:55:9d:4f:7a:36:86:7a:ad:72:56:
         f6:57:0b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 01:06:59 2025 by rpki-client