Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.mft
File:                     mVh7qcf_9rbFmelODc5H61a-au0.mft (raw, json)
Hash identifier:          wb9rGJ6LctDAL50tiOfWIU4gMlRIDqKYru2qABCVJBI=
Subject key identifier:   8B:76:DD:B2:80:9A:46:03:63:25:BB:04:7E:46:96:05:9C:D2:15:DE
Authority key identifier: 99:58:7B:A9:C7:FF:F6:B6:C5:99:E9:4E:0D:CE:47:EB:56:BE:6A:ED
Certificate issuer:       /CN=A9131B40/serialNumber=99587BA9C7FFF6B6C599E94E0DCE47EB56BE6AED
Certificate serial:       0632
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mVh7qcf_9rbFmelODc5H61a-au0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.mft
Manifest number:          062C
Signing time:             Wed 02 Jul 2025 23:03:12 +0000
Manifest this update:     Wed 02 Jul 2025 23:03:11 +0000
Manifest next update:     Wed 09 Jul 2025 23:03:11 +0000
Files and hashes:         1: mVh7qcf_9rbFmelODc5H61a-au0.crl (hash: PA5hEOXRbaFa30OrG+x9WYey1jCrlM+KxWSL4uJ2SaQ=)
                          2: B9BE8D0659BE11EE8F460C79C4F9AE02.roa (hash: 3i3Obqp5nv0g5N9cz3IbC+KBKlhtiXr0r1G3L5MWY/w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.crl
                          rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mVh7qcf_9rbFmelODc5H61a-au0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 23:03:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1586 (0x632)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131B40, serialNumber=99587BA9C7FFF6B6C599E94E0DCE47EB56BE6AED
        Validity
            Not Before: Jul  2 23:03:11 2025 GMT
            Not After : Jul  9 23:03:11 2025 GMT
        Subject: CN=6865baaf-81aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c0:31:99:eb:d2:93:2a:95:a0:57:06:3a:f9:
                    b1:3e:7b:37:d3:78:b9:20:b3:97:62:76:e9:dc:5e:
                    16:e4:21:0b:78:ec:21:31:b4:ea:c2:87:ea:08:fa:
                    0b:de:6f:68:0d:52:24:7e:a3:78:02:e1:e5:d4:8b:
                    25:34:d5:f3:dc:96:39:e3:49:54:f0:0d:46:35:a7:
                    3b:f1:73:47:ad:6e:47:30:d0:e9:be:ff:df:84:d6:
                    09:d9:82:95:1e:47:22:cc:1e:b8:c0:48:a6:a7:93:
                    8f:1f:36:a7:c9:a2:08:17:e1:7f:75:5b:58:df:1f:
                    59:62:87:40:23:5f:4f:0b:e9:42:13:c8:66:1a:54:
                    2b:36:1e:b4:17:c7:43:9b:72:e0:2b:7f:f9:79:1e:
                    86:72:5a:8c:36:f2:6d:d7:87:88:fd:16:15:3b:52:
                    3c:3e:cf:2a:71:3e:4b:71:b1:8f:fb:19:8a:c4:b8:
                    55:b5:44:b3:05:26:b3:ce:8b:04:c7:df:21:54:d4:
                    1b:0a:d3:f7:19:93:eb:1c:73:8e:c6:b5:db:00:88:
                    e3:d9:2e:02:0f:99:85:ce:f3:66:19:ed:b7:03:b5:
                    f9:d4:74:0a:e9:00:bb:ab:10:61:5d:6a:22:38:45:
                    36:7a:9b:f5:5d:c7:11:e9:e7:a4:54:5a:cc:10:90:
                    97:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:76:DD:B2:80:9A:46:03:63:25:BB:04:7E:46:96:05:9C:D2:15:DE
            X509v3 Authority Key Identifier:
                keyid:99:58:7B:A9:C7:FF:F6:B6:C5:99:E9:4E:0D:CE:47:EB:56:BE:6A:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mVh7qcf_9rbFmelODc5H61a-au0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b8:a8:0f:a4:53:d7:57:75:5d:ba:53:87:39:1b:0b:22:0e:
         14:bb:22:8e:3a:d6:0a:f2:43:e2:e0:60:72:07:4e:da:0f:40:
         59:48:df:46:30:ba:24:8f:5b:8f:80:a6:61:74:1b:35:67:3e:
         0f:a9:2e:24:c0:c9:4b:d1:cc:93:4d:01:eb:0d:ce:40:d5:a2:
         57:6f:0b:f5:1c:5f:ef:3f:96:b9:10:57:f0:aa:ae:d2:dc:89:
         82:38:5b:5d:19:18:8a:5f:1b:e7:ec:da:fb:1c:11:1f:44:41:
         0d:29:c6:20:35:8f:a1:ef:79:2a:80:9b:cf:71:20:c3:ed:d7:
         a0:0c:7b:cf:ea:4b:68:23:2b:c8:25:cb:b3:94:45:d0:bf:a8:
         2e:da:6f:19:ee:40:3c:a7:b6:00:ff:16:a0:ef:98:c1:9a:79:
         44:b5:c2:f8:14:b8:2e:99:ad:d1:82:e3:90:57:bc:f7:75:e1:
         4d:e9:b1:f5:b5:02:63:0c:2e:03:d0:95:bf:b9:16:7c:b0:f9:
         8e:59:a5:07:62:61:b8:53:1e:59:3e:36:74:17:2b:da:dc:cd:
         37:50:85:80:1c:bc:24:15:dc:15:2d:de:0f:df:0f:57:26:4a:
         2b:24:5d:84:8f:6f:6b:28:7f:f2:26:8c:e8:ea:65:29:36:1e:
         05:a0:87:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 14:57:51 2025 by rpki-client