Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
File:                     9mSsAmv09HwIdXzefyHsPPKk5k4.mft (raw, json)
Hash identifier:          NnG7Ui6wMK0IRLc77PDU/qylUwUnmPBrdIkz4Y2bdJc=
Subject key identifier:   0B:FB:0C:65:55:E7:46:86:3C:C6:3B:EE:90:BE:29:07:63:AB:51:F2
Authority key identifier: F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E
Certificate issuer:       /CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
Certificate serial:       1903
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
Manifest number:          18D6
Signing time:             Mon 12 May 2025 16:25:25 +0000
Manifest this update:     Mon 12 May 2025 16:25:24 +0000
Manifest next update:     Mon 19 May 2025 16:25:24 +0000
Files and hashes:         1: 9mSsAmv09HwIdXzefyHsPPKk5k4.crl (hash: 1moyjFAmUM+D9aXRA7eBmXxAegdJYraRXu+mqLXviYk=)
                          2: 0333AD1461FE11ECBD833921C4F9AE02.roa (hash: RzPoxU6VMwenRCZMIgDJU4uMvSt870PJ/i4+innQzD0=)
                          3: D3FDB470817311EFA6D1742FC4F9AE02.roa (hash: dibMVArE3npC/0CJpung5oQdTBClBsRdSRPJEkXo1rg=)
                          4: 118F422C816F11EF9ACB654AC4F9AE02.roa (hash: dqd2t4UXuMtWb1yN/NCXtKO4VOE3Updlpy8CHKQcrr4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl
                          rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 16:25:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6403 (0x1903)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153AE1, serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
        Validity
            Not Before: May 12 16:25:24 2025 GMT
            Not After : May 19 16:25:24 2025 GMT
        Subject: CN=682220f4-f5bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:11:b0:d8:21:68:da:52:3c:12:04:b1:b0:5d:
                    d2:1a:01:99:a8:1c:ab:cf:a2:fd:a4:97:b5:99:9f:
                    91:d9:a3:c6:b5:0d:13:ba:12:a8:ff:a8:9c:0b:58:
                    2b:64:af:57:95:92:66:c3:73:53:9a:a7:f8:66:55:
                    83:02:29:36:cf:47:4f:93:ed:d7:73:52:6a:90:12:
                    a9:95:a5:48:b2:2b:ec:d9:1e:a4:f2:7a:de:96:b9:
                    aa:7b:62:27:81:48:a0:cb:a9:44:fa:b3:6c:f1:be:
                    83:2c:a5:e1:8a:50:6b:20:0f:d8:9b:a9:65:d2:c2:
                    55:ee:c6:dc:b3:84:24:b3:20:6e:00:5f:be:cf:0c:
                    da:58:2d:c3:87:7d:b5:3b:a9:10:78:53:3e:f2:98:
                    c1:c6:c1:ad:9d:f4:ca:b7:f7:ea:38:74:e4:09:bc:
                    4e:20:6c:7c:e4:43:fa:9b:36:bf:67:19:65:d2:4c:
                    45:38:e8:55:1b:91:4d:b5:c4:cb:9c:c1:78:a1:9f:
                    9e:02:82:10:ff:45:ea:8d:17:e4:9b:d7:5a:fb:2b:
                    18:2a:2b:97:a3:81:34:5c:fb:a0:d1:a9:d9:c6:e7:
                    bd:8b:74:0d:64:7c:58:22:80:73:f3:95:be:2a:d8:
                    9a:60:07:e8:c0:5a:e0:96:4a:11:d0:8d:de:d6:2c:
                    e1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FB:0C:65:55:E7:46:86:3C:C6:3B:EE:90:BE:29:07:63:AB:51:F2
            X509v3 Authority Key Identifier:
                keyid:F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:8c:b4:a9:96:6f:a9:63:e2:2d:c2:d8:70:10:ba:68:0c:b5:
         34:a1:17:2b:99:4c:3a:8f:9e:93:a3:b9:ff:d2:2e:b4:81:c8:
         62:7e:01:93:90:10:ad:1b:89:d4:93:b9:52:a9:68:c2:2e:c7:
         67:aa:51:a4:fe:22:3e:3a:7d:f3:69:9c:6a:08:14:93:72:ab:
         81:5d:f0:1f:e6:15:3b:39:a9:eb:bb:83:8b:04:ed:96:68:bf:
         3b:dd:d4:27:aa:1b:b0:60:81:b0:97:7f:7a:a7:82:87:4f:eb:
         65:e9:16:02:89:d0:c5:e3:56:8f:ee:db:85:c5:aa:0f:a0:5b:
         d5:c3:81:7b:ad:b1:51:eb:19:a1:cf:30:98:dc:29:dd:0c:2a:
         00:e5:cb:e2:3d:2e:7c:97:6a:a1:de:78:ba:fa:d0:02:32:cb:
         79:1e:01:94:33:56:56:5c:94:ac:d7:de:be:2e:a8:3f:fa:aa:
         69:98:ff:48:e3:2a:e1:82:4b:b8:c2:eb:5d:59:19:5b:71:10:
         06:ca:5b:e6:29:4d:f3:3d:c7:03:12:22:5a:d8:79:33:de:7c:
         f2:71:74:40:a1:4b:86:ac:49:88:51:b7:78:fa:4b:67:d9:8a:
         44:3e:06:1a:3b:d7:53:17:80:df:1e:0d:b1:c3:52:ac:90:93:
         01:d6:88:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:27:17 2025 by rpki-client