Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft
File:                     9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft (raw, json)
Hash identifier:          0WRtkvNzBuU68Wn+mbEYqqj/5rVH403mpg3M67mjpkI=
Subject key identifier:   26:A0:7B:92:93:87:24:BF:A2:37:8A:13:54:DD:9F:39:94:B3:19:50
Authority key identifier: F7:2E:88:00:6B:E8:88:5B:6F:34:A6:7D:6F:5B:84:20:9A:D9:96:C8
Certificate issuer:       /CN=A9140917/serialNumber=F72E88006BE8885B6F34A67D6F5B84209AD996C8
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft
Manifest number:          4C
Signing time:             Thu 03 Jul 2025 07:41:35 +0000
Manifest this update:     Thu 03 Jul 2025 07:41:35 +0000
Manifest next update:     Thu 10 Jul 2025 07:41:35 +0000
Files and hashes:         1: 9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl (hash: 5YQZg947XZy6yg8gctz3GligsXwde+aiwIzVCCn41I4=)
                          2: 54438BB2150A11F08FAB4D29C4F9AE02.roa (hash: QyFlPzNaTAV4qZ+Q91sObqyXdS2spwmY+8JMAhH/OYQ=)
                          3: 0173D2DC217311F0BAF2AA30C4F9AE02.roa (hash: nryCYlJbHFwsxOAc1QWOqjcmSxXnzL35lsWmd38XYPI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl
                          rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140917, serialNumber=F72E88006BE8885B6F34A67D6F5B84209AD996C8
        Validity
            Not Before: Jul  3 07:41:35 2025 GMT
            Not After : Jul 10 07:41:35 2025 GMT
        Subject: CN=6866342f-b9f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ba:70:4d:e2:be:20:e9:03:22:e1:44:6e:17:
                    50:91:ad:48:20:ab:1e:9d:40:36:8e:27:8b:31:89:
                    7e:ce:3a:9f:72:92:65:18:b9:8a:19:7e:ef:3e:aa:
                    97:8f:70:40:f2:1e:d0:ee:9f:42:0c:f1:5f:0a:01:
                    7a:ae:fd:3e:55:16:07:a3:c9:a2:b4:8e:0d:7d:19:
                    9d:68:44:0e:86:c9:75:79:2c:a3:54:aa:70:49:6b:
                    0e:b2:a7:dc:31:2d:7d:bd:b6:e2:b3:01:99:11:f1:
                    be:7d:44:b2:64:88:c3:1c:58:5c:67:80:0c:82:2b:
                    5c:70:9c:68:ba:01:12:72:bb:c7:03:aa:66:8b:c0:
                    7c:c6:43:dd:1e:03:15:27:b4:50:33:4b:11:72:eb:
                    39:e5:d7:df:a4:8b:0a:43:fd:f8:db:1c:d9:d9:f2:
                    77:1f:06:bb:d0:53:cd:bd:e4:1c:f9:ed:d0:96:4b:
                    25:f6:a8:b0:b7:d6:a7:c5:50:84:62:4e:74:65:37:
                    a8:f4:1f:0b:78:2e:02:ba:6d:c7:59:91:58:32:9d:
                    55:39:8a:7a:66:90:b5:03:69:e8:17:92:f1:98:e5:
                    f0:3d:f2:a0:32:b6:68:5a:72:83:a3:2e:a0:c0:03:
                    45:06:d9:77:70:0b:fc:43:2b:66:c8:9f:dc:35:b4:
                    69:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A0:7B:92:93:87:24:BF:A2:37:8A:13:54:DD:9F:39:94:B3:19:50
            X509v3 Authority Key Identifier:
                keyid:F7:2E:88:00:6B:E8:88:5B:6F:34:A6:7D:6F:5B:84:20:9A:D9:96:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:68:66:d4:97:c0:ad:7c:25:f5:b7:e3:ec:19:1c:35:62:1d:
         07:5b:f3:16:93:ba:03:a8:a1:9b:0c:d1:4c:d6:00:34:7b:ed:
         8a:4e:11:d8:41:36:d2:b8:20:21:d2:8d:0b:c4:f7:27:98:69:
         bd:04:95:d4:c7:ec:6e:f0:8e:de:16:a2:3e:c9:31:6a:a4:55:
         41:05:9b:7a:11:16:f1:02:08:22:c9:f8:96:80:6f:d5:ab:10:
         47:20:0d:c9:cc:22:de:47:d8:2c:da:e6:ad:ab:1b:e8:90:38:
         c5:b0:6e:7b:bf:18:00:ed:cf:57:53:5c:9c:7c:76:e8:3d:3c:
         79:16:a1:c4:52:75:d1:0e:ea:93:58:04:23:31:51:77:cb:5e:
         79:e8:50:bc:a8:87:06:d4:0d:01:bb:a5:c6:08:10:fa:59:0b:
         b5:75:89:d2:f7:7f:55:01:3f:65:16:86:7f:c4:06:99:3b:cd:
         0c:b9:34:95:24:1c:66:fd:f9:b2:35:99:7a:38:b2:9e:63:e9:
         2e:d0:ee:70:15:2c:47:0b:21:0d:85:62:f9:d0:e1:41:67:20:
         b6:61:05:06:67:62:b3:14:0b:3b:b9:a4:2b:fe:2e:3d:ed:f0:
         fc:34:5f:5f:46:1c:82:c8:e3:e4:f2:c4:66:f6:dd:6c:48:10:
         3d:9b:bb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:44:04 2025 by rpki-client