Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
File:                     9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft (raw, json)
Hash identifier:          6o+uBZL9sBfBU97ITqsnBTnc88y+Jk8HVQkgp4EwIj4=
Subject key identifier:   28:AF:5B:50:E4:C3:85:41:AF:DD:C3:5F:AC:58:B2:A2:3E:95:F1:13
Authority key identifier: F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1
Certificate issuer:       /CN=A9149BFB/serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1
Certificate serial:       0666
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
Manifest number:          065D
Signing time:             Fri 22 Aug 2025 22:45:57 +0000
Manifest this update:     Fri 22 Aug 2025 22:45:57 +0000
Manifest next update:     Fri 29 Aug 2025 22:45:57 +0000
Files and hashes:         1: 9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl (hash: 17h1whoJgrD8jXrs4hsXlzX3RhorY7tXpKbWv1Lf264=)
                          2: 613CF60638D211EF88A7B370C4F9AE02.roa (hash: y+RhkfZMGTxRVubK4QV96TYGnjkmbmFAXQyjgVFX8go=)
                          3: 948A2714980211EB82357D6CC4F9AE02.roa (hash: nUrfHwU2ledrvSpXzdKHdIfP/lVdp7uA8FU8ZIbWtPQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl
                          rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:45:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1638 (0x666)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149BFB, serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1
        Validity
            Not Before: Aug 22 22:45:57 2025 GMT
            Not After : Aug 29 22:45:57 2025 GMT
        Subject: CN=68a8f325-a588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:05:78:4b:31:8c:ef:72:bc:1e:a4:6a:bb:f5:
                    48:38:57:74:21:d1:9c:90:cc:74:46:e1:81:d7:05:
                    5f:f7:b6:5b:0d:dd:89:3b:88:fb:0b:1a:30:e2:7e:
                    48:43:6c:4d:98:4d:f1:a3:fa:5e:e4:ec:ff:44:c6:
                    b9:bc:b7:1a:20:80:00:32:c9:a4:62:6e:49:f7:ef:
                    cf:cb:0c:d3:c8:6e:6b:a4:24:57:78:68:bb:48:6d:
                    ca:48:09:65:71:e8:30:9d:5c:89:7e:b6:b8:9c:e2:
                    e2:a8:94:64:47:c7:96:6c:71:e9:73:8c:de:ba:e4:
                    e5:17:42:d9:3c:59:05:16:1e:4b:7c:69:a9:85:9e:
                    fc:7e:64:bd:bf:a8:de:51:6a:9b:61:6f:bc:cc:e3:
                    44:e8:0e:f3:06:f7:33:08:b9:b4:70:df:ab:f4:30:
                    40:90:29:03:0a:98:2e:4e:e8:52:05:4f:1e:07:b8:
                    45:d7:32:10:3c:84:38:c3:a8:ad:28:25:3a:cd:bc:
                    6f:6e:ca:77:6d:ce:8f:07:32:83:d5:2a:89:f8:7f:
                    c0:dc:4e:02:f1:b7:7c:db:6f:ed:d1:09:29:19:d3:
                    c7:7a:2d:be:53:ab:e8:60:15:4e:c4:9d:5a:ea:6d:
                    57:fb:ee:54:2b:ba:15:5e:08:95:90:1f:0a:e8:bc:
                    44:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AF:5B:50:E4:C3:85:41:AF:DD:C3:5F:AC:58:B2:A2:3E:95:F1:13
            X509v3 Authority Key Identifier:
                keyid:F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:fd:d6:7f:cb:89:0c:47:3f:24:6d:74:49:d0:9f:f4:21:b2:
         b5:32:32:d1:cd:bc:38:23:25:bd:69:9f:5c:35:cb:6c:5e:22:
         53:77:89:ec:cc:6c:b1:ef:ab:19:1b:d7:fc:38:34:d6:56:c3:
         cf:ea:0b:e5:4b:9e:ff:c9:9a:c1:cc:8e:0a:d3:d6:7a:84:7c:
         06:3f:10:24:30:7c:10:d5:d2:f8:96:8e:c7:da:a6:1a:d6:13:
         05:5a:4d:06:b5:9e:c8:18:91:46:3f:01:bd:7e:14:e1:4c:d3:
         56:bb:01:3e:cf:7e:8c:3a:78:7a:6c:ee:42:cc:70:59:a5:21:
         c1:51:b1:c3:f9:b7:a3:c8:06:85:ec:d0:be:ba:9e:b5:00:d4:
         c1:59:21:dc:a9:ed:04:cb:99:75:ad:5e:96:0e:d1:db:3c:70:
         ce:0f:5b:9a:8a:7d:0b:c3:37:f0:17:8b:80:96:a9:c5:4b:0e:
         a6:c6:a5:3b:7f:d9:e9:52:9a:2d:7e:0a:ca:d9:4a:b9:25:48:
         55:95:a9:03:86:3b:c5:dd:f7:b7:be:31:73:56:c9:4f:24:0c:
         df:fe:20:b3:dd:fa:2f:38:c2:3f:bc:1e:11:18:e6:a8:83:ce:
         03:f4:6a:d2:94:cb:c4:dd:33:1f:c1:09:77:d9:b9:ef:ef:a3:
         1b:89:07:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:38:17 2025 by rpki-client