Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
File:                     9HpCypKdg34XkyvKB9ZfgiyWRMs.mft (raw, json)
Hash identifier:          Yz8004Vp+P6zqI9mCpM6l1Yu/7iSPgBPqhfXqzXOtcA=
Subject key identifier:   D8:18:F3:CA:8E:98:3D:84:15:98:E5:01:EC:B7:41:6A:D4:B3:54:CF
Authority key identifier: F4:7A:42:CA:92:9D:83:7E:17:93:2B:CA:07:D6:5F:82:2C:96:44:CB
Certificate issuer:       /CN=A9169A9C/serialNumber=F47A42CA929D837E17932BCA07D65F822C9644CB
Certificate serial:       012E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
Manifest number:          012B
Signing time:             Sat 23 Aug 2025 03:49:47 +0000
Manifest this update:     Sat 23 Aug 2025 03:49:46 +0000
Manifest next update:     Sat 30 Aug 2025 03:49:46 +0000
Files and hashes:         1: 9HpCypKdg34XkyvKB9ZfgiyWRMs.crl (hash: y27hoElFzAWUjr0T01N4TIKvONvRQz6aNwTLtY0WbVs=)
                          2: 183B0B384E6A11F08A1BF84DC4F9AE02.roa (hash: Dmmpxo/YJEMbai3LZXF50f2qPKmpjF90qTq1CudRiYE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.crl
                          rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169A9C, serialNumber=F47A42CA929D837E17932BCA07D65F822C9644CB
        Validity
            Not Before: Aug 23 03:49:46 2025 GMT
            Not After : Aug 30 03:49:46 2025 GMT
        Subject: CN=68a93a5b-92dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ac:a2:c5:25:9d:cd:1c:8c:52:3c:87:0c:b2:
                    df:ee:40:80:58:bc:c6:09:e7:31:4c:c6:05:67:1b:
                    fd:15:60:51:12:50:51:76:04:34:86:20:53:24:06:
                    a9:66:28:9d:53:67:41:0e:6f:e0:72:46:7d:26:8a:
                    15:ba:75:e8:5f:60:4c:94:ac:be:ed:6e:1c:cc:7f:
                    e4:f3:ef:aa:0f:34:79:3e:ad:38:fd:da:96:1a:c6:
                    1a:47:64:ef:fc:f6:56:f7:82:6c:99:00:fd:8a:82:
                    4f:8c:b9:93:e2:75:74:29:81:10:00:da:dd:ef:4a:
                    07:ea:7a:8b:69:96:c4:80:bd:b2:20:cb:de:07:32:
                    c2:0d:8b:b2:90:b2:68:ba:43:fe:c5:2f:22:20:16:
                    b0:6c:a8:d4:05:fd:3f:9f:b3:52:50:1e:d7:fd:c6:
                    18:87:fa:bc:87:ce:ac:02:15:e4:26:22:18:35:fa:
                    80:ba:ef:d4:c8:6c:07:8e:7d:e3:83:74:a3:17:85:
                    9b:f2:70:10:ed:59:f8:78:86:e7:b8:cf:7e:0e:d7:
                    41:cb:5a:4c:f0:b3:ac:f7:bd:9c:df:56:81:43:95:
                    32:9d:73:fc:e9:a5:76:ae:94:5c:a8:2f:ba:b9:85:
                    ff:44:43:86:cc:24:2e:2e:d1:48:93:fe:2a:a9:62:
                    fb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:18:F3:CA:8E:98:3D:84:15:98:E5:01:EC:B7:41:6A:D4:B3:54:CF
            X509v3 Authority Key Identifier:
                keyid:F4:7A:42:CA:92:9D:83:7E:17:93:2B:CA:07:D6:5F:82:2C:96:44:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:cb:fe:d9:8b:da:7f:b1:3c:df:0e:cb:77:43:b8:74:a9:45:
         2b:68:90:d6:93:ed:54:a7:46:51:90:83:59:c9:8f:d7:bf:47:
         ff:18:50:9e:cf:af:68:8d:0d:a1:b0:7c:f6:05:c0:24:51:a4:
         7c:94:32:aa:4b:fc:ce:61:d1:14:49:ec:18:63:c2:ee:8f:ea:
         8d:a3:70:82:f6:d7:98:08:ad:e5:a1:f7:7b:b1:75:f8:ab:2e:
         df:8d:5b:79:56:52:43:f4:4a:46:2b:de:e5:1a:97:3d:1f:3e:
         85:48:1e:7a:5d:51:44:b8:b4:52:4c:07:0e:7c:01:be:0e:65:
         4f:43:cf:2e:22:0e:ac:31:49:65:b1:2f:ae:0d:a1:d0:e7:13:
         66:a9:9b:6c:2f:39:e0:82:45:83:cf:0d:d5:0a:01:b2:7b:f1:
         0a:18:1a:6f:c0:e4:4c:29:89:cb:91:22:35:e2:f2:2c:a2:85:
         ab:07:1b:8f:ab:2f:2e:ea:ae:fa:47:68:d9:b2:81:ac:35:fa:
         8f:47:c6:d0:d3:b1:7e:ea:44:c6:ab:44:60:24:8c:bf:da:72:
         9d:9d:c3:d0:bc:b1:9c:b7:75:9e:c1:8c:0e:99:77:db:d6:87:
         c0:a5:08:a4:8c:97:e4:36:49:e5:c1:86:2d:45:bf:e1:b5:2e:
         c8:df:31:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:55:11 2025 by rpki-client