Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
File:                     9DRcMU1uvt60X-B1X4_-rPNjy4o.mft (raw, json)
Hash identifier:          UgMBCHARVE661mFxFQuYycf0PnAFt8I+EpUyDHddjuc=
Subject key identifier:   1E:FA:B6:6B:E4:60:35:61:82:D2:6F:99:F7:17:9A:D0:2C:3F:D5:40
Authority key identifier: F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A
Certificate issuer:       /CN=A9158D75/serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A
Certificate serial:       0CD2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
Manifest number:          0CB6
Signing time:             Fri 04 Jul 2025 18:27:33 +0000
Manifest this update:     Fri 04 Jul 2025 18:27:33 +0000
Manifest next update:     Fri 11 Jul 2025 18:27:33 +0000
Files and hashes:         1: 9DRcMU1uvt60X-B1X4_-rPNjy4o.crl (hash: IhP5MiUGRqtKFxdyZGJM7/wTWuJcpzg5ojJ2O5PQ/BM=)
                          2: B4B32D509EDD11EC85676D09C4F9AE02.roa (hash: HUKn8TCAiBNnvKqCcCok66Nsu0wRIivvDnUfIyEmyBw=)
                          3: 2477AFC6D56511EDB2407741C4F9AE02.roa (hash: +UszTokGWITuaKodHVqtXowS/kPpAyLOoDwxxniGhh8=)
                          4: B36E1C029EDD11EC85676D09C4F9AE02.roa (hash: va4jKyvaWBHSOXW9lhNLFk3dXPhiBg3Z1DqKqXpZves=)
                          5: B5EA3B509EDD11EC85676D09C4F9AE02.roa (hash: PI+4io6zs54SvjfIWW1YmDzNzGjU5q2yfd6LaVWJgGw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl
                          rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3282 (0xcd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158D75, serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A
        Validity
            Not Before: Jul  4 18:27:33 2025 GMT
            Not After : Jul 11 18:27:33 2025 GMT
        Subject: CN=68681d15-0a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:39:e4:d5:dc:d5:6c:ac:1e:fe:b0:3d:48:99:
                    f5:92:30:15:12:ed:20:7a:56:ca:82:87:94:7f:e2:
                    71:77:a4:90:62:d5:8e:96:e3:61:ed:19:fb:e5:57:
                    e2:6c:b8:df:b5:bc:64:ef:65:86:a7:e4:77:95:3b:
                    13:0f:11:10:99:1c:de:b8:5c:bc:3a:d8:64:84:3c:
                    3d:d3:78:cb:2a:1a:bf:18:6e:95:01:c7:74:0b:93:
                    8f:fd:b8:1e:96:60:1c:e7:98:2f:c8:68:28:44:a3:
                    7b:e6:ad:ee:8a:d6:da:f3:df:25:6b:5f:7d:38:03:
                    33:a3:26:fd:93:5a:3a:62:e4:49:a2:59:8a:02:0a:
                    b2:a0:38:0b:bd:94:b4:a0:2d:80:c2:dc:02:6e:a7:
                    d0:dc:1a:62:25:b1:15:84:9c:65:ee:87:c6:49:99:
                    47:49:0e:62:63:5a:b2:69:07:cb:77:66:54:40:0f:
                    7f:54:de:f3:71:40:2c:76:8a:75:66:87:50:ca:d6:
                    23:89:e2:93:27:57:9f:d2:ad:a8:a6:b2:7c:48:78:
                    59:c4:de:88:9e:61:1d:9a:fd:1c:4a:f2:3e:29:c4:
                    5e:bb:81:3f:ea:71:a1:eb:99:8c:b6:9d:53:21:82:
                    c7:6f:d4:44:32:2b:f8:b7:59:6a:10:2a:0b:5d:c6:
                    06:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:FA:B6:6B:E4:60:35:61:82:D2:6F:99:F7:17:9A:D0:2C:3F:D5:40
            X509v3 Authority Key Identifier:
                keyid:F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:c2:76:ab:76:54:61:25:9d:c5:da:b9:b4:e1:1c:9c:ea:d1:
         27:83:c8:7a:ef:b1:f7:da:f8:9c:b2:33:8d:40:1c:35:3c:e9:
         85:fe:7c:46:f5:e7:4d:3c:bc:58:23:24:7e:28:a5:d8:64:4c:
         6b:d0:52:27:93:0e:a4:79:c1:1e:6f:90:7c:f2:e9:65:fe:84:
         d8:3e:8d:7f:d6:09:86:75:58:ca:17:e4:eb:28:93:ed:47:02:
         fb:0b:a9:d1:fa:db:8a:df:4e:cd:b7:28:fe:1b:c5:1d:cf:68:
         ca:19:71:7c:1a:ae:b2:00:42:64:79:6e:ce:6b:23:cc:47:a5:
         9c:bf:3c:bb:2f:85:ad:be:fe:a6:83:b0:e8:37:8e:91:3c:4a:
         64:92:9c:83:d4:6e:45:7e:a2:a9:2c:e0:0c:fa:a7:60:69:e1:
         b7:6b:74:ad:d6:09:fe:cf:25:09:b4:0e:5b:ad:d9:f9:76:82:
         2c:80:1f:7b:bf:97:f6:27:0a:63:70:53:d7:4a:d1:dc:22:7d:
         f0:92:76:a6:81:37:1b:51:1e:f8:98:78:c9:ea:70:98:42:97:
         aa:10:7a:2e:43:26:0e:1c:50:ee:ab:a8:ff:03:a3:42:d0:d0:
         c6:0d:ee:dc:57:db:33:4e:aa:fb:82:f0:54:a5:b4:e4:ec:60:
         e4:f7:1f:d4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NThENzUxMTAvBgNVBAUTKEY0MzQ1QzMxNEQ2RUJFREVCNDVGRTA3NTVGOEZGRUFD
RjM2M0NCOEEwHhcNMjUwNzA0MTgyNzMzWhcNMjUwNzExMTgyNzMzWjAYMRYwFAYD
VQQDEw02ODY4MWQxNS0wYTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzTnk1dzVbKwe/rA9SJn1kjAVEu0gelbKgoeUf+Jxd6SQYtWOluNh7Rn75Vfi
bLjftbxk72WGp+R3lTsTDxEQmRzeuFy8OthkhDw903jLKhq/GG6VAcd0C5OP/bge
lmAc55gvyGgoRKN75q3uitba898la199OAMzoyb9k1o6YuRJolmKAgqyoDgLvZS0
oC2AwtwCbqfQ3BpiJbEVhJxl7ofGSZlHSQ5iY1qyaQfLd2ZUQA9/VN7zcUAsdop1
ZodQytYjieKTJ1ef0q2oprJ8SHhZxN6InmEdmv0cSvI+KcReu4E/6nGh65mMtp1T
IYLHb9REMiv4t1lqECoLXcYGSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB76tmvk
YDVhgtJvmfcXmtAsP9VAMB8GA1UdIwQYMBaAFPQ0XDFNbr7etF/gdV+P/qzzY8uK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ3NS83NDM0OTQwRUYy
NUUxMUU5OTEzMEIxODFDNEY5QUUwMi85RFJjTVUxdXZ0NjBYLUIxWDRfLXJQTmp5
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlEUmNNVTF1dnQ2MFgtQjFYNF8tclBOank0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OEQ3NS83NDM0OTQwRUYyNUUxMUU5OTEzMEIxODFDNEY5QUUwMi85RFJjTVUxdXZ0
NjBYLUIxWDRfLXJQTmp5NG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC/wnardlRhJZ3F2rm04Ryc6tEng8h677H32vicsjONQBw1POmF/nxG
9edNPLxYIyR+KKXYZExr0FInkw6kecEeb5B88ull/oTYPo1/1gmGdVjKF+TrKJPt
RwL7C6nR+tuK307Ntyj+G8Udz2jKGXF8Gq6yAEJkeW7OayPMR6Wcvzy7L4Wtvv6m
g7DoN46RPEpkkpyD1G5FfqKpLOAM+qdgaeG3a3St1gn+zyUJtA5brdn5doIsgB97
v5f2JwpjcFPXStHcIn3wknamgTcbUR74mHjJ6nCYQpeqEHouQyYOHFDuq6j/A6NC
0NDGDe7cV9szTqr7gvBUpbTk7GDk9x/U
-----END CERTIFICATE-----
Generated at Sat Jul 5 04:20:59 2025 by rpki-client