Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
File:                     9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft (raw, json)
Hash identifier:          D2Re/WCOTCvZLt7GabIQryYLURytzwJbbgtolg6B4kg=
Subject key identifier:   7A:C6:EF:D2:B7:4B:4D:FB:0D:78:86:62:F1:C9:98:14:EC:8B:C3:A5
Authority key identifier: F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89
Certificate issuer:       /CN=A91487A2/serialNumber=F68DCED2E602F446567410994A8E8C021009ED89
Certificate serial:       0175
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
Manifest number:          0170
Signing time:             Tue 01 Jul 2025 04:18:05 +0000
Manifest this update:     Tue 01 Jul 2025 04:18:04 +0000
Manifest next update:     Tue 08 Jul 2025 04:18:04 +0000
Files and hashes:         1: 9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl (hash: nC+SueI6nXDStGg5U18AIuqbSOAuoWVioOK3pZ7yrh0=)
                          2: E6F6831A26AF11EEA8E86146C4F9AE02.roa (hash: dKoEMXA8fRTWxjeYqmYYgyMSw9H1lwIw8Fa9EYm/xNE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl
                          rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 04:18:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91487A2, serialNumber=F68DCED2E602F446567410994A8E8C021009ED89
        Validity
            Not Before: Jul  1 04:18:04 2025 GMT
            Not After : Jul  8 04:18:04 2025 GMT
        Subject: CN=6863617c-468a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:15:a1:c9:8c:7b:4d:53:fb:ca:fb:f7:b9:d3:
                    10:3a:da:34:19:2a:c4:bd:79:9f:33:5a:ec:9d:a9:
                    7d:a4:a7:ec:d3:72:7d:37:f1:3b:22:b8:23:c1:b8:
                    63:4b:59:72:8a:3e:7d:07:df:9e:81:d7:b3:d7:fe:
                    58:21:63:02:b1:0a:59:e9:f2:89:8b:12:97:6b:c7:
                    32:85:5b:8b:e7:06:b6:17:39:34:d4:09:d8:0e:5e:
                    30:84:05:91:5c:fa:e9:85:6c:ee:fb:ca:89:e7:25:
                    ed:d5:ae:18:5a:d1:9b:69:c7:7d:17:6f:ea:6e:5a:
                    b2:26:85:26:b9:37:73:b8:d6:ee:ad:cc:bf:9b:6e:
                    b1:10:0c:16:ab:cf:29:f3:d8:78:f5:bf:34:a9:04:
                    d2:0b:5c:36:c5:4c:6c:02:31:2d:4f:37:cb:40:22:
                    41:c7:1a:2c:30:43:17:7b:67:63:a1:73:86:e8:9b:
                    c6:3d:fe:44:8f:41:48:c4:c9:20:55:8b:b2:fa:17:
                    5e:fd:37:d8:67:7d:f9:53:2c:f8:58:7d:ae:1b:93:
                    81:82:7f:2d:b4:e4:83:2c:94:e4:c1:02:d4:7b:01:
                    e1:d3:61:11:04:a5:4e:e2:6c:7a:10:35:24:7e:94:
                    3a:7a:01:ed:73:e1:9c:86:cd:19:31:12:6b:c3:fc:
                    06:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C6:EF:D2:B7:4B:4D:FB:0D:78:86:62:F1:C9:98:14:EC:8B:C3:A5
            X509v3 Authority Key Identifier:
                keyid:F6:8D:CE:D2:E6:02:F4:46:56:74:10:99:4A:8E:8C:02:10:09:ED:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487A2/406B610026AF11EE8AED4F45C4F9AE02/9o3O0uYC9EZWdBCZSo6MAhAJ7Yk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:7e:d0:2e:01:18:4d:9a:eb:f6:ec:70:7e:53:09:f3:e5:a4:
         bf:44:ca:f2:78:64:2b:e0:b7:49:3c:b0:10:14:22:ec:ba:38:
         ec:5a:69:c6:da:a4:d8:82:65:ac:d2:67:c8:fd:37:5c:de:5f:
         64:53:b7:f2:30:38:cc:64:22:81:50:1c:6c:5e:31:e1:2b:1c:
         9e:b9:41:af:5e:b7:72:32:1c:3a:1d:64:b8:7a:ee:2d:c9:f8:
         d8:e1:54:f4:c4:38:78:f8:dc:a5:fa:3a:36:00:9e:2c:62:c2:
         69:a4:fe:ab:83:51:08:53:ab:2d:da:78:8e:b6:0f:5f:92:f1:
         25:9e:cf:42:b6:1b:26:01:87:fa:51:0a:81:b4:f9:5b:00:e7:
         73:3a:e9:40:8c:7f:04:ce:f3:58:78:86:36:0a:6e:8c:95:36:
         68:02:78:1c:de:72:b3:a0:d4:b4:18:ab:9c:73:10:03:1f:20:
         f6:f6:52:31:b1:2a:96:e1:c5:34:be:51:0d:e7:a2:f5:62:df:
         5c:77:83:04:3d:15:d3:c5:3c:21:a3:a5:27:21:4e:d0:cb:6a:
         ee:e7:cc:c6:d8:2b:f2:0a:ec:19:e3:4f:ac:72:f5:8f:8c:8a:
         f1:fc:30:07:cc:c6:8c:35:a6:c9:5e:43:e5:d7:c6:51:1e:cc:
         d2:2f:8b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:18:48 2025 by rpki-client