Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
File:                     i16Our4JofST0QJTwaO5OTm_yoo.mft (raw, json)
Hash identifier:          yVKJ/uTvRE7BeoH7nIuGGnKFUk+8p3+R7b6O4IADx4g=
Subject key identifier:   DF:A8:CA:BD:D6:24:F6:CB:1D:66:CB:37:19:41:E1:9C:7B:50:F3:63
Authority key identifier: 8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A
Certificate issuer:       /CN=A91336DF/serialNumber=8B5E8EBABE09A1F493D10253C1A3B93939BFCA8A
Certificate serial:       AB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
Manifest number:          A9
Signing time:             Sat 23 Aug 2025 06:23:19 +0000
Manifest this update:     Sat 23 Aug 2025 06:23:19 +0000
Manifest next update:     Sat 30 Aug 2025 06:23:19 +0000
Files and hashes:         1: i16Our4JofST0QJTwaO5OTm_yoo.crl (hash: 3qrqNuws8bmg2aLGPw1fO7bgXd8MM4SoOLjptdKX3Ck=)
                          2: D5A3117E85DF11EFA2C33754C4F9AE02.roa (hash: sJiJ1naY/4cR2Pgo/DEru8iJf9KG6T1eb6PbQmIPhNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.crl
                          rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:23:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91336DF, serialNumber=8B5E8EBABE09A1F493D10253C1A3B93939BFCA8A
        Validity
            Not Before: Aug 23 06:23:19 2025 GMT
            Not After : Aug 30 06:23:19 2025 GMT
        Subject: CN=68a95e57-261d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d7:c2:5a:a4:18:19:13:da:e6:73:4d:e8:f5:
                    0a:53:8a:0e:8d:07:1c:58:83:7c:3d:62:6f:bc:26:
                    ea:94:5c:09:76:8d:1d:55:41:c2:ec:7b:7b:a8:ab:
                    44:c7:72:df:0e:36:0a:42:2a:d0:05:29:57:0b:ec:
                    d2:2c:a3:0c:6a:a7:1c:3f:61:7c:aa:2e:79:90:52:
                    fc:09:5f:50:72:ea:cd:b4:71:df:0b:ba:50:91:b5:
                    de:67:64:0e:1d:53:91:cf:89:77:54:2b:4a:19:8f:
                    e2:01:b3:55:db:76:4d:a7:14:15:55:00:8e:f1:a3:
                    b1:0c:d9:40:a7:9a:b2:de:d3:d5:7a:d3:35:b6:21:
                    06:37:c7:79:4c:54:66:70:88:c4:f8:40:14:26:33:
                    42:a5:b9:cb:ff:08:06:c9:94:91:02:70:1a:f3:37:
                    46:1c:cf:bf:1f:80:c0:9c:34:63:76:7f:f4:31:08:
                    9a:38:34:60:d6:d0:40:a7:76:e7:35:0e:71:bc:04:
                    f0:a5:6a:c7:ee:3a:9e:41:36:68:d3:fc:cf:43:73:
                    eb:fc:1b:cc:5c:c1:6f:dc:f8:64:20:30:43:f2:0a:
                    7c:e8:7a:2b:66:05:f0:97:dd:a6:bb:d4:70:f2:8d:
                    7d:2d:46:d0:02:33:b9:cc:0c:ea:35:8b:a0:16:b0:
                    d9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A8:CA:BD:D6:24:F6:CB:1D:66:CB:37:19:41:E1:9C:7B:50:F3:63
            X509v3 Authority Key Identifier:
                keyid:8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:46:5a:19:96:06:f8:0d:a6:fa:9f:8d:90:2b:92:3a:bb:6c:
         33:71:e2:c2:bd:25:d8:03:6a:21:27:1f:6c:6f:66:9b:fc:19:
         05:d9:9f:cd:c5:76:09:ca:bf:cd:03:7b:f5:fd:f9:74:f0:6d:
         e7:cd:1d:e5:2e:c7:bb:f4:06:99:35:cb:6e:95:b0:0b:d4:b6:
         02:c0:57:84:45:16:71:fc:0c:6d:2c:62:f6:36:73:02:ee:df:
         27:41:f7:da:d9:42:3f:c8:83:f6:87:71:10:88:2d:2f:14:26:
         15:81:07:27:ac:c4:0b:b7:f8:fa:4c:7a:ee:f4:7e:01:a1:8c:
         82:89:87:ef:c0:ce:13:90:66:2a:45:8d:71:3f:d6:e6:31:8a:
         a1:dd:f0:ce:f5:d8:7c:80:93:2d:e2:08:a9:74:65:51:d6:3d:
         a9:3f:90:30:0f:f6:03:71:a2:99:0a:1c:a1:eb:1d:36:39:f7:
         4e:6e:18:14:16:db:1e:44:95:db:a0:76:f5:54:ee:fb:e4:93:
         51:74:41:05:7b:c9:3f:e9:83:2f:fa:e5:42:c5:fc:83:6f:25:
         9b:fc:0d:8e:a1:92:bf:cd:c7:f2:89:11:91:0b:9b:c3:a8:6b:
         2d:b9:ea:e4:7a:f2:f4:54:d4:e5:e2:0a:ee:54:f7:fc:a4:cf:
         ba:f2:f3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:29:11 2025 by rpki-client