Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
File:                     S9cDt_7KOqKoNmdfoPPzKYEub2U.mft (raw, json)
Hash identifier:          Sj5GVCvKL1/qsFXacel+GfiTyHUVdLrWR9EvA5k/lnM=
Subject key identifier:   D4:EC:CB:6A:14:EC:0D:2A:42:AC:B1:1C:B0:47:DD:63:15:D7:86:CF
Authority key identifier: 4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65
Certificate issuer:       /CN=A915FF72/serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65
Certificate serial:       01D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
Manifest number:          01D4
Signing time:             Sat 23 Aug 2025 02:56:35 +0000
Manifest this update:     Sat 23 Aug 2025 02:56:35 +0000
Manifest next update:     Sat 30 Aug 2025 02:56:35 +0000
Files and hashes:         1: S9cDt_7KOqKoNmdfoPPzKYEub2U.crl (hash: B6j7BPhKOPfZ4ZhBBSsFhwNYJWfpaH6uyNVIgOKwWeo=)
                          2: 13C23898BAA511EDB866A412C4F9AE02.roa (hash: h6q23QMfBwFmxIMVTA6ARQak7Qs7wYbVCQBIj8uPZPY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl
                          rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 02:56:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473 (0x1d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FF72, serialNumber=4BD703B7FECA3AA2A836675FA0F3F329812E6F65
        Validity
            Not Before: Aug 23 02:56:35 2025 GMT
            Not After : Aug 30 02:56:35 2025 GMT
        Subject: CN=68a92de3-a82a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:66:5a:51:55:93:30:21:89:58:3f:ff:f5:fe:
                    22:19:42:16:6c:a3:46:5c:b7:c7:44:b2:bd:f1:5e:
                    6d:4b:64:2d:82:78:a9:6f:e2:56:33:6f:e5:f6:d8:
                    a6:c3:19:7f:7b:54:3c:ed:69:bf:e8:07:85:df:61:
                    60:c7:da:fb:34:c1:df:b2:f2:07:6f:b6:7b:ad:31:
                    16:f8:ea:28:da:02:8a:e5:c2:f2:89:d6:ff:a3:c2:
                    95:43:a5:cd:f0:f9:8c:be:72:03:16:6a:6d:59:cf:
                    22:60:4c:c9:de:0f:f4:36:86:bf:f0:ad:4f:89:4b:
                    f9:86:02:37:14:2d:34:5c:79:22:c1:cf:f6:e8:77:
                    43:a3:ff:90:de:8b:96:22:7e:8d:4d:11:71:b3:70:
                    9c:1a:96:76:a4:ac:66:73:d1:8c:10:a0:29:99:44:
                    32:e7:12:8d:c4:75:2c:04:69:96:bb:bf:d3:71:90:
                    6e:ae:1e:9c:1b:78:01:7f:3b:e6:ab:83:b6:04:6f:
                    ec:1e:18:a2:a0:2a:8b:32:1d:43:5f:cc:4c:17:90:
                    d9:a0:9b:c0:ef:f6:8b:3b:7e:b7:7e:83:64:a0:a9:
                    bd:7a:ad:19:eb:2f:76:7e:cb:9e:5c:09:37:13:8f:
                    d5:88:bd:d2:b2:67:95:2a:c1:0d:d2:26:9b:a2:8c:
                    65:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:EC:CB:6A:14:EC:0D:2A:42:AC:B1:1C:B0:47:DD:63:15:D7:86:CF
            X509v3 Authority Key Identifier:
                keyid:4B:D7:03:B7:FE:CA:3A:A2:A8:36:67:5F:A0:F3:F3:29:81:2E:6F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S9cDt_7KOqKoNmdfoPPzKYEub2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FF72/26A559D6BAA011EDAD160172C4F9AE02/S9cDt_7KOqKoNmdfoPPzKYEub2U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:db:47:ce:3a:d7:7d:f8:44:fd:d9:5a:d0:28:49:2c:90:dd:
         9a:b9:22:94:d6:23:e3:0d:9b:2e:6d:f9:97:35:52:df:19:33:
         2d:e6:3a:27:2c:6f:bf:06:a3:04:fc:9a:ce:2a:a1:e3:ba:c1:
         60:87:92:fa:c7:2d:19:4a:48:74:4e:70:f9:6d:22:39:9e:81:
         17:df:21:4c:0c:e2:46:a0:25:8a:b9:f9:ab:fb:d8:c9:f0:a6:
         e0:08:65:f8:72:c8:2a:45:2f:72:c0:6a:d2:47:98:5b:cd:fe:
         17:15:ba:8a:12:a5:56:d5:8b:1f:4d:13:07:f7:4f:75:f6:97:
         81:42:90:9c:c3:17:05:21:32:4a:39:0e:64:3a:04:85:1c:45:
         23:99:07:9b:f8:8c:fd:dd:ba:30:77:02:0f:d5:e3:26:30:d2:
         48:17:86:48:c0:b7:ca:c3:01:f3:7b:2d:90:28:65:29:f0:36:
         df:ae:0d:04:d0:cb:c4:d1:93:27:49:e0:a2:9f:b7:8e:8e:1f:
         ad:a7:7d:31:07:8b:86:7c:5b:39:b8:fa:48:70:7d:03:e3:af:
         a4:f0:75:50:f4:de:6d:b8:1f:31:10:5e:86:a4:35:d3:b7:a0:
         2f:50:37:94:24:1d:66:40:0c:2a:12:5f:7b:6a:03:3d:ce:fa:
         a0:90:6b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:35:35 2025 by rpki-client