Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
File:                     iX4CzNjrQDmng9AjecVf7p8M7lk.mft (raw, json)
Hash identifier:          DMIoaFKK0fCiSlV9U98UYiJ4lQR55RgzsGOsRYId9r4=
Subject key identifier:   6C:5A:BF:4C:57:23:E6:D0:F6:C5:5C:F2:02:0D:7A:65:25:B9:E9:27
Authority key identifier: 89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59
Certificate issuer:       /CN=A9146207/serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
Certificate serial:       081E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
Manifest number:          07F9
Signing time:             Mon 30 Jun 2025 16:02:19 +0000
Manifest this update:     Mon 30 Jun 2025 16:02:18 +0000
Manifest next update:     Mon 07 Jul 2025 16:02:18 +0000
Files and hashes:         1: iX4CzNjrQDmng9AjecVf7p8M7lk.crl (hash: sLQpKG+SgIR0iolP19fBODeyhkdxCDaKtePPVnax++o=)
                          2: E19826A0EAA511EBA4C1F32CC4F9AE02.roa (hash: 8D5ksmfc3aXF/CCypLFYWvFyrGXF0UBfGXqLK0BT+9c=)
                          3: 0CC38EEC80E711EBB8CFF825C4F9AE02.roa (hash: p/AuYRiNnSg4t0PmmsqbbQiBX6hKVTQkj6NVyO5NMng=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl
                          rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 16:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2078 (0x81e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146207, serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
        Validity
            Not Before: Jun 30 16:02:18 2025 GMT
            Not After : Jul  7 16:02:18 2025 GMT
        Subject: CN=6862b50a-21f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6b:66:4b:c4:81:ab:e0:80:01:74:71:be:5a:
                    ae:12:99:17:51:7a:25:94:c7:0b:73:ec:b6:cc:c6:
                    28:71:11:42:0b:d3:66:42:6c:2a:f5:9a:a6:24:94:
                    09:a1:28:e1:55:21:03:8d:24:91:09:02:35:3b:a8:
                    74:74:16:cd:80:75:95:ba:2e:d7:1a:b0:3a:d6:d0:
                    00:df:7a:f3:3c:95:44:b7:cd:d3:e2:6a:90:12:c8:
                    ef:cd:7f:92:2e:fc:9d:0c:a9:76:3d:ae:a6:a0:68:
                    49:de:69:0f:e7:90:1c:c4:b9:4f:4c:07:84:34:5f:
                    bb:a0:5c:23:96:79:63:a7:96:cd:00:58:86:00:72:
                    3d:02:42:c5:34:c9:47:ac:b6:cb:12:d2:40:1c:7a:
                    5c:0a:ec:82:f9:a5:5b:cb:48:05:ba:89:7e:50:4d:
                    fc:01:a8:b6:c4:d4:68:68:d5:b0:c9:7d:e3:9e:0e:
                    6d:18:6f:06:00:f8:0f:42:45:36:7f:27:71:6f:c0:
                    7b:77:92:63:18:9a:55:06:71:a2:48:dd:ad:71:10:
                    eb:77:74:51:86:f7:84:54:03:a4:fd:23:a8:ff:be:
                    f0:9e:ae:fd:45:45:9d:3e:e7:6b:57:07:30:db:f3:
                    71:f1:4e:f2:e6:f6:95:9d:fc:3f:80:47:97:8e:a8:
                    4f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5A:BF:4C:57:23:E6:D0:F6:C5:5C:F2:02:0D:7A:65:25:B9:E9:27
            X509v3 Authority Key Identifier:
                keyid:89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:47:4c:8d:d1:5e:0a:0d:72:a5:1b:d9:d3:f3:fd:fe:62:04:
         a9:41:fd:8c:d2:57:73:be:41:a0:a8:0f:a9:76:ce:fb:f4:3a:
         57:ae:8d:64:c0:f9:5d:ef:50:0d:bc:62:8c:80:86:1d:af:e7:
         8b:54:da:bf:99:fb:80:ee:59:d5:c0:94:0e:fe:84:b5:b2:c0:
         0d:b8:e6:f4:15:1c:20:9f:42:e2:8f:cc:37:1a:2d:83:f7:45:
         a7:a9:e3:14:80:3a:0f:ac:3c:92:c6:3c:cb:ac:f1:3b:87:6f:
         bc:75:fb:7b:59:66:f2:2a:fd:df:ab:de:ef:66:6a:31:d3:23:
         7c:04:cb:e8:c2:2b:2e:9d:06:97:c0:a9:99:0e:ac:47:a6:b5:
         1a:3f:94:48:f6:9f:b4:99:45:c1:09:37:de:9d:df:f3:02:4e:
         81:03:8b:17:97:c5:4c:8b:9f:03:83:73:23:37:fb:2e:70:7c:
         8c:4a:bf:08:04:cd:a0:aa:55:bd:e4:d9:bb:cd:a2:53:be:7b:
         7a:0b:b6:5d:39:32:d0:65:4e:bc:73:08:ed:76:e8:f7:8f:06:
         a3:7d:9d:14:51:b5:8f:4d:56:77:1d:32:aa:08:43:6b:fe:d4:
         e2:00:f1:7a:c3:e3:0f:82:32:c9:40:c7:28:f6:9b:76:c0:5f:
         68:e3:71:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:35:51 2025 by rpki-client