Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
File:                     9FQft3ll3hSln57yM94Z-SBfX5g.mft (raw, json)
Hash identifier:          YVrPfJbRwSCEBDS1T5saOY4nwFqH8LN4cp/Jbcmdyh8=
Subject key identifier:   DA:C4:EC:2E:1C:FF:3A:D3:C7:5D:76:30:1E:47:BF:C8:D1:DB:7A:49
Authority key identifier: F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98
Certificate issuer:       /CN=A9137917/serialNumber=F4541FB77965DE14A59F9EF233DE19F9205F5F98
Certificate serial:       0775
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
Manifest number:          0760
Signing time:             Mon 12 May 2025 21:31:10 +0000
Manifest this update:     Mon 12 May 2025 21:31:09 +0000
Manifest next update:     Mon 19 May 2025 21:31:09 +0000
Files and hashes:         1: 9FQft3ll3hSln57yM94Z-SBfX5g.crl (hash: ptvYeQuTRK1K6lZv4snhBtScDZi3w3601G32gse+a/4=)
                          2: DF8912BEB1E511EB90B9DD25C4F9AE02.roa (hash: T5bntFKOXUJY90ZSt6wzx94eeco+PumRT0JCKh3cGUw=)
                          3: 992104CE2EA211EBA8D67685C4F9AE02.roa (hash: bUp2cjSjB8euJOCWev8E1H5hopCa1Aw3wJo+GROBZeQ=)
                          4: BB0569102A0411EB992DD32EC4F9AE02.roa (hash: dvmoao5w0dhRpuJXrUoAicHpE15a14VjXEHjG+ZtN2s=)
                          5: 978FBCD82A0E11EB8CC1535DC4F9AE02.roa (hash: chXP+1t4OQYuslJa71TUWuDUjFMZecLJSL+PfYVGy/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.crl
                          rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 21:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1909 (0x775)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137917, serialNumber=F4541FB77965DE14A59F9EF233DE19F9205F5F98
        Validity
            Not Before: May 12 21:31:09 2025 GMT
            Not After : May 19 21:31:09 2025 GMT
        Subject: CN=6822689d-90f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:59:bb:1a:22:bb:63:f4:92:56:e5:98:9f:dd:
                    fe:c8:e2:96:e5:44:34:ec:43:1c:bf:10:27:6a:33:
                    11:24:66:17:a2:17:6a:5f:90:00:b3:bb:00:14:8d:
                    fc:69:8e:e9:f1:94:54:41:b2:7f:24:56:08:cc:12:
                    f0:f7:9b:86:88:92:99:34:c8:8a:d5:5d:00:5e:99:
                    90:89:10:9e:e1:d2:30:18:c4:4d:d1:cf:96:4b:c0:
                    f5:7a:56:5d:60:00:8b:b3:a5:fc:4c:b4:75:24:ee:
                    16:95:e2:84:2f:04:56:c1:44:20:fe:b9:65:23:8c:
                    f5:0c:52:9c:94:15:df:87:2a:72:1b:47:05:d5:98:
                    4d:11:45:d6:e3:30:fd:74:2d:e1:23:4e:04:d5:cc:
                    1d:dc:87:a9:5f:09:32:95:ff:d4:fb:10:f6:a8:e2:
                    c7:83:6c:81:3f:1e:26:36:04:cc:60:ad:24:66:c6:
                    e5:7b:8f:79:17:bf:0a:13:52:64:ee:8f:44:71:dc:
                    a6:fd:99:60:23:15:21:d9:35:0a:d1:23:4c:54:69:
                    48:94:69:b4:0b:1c:70:c3:93:13:09:ed:54:10:d0:
                    27:da:ad:01:f3:50:e7:85:82:f3:ee:3f:e4:2a:a3:
                    b5:7b:47:04:79:a2:c6:75:2b:5d:18:22:30:4e:26:
                    57:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C4:EC:2E:1C:FF:3A:D3:C7:5D:76:30:1E:47:BF:C8:D1:DB:7A:49
            X509v3 Authority Key Identifier:
                keyid:F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:d6:79:6a:02:ae:d6:30:7e:f7:f1:34:69:94:c1:fb:66:e7:
         58:56:8e:3a:1c:01:ce:5b:81:88:da:e2:92:49:b1:55:eb:50:
         98:eb:73:6a:94:25:b2:0f:8a:07:ff:47:dd:1a:58:79:23:52:
         89:ae:1b:67:d1:dd:60:48:bb:93:44:2b:6d:78:37:64:2f:ae:
         1c:db:e6:ce:9d:6a:94:ce:b5:bf:1d:3d:67:c6:35:4f:c9:aa:
         19:3d:ce:2b:52:ff:20:ff:61:d1:95:09:fc:bd:b2:ff:3a:dc:
         7a:ce:70:23:4a:8a:4d:ca:d0:67:24:f1:8d:b7:8e:e6:73:39:
         26:72:1a:b2:f0:3c:68:1e:9b:3c:3d:3b:e6:bc:99:7f:b1:eb:
         70:4c:4b:7f:2b:fc:3b:e9:83:04:20:18:06:5b:1a:05:f1:3a:
         eb:dd:f8:f7:53:3d:b3:cb:9d:88:bd:c5:c7:cc:29:af:e5:a4:
         aa:e3:33:c8:99:c2:89:26:ed:3d:ea:e6:c9:a1:36:bc:c7:3d:
         3d:5c:26:a3:93:80:ac:b9:26:5f:eb:93:58:07:0c:6a:d6:18:
         26:d0:33:06:60:1a:e3:65:29:08:3f:24:3d:93:6b:03:59:e8:
         61:60:b6:4b:c3:f2:f7:c6:25:ff:22:10:62:d0:b9:da:43:4f:
         b6:02:a2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:17:34 2025 by rpki-client