Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
File:                     9FwPT0Z84VduXunkHlV28DSMRqc.mft (raw, json)
Hash identifier:          9GkjkWeYOTbiG9a1MGB2W1QjSe2Z9xAtVCKm4XG4E4I=
Subject key identifier:   2E:F6:72:9A:15:90:3A:ED:ED:93:91:C4:1E:EF:D5:19:E9:84:63:CC
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Certificate issuer:       /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial:       0B02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
Manifest number:          0A33
Signing time:             Fri 22 Aug 2025 20:17:28 +0000
Manifest this update:     Fri 22 Aug 2025 20:17:27 +0000
Manifest next update:     Fri 29 Aug 2025 20:17:27 +0000
Files and hashes:         1: 9FwPT0Z84VduXunkHlV28DSMRqc.crl (hash: tJPVS69S9wvrQeRasUYs3QW2aHJBDYHg7coxhedJY5k=)
                          2: 432BA1EC4D9011EC868F7186C4F9AE02.roa (hash: URaJZHDWPMBf4oTpXlSjA8N1epCCwA1he1DiC+P+VDQ=)
                          3: 91AB3450299911EDA389EC34C4F9AE02.roa (hash: dzTViCZ69Dd+v01VTdq8e2RvEYU1N06uBHk7UaC//2M=)
                          4: B1199D4A7BD511F0931F9741C4F9AE02.roa (hash: d1rtqtd5DkX7u7Z8ZYKwDr70JmMunH/Zp3zTJz40gMI=)
                          5: 30612F364BE411F09B3BB887C4F9AE02.roa (hash: eklJ7FzTn9mZj0/tgQ82yry1nIlD8nEbavqJJ/O2CPk=)
                          6: 6E00EC487BD511F09BD41D3EC4F9AE02.roa (hash: Vmx8N9Sl1/c/Vmo4dxKnLXiDkvQO87cpdCOZoTa3t3k=)
                          7: 427B2B004D9011EC868F7186C4F9AE02.roa (hash: E5HlYcC49Xvi6kpaq7+gL20czR33gGRvU+n3elbC34U=)
                          8: 57CD7E047CA311F093F6472FC4F9AE02.roa (hash: +GizQNJOUoft3UrNig3YMc6iST7wgCTGvemc3rzdIcA=)
                          9: 5B8CDC02351211F09D579B64C4F9AE02.roa (hash: 1bAgWcJLlliVR0f1esq/e37v/i+ofAYAVlxnxD5PONo=)
                          10: 4F7540B64BE311F096B8CE67C4F9AE02.roa (hash: LzQOe5AsPm2EK54x3xrF4JZf13QEa+HeQnFL3N5P7PE=)
                          11: 2D973430340E11EDB5E9BC42C4F9AE02.roa (hash: KM7uZ8V4nYgH56XPrIsS0TU+lQ74o7PGoNp9plcuH2g=)
                          12: F3425EF0684D11F0B2D5FA37C4F9AE02.roa (hash: sKlCLtK8hhQm8VuiIAwp38hlO/+xZC4Er2NThN2GwmY=)
                          13: 0D09F1969E4F11EA9EACCE25C4F9AE02.roa (hash: dtNfz/Keg7w+1A/MihzHZVUhq163+ywM42QNcaI/10Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
                          rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 20:17:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2818 (0xb02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
        Validity
            Not Before: Aug 22 20:17:27 2025 GMT
            Not After : Aug 29 20:17:27 2025 GMT
        Subject: CN=68a8d057-e3bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:46:16:c7:95:f4:87:91:f7:78:6e:2c:6c:e5:
                    be:ce:b4:d6:4e:ce:eb:8f:e7:25:82:06:c7:1d:bc:
                    61:52:3a:5d:e2:c7:d5:09:bb:13:d7:e3:d9:bf:49:
                    d5:cf:29:33:ab:fd:b2:2e:9e:f3:c0:0a:45:72:0a:
                    1d:02:70:73:ec:25:b1:dd:3c:d5:a4:db:a4:86:1f:
                    b1:d3:96:bb:c0:fa:ec:e4:79:d3:6f:56:bb:9a:3b:
                    03:71:a1:02:e8:6a:43:a6:11:ba:04:67:f9:b5:de:
                    37:b8:1f:e4:28:cc:7e:64:7d:ec:cb:70:ce:9a:b1:
                    96:39:dc:7f:c7:c4:ac:c0:51:c3:e9:3e:72:f0:36:
                    0d:d2:4c:9e:81:a3:36:24:09:c4:5d:0f:9a:f8:c2:
                    7d:3c:fd:47:d6:bd:25:e7:b9:d3:a0:74:24:0f:dd:
                    b9:8d:e5:7a:1a:a4:50:4f:c5:19:24:e0:ee:3b:e3:
                    f7:c9:74:33:9b:82:46:56:e0:a1:df:4c:a8:93:56:
                    69:30:14:ca:5f:58:63:85:eb:26:f1:0e:16:be:e4:
                    66:17:f2:67:a6:d0:3b:94:c7:9a:ad:02:84:9a:7f:
                    a9:f8:38:77:b8:26:aa:b5:3b:16:29:e9:ac:cc:00:
                    da:18:15:78:3f:39:14:83:a6:16:8b:bb:08:b7:1b:
                    b2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F6:72:9A:15:90:3A:ED:ED:93:91:C4:1E:EF:D5:19:E9:84:63:CC
            X509v3 Authority Key Identifier:
                keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:f8:0b:33:e8:1c:0d:44:16:58:6c:fe:e1:3a:15:a9:de:97:
         0c:57:9a:5e:0b:bf:13:43:df:8b:86:4e:ac:ab:9a:ed:fa:ca:
         c9:01:36:3a:04:23:8e:54:5e:ab:c6:18:6e:20:ba:33:a4:3a:
         16:d8:b8:13:c9:65:52:52:08:64:0d:fd:7d:0e:b8:bb:de:c9:
         50:62:ce:61:06:9f:68:a9:54:bb:76:65:6e:e5:fa:e1:14:b3:
         a2:c4:52:08:40:d7:b5:6d:ed:af:3d:98:d0:c7:66:f9:c8:d9:
         b6:58:d7:33:f9:73:5b:27:28:26:c7:04:1a:8e:dd:f0:d5:e8:
         d1:22:0c:46:32:bd:fb:4d:0d:76:9a:41:dc:07:e9:7a:8e:67:
         e3:72:fe:3c:a3:3e:ee:e2:bb:3e:65:77:4f:86:ad:e6:66:fe:
         30:82:b0:a6:82:db:71:b3:92:f0:1a:91:95:ec:67:e7:fc:e6:
         30:73:c8:1d:7f:f7:bf:74:1b:1e:db:b2:34:ab:cb:9b:d8:e5:
         2f:96:cf:d0:15:2f:d9:1b:f4:49:b1:e2:6e:e3:6e:26:ce:6e:
         0b:d1:77:40:32:24:7b:0f:b0:96:15:e7:81:6d:0d:32:fd:cb:
         a9:0f:1d:e6:50:b7:60:b5:bb:44:a8:7d:56:ca:9c:f8:79:4f:
         09:bc:57:ae
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw
MzQ4QzQ2QTcwHhcNMjUwODIyMjAxNzI3WhcNMjUwODI5MjAxNzI3WjAYMRYwFAYD
VQQDEw02OGE4ZDA1Ny1lM2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2EYWx5X0h5H3eG4sbOW+zrTWTs7rj+clggbHHbxhUjpd4sfVCbsT1+PZv0nV
zykzq/2yLp7zwApFcgodAnBz7CWx3TzVpNukhh+x05a7wPrs5HnTb1a7mjsDcaEC
6GpDphG6BGf5td43uB/kKMx+ZH3sy3DOmrGWOdx/x8SswFHD6T5y8DYN0kyegaM2
JAnEXQ+a+MJ9PP1H1r0l57nToHQkD925jeV6GqRQT8UZJODuO+P3yXQzm4JGVuCh
30yok1ZpMBTKX1hjhesm8Q4WvuRmF/JnptA7lMearQKEmn+p+Dh3uCaqtTsWKems
zADaGBV4PzkUg6YWi7sItxuyPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC72cpoV
kDrt7ZORxB7v1RnphGPMMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF
NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S
cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDE3Mi81OTc2MTI2NDlFNEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRW
ZHVYdW5rSGxWMjhEU01ScWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBm+Asz6BwNRBZYbP7hOhWp3pcMV5peC78TQ9+Lhk6sq5rt+srJATY6
BCOOVF6rxhhuILozpDoW2LgTyWVSUghkDf19Dri73slQYs5hBp9oqVS7dmVu5frh
FLOixFIIQNe1be2vPZjQx2b5yNm2WNcz+XNbJygmxwQajt3w1ejRIgxGMr37TQ12
mkHcB+l6jmfjcv48oz7u4rs+ZXdPhq3mZv4wgrCmgttxs5LwGpGV7Gfn/OYwc8gd
f/e/dBse27I0q8ub2OUvls/QFS/ZG/RJseJu424mzm4L0XdAMiR7D7CWFeeBbQ0y
/cupDx3mULdgtbtEqH1Wypz4eU8JvFeu
-----END CERTIFICATE-----
Generated at Sat Aug 23 07:03:41 2025 by rpki-client