Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
File:                     Br1EFUedLHUIN8XJQzYTuyWIrrg.mft (raw, json)
Hash identifier:          iiG6CH+nH4NWERXV/c0glFtTK95zEa2Cx965nu8efPU=
Subject key identifier:   58:95:37:C0:75:0B:FB:A6:44:B4:8C:C0:9F:7A:CA:A1:7E:1C:78:29
Authority key identifier: 06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8
Certificate issuer:       /CN=A9177FC9/serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
Certificate serial:       44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
Manifest number:          3D
Signing time:             Tue 01 Jul 2025 08:24:15 +0000
Manifest this update:     Tue 01 Jul 2025 08:24:14 +0000
Manifest next update:     Tue 08 Jul 2025 08:24:14 +0000
Files and hashes:         1: Br1EFUedLHUIN8XJQzYTuyWIrrg.crl (hash: bXzrgcEK69kRRbucG+igg6t3bf4OjmuXaeWZJ4DOxKk=)
                          2: FDD39BD607B811F0AB98B333C4F9AE02.roa (hash: qoLPoA4lZ1ha+1hCNURiczpMXcx77W01//WQ1dkufkU=)
                          3: FD6DA4D407B811F0AB98B333C4F9AE02.roa (hash: 1A7do/sKIO8NT6R3NBCJ/yFYUs9LFmYB3G5A768MYYA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl
                          rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 08:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177FC9, serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
        Validity
            Not Before: Jul  1 08:24:14 2025 GMT
            Not After : Jul  8 08:24:14 2025 GMT
        Subject: CN=68639b2f-15d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b1:03:a9:84:85:c8:d5:91:2c:a4:a5:60:3c:
                    05:35:46:b0:27:5e:5e:02:1c:35:bb:a5:19:2d:f6:
                    0c:60:8f:de:9d:10:da:3e:09:56:02:5c:ca:e2:aa:
                    2b:90:f2:9e:cd:2e:16:8a:20:7d:42:9a:82:5e:38:
                    45:30:6d:ed:6b:f0:c0:20:87:12:fc:de:d5:79:ba:
                    36:95:d0:98:5c:ba:a1:0b:a1:ba:0e:57:ef:53:52:
                    fe:15:1f:2d:f3:74:48:a4:34:c8:1f:5b:ed:72:26:
                    7a:96:04:33:8a:f6:7e:07:d9:b2:23:b1:69:70:82:
                    c8:bc:9a:3a:3a:0a:40:bc:22:fc:10:d9:c6:52:8d:
                    4c:03:14:43:75:77:e1:92:21:b6:ef:f9:72:b1:b1:
                    be:cc:8f:c0:52:39:24:3d:c0:a5:69:c9:53:b1:d8:
                    37:35:6b:04:f1:e2:ac:f6:21:a3:fa:73:e2:f7:82:
                    e3:d7:08:8e:13:22:70:c2:25:f8:e7:f8:3b:b4:e5:
                    bb:f7:49:56:d5:29:49:50:87:70:8a:4b:a4:9c:c2:
                    96:7d:8e:0e:97:e6:d2:dd:9e:6d:22:b0:fb:e9:97:
                    7a:9d:c8:ff:68:07:e3:af:ce:93:a6:d5:65:ab:cb:
                    36:4d:ee:18:ae:1d:01:5f:69:9f:6e:6f:b0:52:bf:
                    74:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:95:37:C0:75:0B:FB:A6:44:B4:8C:C0:9F:7A:CA:A1:7E:1C:78:29
            X509v3 Authority Key Identifier:
                keyid:06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a9:da:bc:1b:18:23:20:6d:63:00:6e:2f:a3:32:30:28:b3:
         23:ec:8e:6e:b3:ce:39:73:79:ac:ed:92:9d:99:38:39:4e:b2:
         d2:d6:82:af:c7:05:a6:09:22:af:05:25:0a:4c:91:ff:f5:5c:
         35:d5:fb:c5:08:88:c9:78:54:70:4e:51:e4:6e:ee:6c:93:73:
         8a:f6:a0:d4:f1:a1:b5:f0:48:38:b1:50:79:5e:b2:fe:df:72:
         d1:47:e8:5b:10:d5:81:21:86:40:d1:e0:fa:8d:a0:39:22:84:
         ab:37:d7:8b:0d:a3:12:79:66:b9:0b:a8:76:67:a7:92:e2:70:
         d3:66:d1:28:44:ef:41:a8:b6:90:4f:47:be:d3:67:a1:06:9d:
         98:aa:b3:90:7d:bd:9a:e3:c3:74:dd:03:7e:1f:25:81:21:73:
         bd:bf:1b:5f:97:50:ba:fb:da:e3:a2:cf:08:09:5f:83:50:d6:
         68:56:b6:44:e6:50:50:0a:53:6b:25:9f:e6:9a:c5:be:29:e4:
         5d:be:e4:9a:f2:2f:45:cb:8a:73:41:27:8d:c9:74:f7:0e:84:
         7f:32:12:35:39:e4:80:64:2b:1a:15:b1:3a:29:17:68:ef:a0:
         75:df:59:32:39:56:4b:6b:c4:f5:ee:5d:d2:88:37:c6:2d:71:
         19:db:48:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:03:06 2025 by rpki-client