Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
File:                     R9Br1-qN8hl_cScLdclkx5q58Mw.mft (raw, json)
Hash identifier:          rEjC5SK03u1zrVyfmIWIIBtGnJYQEkEyYuFcmOB/b2A=
Subject key identifier:   E0:79:B5:C7:9D:04:0A:EC:7A:AC:00:02:15:CA:FA:56:47:B5:C5:4E
Authority key identifier: 47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC
Certificate issuer:       /CN=A9144354/serialNumber=47D06BD7EA8DF2197F71270B75C964C79AB9F0CC
Certificate serial:       117B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
Manifest number:          116C
Signing time:             Wed 02 Jul 2025 17:26:09 +0000
Manifest this update:     Wed 02 Jul 2025 17:26:08 +0000
Manifest next update:     Wed 09 Jul 2025 17:26:08 +0000
Files and hashes:         1: R9Br1-qN8hl_cScLdclkx5q58Mw.crl (hash: F4DgCHaECuAeoRZ+wJSksbkUUkg6r8yCwBOVObMSxwY=)
                          2: 1C6ADB02525311EA939E4652C4F9AE02.roa (hash: VfqKvYxCI56t83Xe2xSnLTZ4YYU3+AYmEJ7FdSPfdWA=)
                          3: 1B3EC39C525311EA939E4652C4F9AE02.roa (hash: 31ZyQUCr1HmkiWyW7LxwjsOe8qq4XgICKJjGASD158Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl
                          rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 17:26:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4475 (0x117b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144354, serialNumber=47D06BD7EA8DF2197F71270B75C964C79AB9F0CC
        Validity
            Not Before: Jul  2 17:26:08 2025 GMT
            Not After : Jul  9 17:26:08 2025 GMT
        Subject: CN=68656bb0-6cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0d:5f:80:0b:51:2e:bf:6a:4a:10:1c:07:3c:
                    32:fc:dc:73:0a:9f:ef:27:1f:03:fb:df:6c:5f:f7:
                    d7:e9:28:05:57:98:a8:78:3d:be:e1:e2:06:93:75:
                    aa:b1:f7:7d:9e:48:11:64:d7:0a:b2:30:f0:ca:26:
                    04:ee:94:81:1c:b4:07:29:70:56:7f:e5:da:5d:ef:
                    de:90:8b:ec:ce:c1:fb:f3:50:f3:0c:f6:e3:a8:52:
                    54:40:26:d2:ea:ef:b9:df:94:bc:f4:10:e8:f7:10:
                    0f:9d:b5:1c:58:cc:f7:05:ca:a9:a4:41:f4:c6:90:
                    02:ef:5c:90:f8:86:7b:d2:cd:11:23:b0:99:64:78:
                    9e:01:82:01:bd:e7:79:dd:82:8d:eb:63:31:36:41:
                    d3:24:c5:7e:e1:ec:6b:d4:98:b2:37:10:7f:11:7f:
                    d7:56:1f:98:e6:57:f2:5f:32:f2:43:76:50:86:5a:
                    eb:0a:6e:9d:2e:3d:71:ef:8c:39:ca:2b:a7:9b:d4:
                    46:03:97:18:28:b6:c6:51:12:8f:3e:47:37:5f:67:
                    a8:6f:e6:69:55:b4:e6:c6:ee:d9:b0:71:c4:de:de:
                    2f:20:39:4f:7f:d6:d5:79:75:69:df:03:5e:c8:03:
                    00:c7:e0:29:c6:e8:ac:e7:77:75:01:e9:6b:ac:ea:
                    db:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:79:B5:C7:9D:04:0A:EC:7A:AC:00:02:15:CA:FA:56:47:B5:C5:4E
            X509v3 Authority Key Identifier:
                keyid:47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:63:76:37:64:a7:4b:0c:8f:d9:d7:b2:2c:6c:34:bf:bb:d4:
         bc:cb:65:0f:2c:31:ad:85:80:da:bb:5b:52:aa:1d:ad:fc:3d:
         6c:02:a7:7b:7e:08:2d:05:22:19:3c:28:7a:a4:a5:38:2b:85:
         6a:0f:f8:e2:55:17:c3:16:5c:f0:34:eb:64:74:2a:07:59:65:
         4b:d1:f7:18:5e:b6:a6:53:4c:f5:61:c1:38:55:f8:64:3e:ca:
         4a:92:cf:0e:80:7a:ec:7f:ad:b7:61:09:1f:03:38:cd:6f:97:
         5f:30:34:1a:70:b5:56:b0:15:56:22:c7:50:b8:9a:31:d8:de:
         31:c0:e0:ae:9b:70:ee:00:74:f1:2d:50:cd:7e:a0:54:c6:e0:
         b0:41:da:b7:5d:18:b3:90:6f:7c:43:21:df:49:5b:e5:0d:9f:
         1b:4f:a5:10:3a:a8:47:c3:24:2b:8e:8a:92:a0:1e:83:e4:8a:
         b6:6e:3d:57:ab:bc:f4:db:9f:25:76:c1:50:c2:66:67:91:e3:
         2d:83:29:5c:26:ee:0d:8e:46:2d:70:f1:ae:a3:dc:8b:b8:dc:
         46:ac:f5:31:93:d2:9c:b9:27:cb:36:6d:74:95:33:85:44:8c:
         8f:b8:45:fb:22:7c:fa:86:d7:02:17:ec:34:74:98:f4:e9:ba:
         0d:79:94:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:37:06 2025 by rpki-client