Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
File:                     9FQft3ll3hSln57yM94Z-SBfX5g.mft (raw, json)
Hash identifier:          gnKOT/ui3URUUhEDB/tdfquNxIyJQY96DsM70DaovvI=
Subject key identifier:   5C:11:D7:5F:77:CC:D4:44:03:8B:6C:C3:8A:37:52:42:11:66:BD:EB
Authority key identifier: F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98
Certificate issuer:       /CN=A9137917/serialNumber=F4541FB77965DE14A59F9EF233DE19F9205F5F98
Certificate serial:       07A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
Manifest number:          0793
Signing time:             Fri 22 Aug 2025 21:43:15 +0000
Manifest this update:     Fri 22 Aug 2025 21:43:14 +0000
Manifest next update:     Fri 29 Aug 2025 21:43:14 +0000
Files and hashes:         1: 9FQft3ll3hSln57yM94Z-SBfX5g.crl (hash: /fQK0IGFzFdq0rd5ptwkl9KFPCtv3PRG41zb1RR4J8U=)
                          2: DF8912BEB1E511EB90B9DD25C4F9AE02.roa (hash: T5bntFKOXUJY90ZSt6wzx94eeco+PumRT0JCKh3cGUw=)
                          3: 992104CE2EA211EBA8D67685C4F9AE02.roa (hash: bUp2cjSjB8euJOCWev8E1H5hopCa1Aw3wJo+GROBZeQ=)
                          4: BB0569102A0411EB992DD32EC4F9AE02.roa (hash: dvmoao5w0dhRpuJXrUoAicHpE15a14VjXEHjG+ZtN2s=)
                          5: 978FBCD82A0E11EB8CC1535DC4F9AE02.roa (hash: chXP+1t4OQYuslJa71TUWuDUjFMZecLJSL+PfYVGy/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.crl
                          rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:43:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1960 (0x7a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137917, serialNumber=F4541FB77965DE14A59F9EF233DE19F9205F5F98
        Validity
            Not Before: Aug 22 21:43:14 2025 GMT
            Not After : Aug 29 21:43:14 2025 GMT
        Subject: CN=68a8e472-3234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2f:b2:4d:c9:42:28:90:45:aa:5d:8b:88:af:
                    95:f3:11:c9:c2:e1:de:a0:c6:84:25:22:1b:31:93:
                    1e:97:cc:81:87:93:bc:94:2e:fb:e8:61:6c:7a:ae:
                    3a:f5:3b:55:5c:c7:15:64:bd:04:bb:13:6a:a2:58:
                    6b:f1:ee:e9:3e:d8:49:b7:84:c6:5d:8e:be:ab:21:
                    fc:9a:04:2b:3c:5d:d8:b6:57:87:78:74:49:ba:e2:
                    11:fb:79:4e:76:de:19:33:84:f3:a1:c1:9a:13:81:
                    a4:df:74:cf:70:2a:08:6b:2a:ab:dc:28:dc:db:c5:
                    08:c5:e5:41:5d:d2:63:f6:d4:8a:b4:9b:37:08:fb:
                    e8:71:1c:73:27:a9:98:cc:4b:8f:70:94:0e:be:28:
                    c5:d3:76:80:d7:dc:ea:df:1c:80:2d:d8:a7:60:d9:
                    da:e0:c5:39:77:b4:e0:95:ed:19:01:20:3c:6c:39:
                    fc:88:f6:03:c2:ae:00:1c:e3:0d:55:39:26:08:fc:
                    ec:7f:6b:15:db:8e:bb:be:fa:53:26:c7:92:2d:82:
                    cc:53:ed:de:8d:19:df:e3:9f:c0:c9:87:8f:be:01:
                    41:1a:45:c4:2c:30:e8:72:ed:60:47:97:d5:48:bc:
                    37:24:d9:76:a0:a1:3a:2e:85:c1:c1:0e:1f:9c:24:
                    50:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:11:D7:5F:77:CC:D4:44:03:8B:6C:C3:8A:37:52:42:11:66:BD:EB
            X509v3 Authority Key Identifier:
                keyid:F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:ff:64:d7:c9:02:f6:29:42:56:46:d0:cb:ac:c9:21:fe:b1:
         2f:40:bd:ee:a7:5e:29:b3:d9:d6:ba:10:38:dd:ea:25:8d:9f:
         fb:d9:eb:36:fc:72:df:11:df:d9:9a:3b:10:85:c3:8c:d6:ad:
         4e:11:9f:a7:be:b8:99:fa:f8:eb:3c:4c:c5:77:20:32:6e:4d:
         15:15:2c:b3:15:f8:57:ed:6e:54:16:4a:f0:b2:c6:a5:46:ab:
         76:0e:4b:fd:d6:24:a9:d9:81:5e:c3:72:24:30:f8:9c:7e:eb:
         7d:ba:3d:07:ca:28:ee:98:d8:02:fa:98:70:90:50:48:b3:ce:
         92:65:ae:73:7a:98:de:c0:43:bb:5f:a6:5a:25:12:d4:da:ef:
         9c:af:ca:49:5a:f2:12:6a:c5:bc:b6:e8:70:ed:ac:da:0b:4e:
         08:bd:2a:e0:3f:4d:35:79:c6:47:65:6e:19:b0:f4:10:09:34:
         de:df:4d:b2:2c:ae:b1:95:8d:15:4c:d2:9c:0d:46:b9:83:8a:
         6a:e6:a8:9d:07:31:56:7a:fb:c8:bf:42:45:1b:67:06:e9:ac:
         d8:4d:f8:ab:eb:91:ba:8c:52:dd:76:f0:c1:4f:a7:7a:ff:bf:
         e7:6f:00:3e:9a:90:1b:64:ee:d3:06:cb:56:e3:93:32:da:37:
         68:57:3d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:25:47 2025 by rpki-client