Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
File:                     C9q2CGF_PDGDxHD05hmyeV91w4k.mft (raw, json)
Hash identifier:          7glZzpRxLSJMVOZfNXFvj2v7HYcJyKrnXTitXXlfVFs=
Subject key identifier:   EC:E9:03:FF:AC:6E:96:F2:DB:E3:03:51:34:9F:73:36:76:8E:42:6C
Authority key identifier: 0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89
Certificate issuer:       /CN=A91326B3/serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389
Certificate serial:       F8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
Manifest number:          F4
Signing time:             Thu 03 Jul 2025 05:27:54 +0000
Manifest this update:     Thu 03 Jul 2025 05:27:54 +0000
Manifest next update:     Thu 10 Jul 2025 05:27:54 +0000
Files and hashes:         1: C9q2CGF_PDGDxHD05hmyeV91w4k.crl (hash: wiQCFmBf6m/RbTf6tTJDOtkClBQkqLB66W2iJJo2wLs=)
                          2: E3ABAA7AE69211EEB34D4B6AC4F9AE02.roa (hash: EyKD4I3R8YSy4asXY+8xvf07IP4owJwI772hb1AAhAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl
                          rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91326B3, serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389
        Validity
            Not Before: Jul  3 05:27:54 2025 GMT
            Not After : Jul 10 05:27:54 2025 GMT
        Subject: CN=686614da-17d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a2:87:2e:a1:0d:12:cf:fd:a9:b2:cf:73:f7:
                    0a:ba:f0:1b:1f:b4:de:ae:dc:9a:c7:ca:fb:c4:c4:
                    3e:65:e3:ad:07:a1:95:a8:94:81:2a:2e:62:14:28:
                    47:5b:87:0c:1b:bc:69:99:28:3c:f0:fc:ad:c3:b0:
                    ee:82:f5:fd:bf:31:8a:ce:0d:fd:4d:f3:68:57:19:
                    69:47:b4:c6:e6:4a:16:d5:2f:eb:80:ef:7e:a7:21:
                    af:cf:23:2d:05:d8:ae:1b:15:f4:c5:e3:e1:76:80:
                    ce:a6:56:28:d0:1a:de:27:96:a2:d1:c9:32:a5:6a:
                    b9:ff:67:c6:14:f1:38:f1:55:6a:27:d6:c5:dc:ee:
                    89:56:45:54:07:3c:88:67:74:11:26:10:f3:13:ea:
                    1a:67:20:b0:0a:31:79:ae:be:87:45:c1:3f:c3:28:
                    18:9f:8f:b9:ea:b9:ae:ab:7a:ae:cc:27:c9:a0:52:
                    51:cc:a9:78:0d:51:93:65:4d:f9:84:c5:e4:f6:09:
                    9c:18:51:09:30:fa:51:0f:3f:12:3b:40:a3:23:7c:
                    bf:82:5e:3c:06:b0:28:3a:50:da:72:26:aa:93:d0:
                    97:84:f3:6e:4d:ec:73:60:3b:09:4c:4b:2b:19:28:
                    39:db:de:4f:0a:fd:03:98:9a:d6:2c:cd:28:81:ab:
                    ed:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E9:03:FF:AC:6E:96:F2:DB:E3:03:51:34:9F:73:36:76:8E:42:6C
            X509v3 Authority Key Identifier:
                keyid:0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:91:e1:00:5c:44:18:4e:9b:a4:39:6c:68:03:73:88:0c:d2:
         07:0d:12:c2:0a:33:68:df:fb:a7:3d:d2:b7:98:e2:6a:d0:ed:
         db:df:1f:9c:17:8c:7c:cd:23:5b:38:d5:30:da:55:f8:db:58:
         43:dd:0c:5b:58:2d:19:43:17:6b:02:fd:23:4f:de:88:ed:c6:
         e9:1c:a8:8a:84:60:99:a4:81:67:8e:58:e2:70:54:33:83:6a:
         2f:6d:fc:c5:95:2f:ba:3c:3d:47:14:38:8c:c2:51:0b:ec:56:
         d8:38:d3:4d:f6:6d:64:a8:15:f4:f9:30:2c:c5:6c:1b:d8:d6:
         e1:b7:6e:d0:6e:94:74:5c:e6:a2:21:4e:87:47:f4:1a:90:89:
         a0:27:ad:e5:49:e1:ac:28:96:93:bf:a9:9a:b4:a1:2d:09:2a:
         b3:b2:42:e8:29:85:cb:05:b0:5f:a5:4c:38:ea:16:ae:8b:87:
         a9:5a:6c:4a:59:b9:4d:1d:25:0a:5c:34:de:3f:77:b0:66:d0:
         6f:66:d8:10:12:e1:e2:ef:96:01:41:92:62:c3:1f:ef:44:9d:
         7f:37:cc:85:12:9d:c6:54:e5:95:aa:a0:67:3f:41:5f:84:c2:
         0b:e7:e7:7c:5c:82:53:43:f8:f7:09:79:bd:5e:3c:03:ac:e3:
         80:54:82:27
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzI2QjMxMTAvBgNVBAUTKDBCREFCNjA4NjE3RjNDMzE4M0M0NzBGNEU2MTlCMjc5
NUY3NUMzODkwHhcNMjUwNzAzMDUyNzU0WhcNMjUwNzEwMDUyNzU0WjAYMRYwFAYD
VQQDEw02ODY2MTRkYS0xN2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA16KHLqENEs/9qbLPc/cKuvAbH7Tertyax8r7xMQ+ZeOtB6GVqJSBKi5iFChH
W4cMG7xpmSg88Pytw7DugvX9vzGKzg39TfNoVxlpR7TG5koW1S/rgO9+pyGvzyMt
BdiuGxX0xePhdoDOplYo0BreJ5ai0ckypWq5/2fGFPE48VVqJ9bF3O6JVkVUBzyI
Z3QRJhDzE+oaZyCwCjF5rr6HRcE/wygYn4+56rmuq3quzCfJoFJRzKl4DVGTZU35
hMXk9gmcGFEJMPpRDz8SO0CjI3y/gl48BrAoOlDaciaqk9CXhPNuTexzYDsJTEsr
GSg5295PCv0DmJrWLM0ogavt8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzpA/+s
bpby2+MDUTSfczZ2jkJsMB8GA1UdIwQYMBaAFAvatghhfzwxg8Rw9OYZsnlfdcOJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjZCMy9DNTU0MjNBQUU2
OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9DOXEyQ0dGX1BER0R4SEQwNWhteWVWOTF3
NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0M5cTJDR0ZfUERHRHhIRDA1aG15ZVY5MXc0ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MjZCMy9DNTU0MjNBQUU2OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9DOXEyQ0dGX1BE
R0R4SEQwNWhteWVWOTF3NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDJkeEAXEQYTpukOWxoA3OIDNIHDRLCCjNo3/unPdK3mOJq0O3b3x+c
F4x8zSNbONUw2lX421hD3QxbWC0ZQxdrAv0jT96I7cbpHKiKhGCZpIFnjljicFQz
g2ovbfzFlS+6PD1HFDiMwlEL7FbYONNN9m1kqBX0+TAsxWwb2Nbht27QbpR0XOai
IU6HR/QakImgJ63lSeGsKJaTv6matKEtCSqzskLoKYXLBbBfpUw46haui4epWmxK
WblNHSUKXDTeP3ewZtBvZtgQEuHi75YBQZJiwx/vRJ1/N8yFEp3GVOWVqqBnP0Ff
hMIL5+d8XIJTQ/j3CXm9XjwDrOOAVIIn
-----END CERTIFICATE-----
Generated at Sat Jul 5 05:33:21 2025 by rpki-client