Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
File:                     0AZhDr1oKXhFffitopEQATORAZI.mft (raw, json)
Hash identifier:          WjyF+zUrHVEXGMrMWsgI1QeRmwxjOIzdQZqh+T7LlPU=
Subject key identifier:   10:EB:B3:32:5D:BD:26:DD:17:B8:4B:47:1E:13:B8:69:FD:9F:EB:13
Authority key identifier: D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92
Certificate issuer:       /CN=A9153A6E/serialNumber=D006610EBD682978457DF8ADA291100133910192
Certificate serial:       0E8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
Manifest number:          0E82
Signing time:             Wed 02 Jul 2025 17:55:08 +0000
Manifest this update:     Wed 02 Jul 2025 17:55:08 +0000
Manifest next update:     Wed 09 Jul 2025 17:55:08 +0000
Files and hashes:         1: 0AZhDr1oKXhFffitopEQATORAZI.crl (hash: fvNdu6KGxKhR6ArWiecQac1Z3/UbTbhI4TkICGee+So=)
                          2: CBD704945F5F11EFB99ABA76C4F9AE02.roa (hash: 8S2L4PIf85V9FtE2NxlTWF91adX1vQpLiZaP3LriZvM=)
                          3: 42431FFC8FF711EEA0FC990FC4F9AE02.roa (hash: dBVxIuxXi1IfubYTqCooyEf06bco+4CSqK6CVlwkBZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl
                          rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 17:55:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3727 (0xe8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153A6E, serialNumber=D006610EBD682978457DF8ADA291100133910192
        Validity
            Not Before: Jul  2 17:55:08 2025 GMT
            Not After : Jul  9 17:55:08 2025 GMT
        Subject: CN=6865727c-610e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:28:45:c2:01:09:1c:da:cf:ac:28:5c:c2:25:
                    ef:c2:98:32:90:8c:ad:8c:48:d7:51:38:de:90:7b:
                    1d:ce:81:e9:31:e8:a0:56:66:13:d4:d1:9e:31:50:
                    9f:00:af:4b:31:23:07:e4:3b:48:25:4f:97:93:f3:
                    37:9d:0c:bb:03:01:34:db:46:c8:0c:28:2e:3d:c2:
                    b3:11:b3:5c:17:9a:e7:aa:c5:f1:bf:a7:2b:e8:5b:
                    e8:96:cf:b9:de:5e:07:5b:da:30:dc:8f:11:6e:37:
                    d5:f7:b5:f1:de:25:d6:bc:26:94:fd:5a:9a:90:6c:
                    b9:7b:77:34:bf:cc:cb:77:97:56:4a:7a:66:d3:6c:
                    f7:c9:cd:17:6c:55:d8:f3:a6:c9:ba:aa:56:eb:72:
                    63:10:f8:9b:4b:69:10:7f:1e:f2:41:d8:38:55:12:
                    f6:d2:ed:78:22:80:ac:46:b3:ea:60:4a:78:c3:08:
                    44:f1:53:35:5a:63:b8:f9:fa:97:65:66:d7:c0:ef:
                    7b:cd:ae:50:65:02:91:8f:5a:0d:f3:1c:d0:27:5e:
                    6c:c8:d6:2c:a9:1f:ff:cd:38:cc:2c:4e:dd:9d:43:
                    24:f8:27:f1:c7:c0:09:7d:ff:a4:0e:85:65:dc:3b:
                    5a:d9:47:c2:cb:b1:ae:77:3a:16:30:87:25:cc:b6:
                    a7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EB:B3:32:5D:BD:26:DD:17:B8:4B:47:1E:13:B8:69:FD:9F:EB:13
            X509v3 Authority Key Identifier:
                keyid:D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:c7:0f:b7:8a:29:98:d2:f8:b8:3b:55:f9:80:6c:db:29:3b:
         0b:8c:7f:35:a1:86:31:bc:a0:2d:23:59:df:07:02:e2:45:77:
         83:e4:c9:22:ff:b5:0b:97:07:67:ff:e0:18:63:41:25:c0:78:
         17:fe:e5:8f:bb:48:fb:24:d2:9b:54:01:ce:ed:b3:de:c4:e0:
         63:02:53:0d:d8:90:cc:f5:37:23:58:d3:1c:cd:7f:2b:b9:83:
         7c:56:53:5a:8d:60:f2:dd:ca:c0:ea:61:bd:9f:f4:40:d9:8e:
         0e:ed:b6:d6:8f:2e:8b:51:46:51:a1:21:b8:77:32:37:fb:49:
         45:cd:2b:de:7e:00:7b:68:c7:6b:b9:1c:1c:85:18:da:7f:44:
         a8:ba:ee:e5:7a:cd:57:ad:32:b2:41:63:09:ad:2b:60:61:b4:
         67:21:18:8c:61:d4:fa:81:12:a5:57:96:9b:36:b3:a3:2b:e5:
         5a:53:2d:bb:0a:4e:3a:cf:90:d5:fc:be:15:0e:5e:3d:60:36:
         2f:02:8e:43:71:f3:81:b7:94:e2:42:41:ac:bb:38:24:d5:db:
         99:32:7e:bf:2b:40:4b:72:90:30:3b:3e:ec:7a:66:d4:f2:75:
         31:59:c8:23:1d:13:a5:5f:7a:37:d8:2e:c1:5b:77:d3:f8:e0:
         ec:d3:56:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:53:55 2025 by rpki-client