Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
File:                     siw9CrzTkZSGo-YejXiJI5Ir9qU.mft (raw, json)
Hash identifier:          SqxEX5U7TMkPErjdgdX5MhWvHYrJGRJ4iYWAiSpUKNI=
Subject key identifier:   A6:E4:A5:54:2A:FF:58:3B:6C:07:14:A6:11:9A:3C:97:45:C8:E9:07
Authority key identifier: B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5
Certificate issuer:       /CN=A917A66F/serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
Certificate serial:       0146
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
Manifest number:          0127
Signing time:             Tue 01 Jul 2025 05:35:02 +0000
Manifest this update:     Tue 01 Jul 2025 05:35:01 +0000
Manifest next update:     Tue 08 Jul 2025 05:35:01 +0000
Files and hashes:         1: siw9CrzTkZSGo-YejXiJI5Ir9qU.crl (hash: a3e/IiHOI0mq/odrgFPLACxHPGlEHcLtdMdhBcyuvNc=)
                          2: A0BD00DEF5B311EFA334BB67C4F9AE02.roa (hash: VGbwSs+xYuuT82QPTEDjBRASIfWEGELF9LE6WDBK6Cw=)
                          3: B4B6C2B0C1AA11EF83A31D6CC4F9AE02.roa (hash: bw0f6KbJYjRey2+KDVpK9dBW3Yh7Jdgva8k4Bt7aCcM=)
                          4: 4C7C5ECCE1B211EE84F03918C4F9AE02.roa (hash: LTeECQk5/azIOJTf8rGaT2gWz1Gmd2inlmhftO85Egc=)
                          5: BB982DDC211611F08D31C34DC4F9AE02.roa (hash: FkwQRUxW28jIhJPhgvAtX7RxgLtIHLVcqsk+XhOm1NE=)
                          6: E26269722E3811EFA4AF2445C4F9AE02.roa (hash: stQvqSgEe9eoYY5+iLzps6D0J/Yk9AXd8PNpZXOA3CY=)
                          7: BB17221E211611F08D31C34DC4F9AE02.roa (hash: fycljHXNnk59uPrb51pHFnfOpO9Hxutgas1w6IAJ3gA=)
                          8: 555E0D90B71F11EFBBE56410C4F9AE02.roa (hash: Yun2AD2EJLYSRV9yxmCnTJUpxZFk9/O+PcxovQCtz2I=)
                          9: 6E1519E8E1B211EEB4706E18C4F9AE02.roa (hash: xaEZeRSS7SPLQpFTKRrqHdI+Z44FtJElJm/n+VPX6m4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl
                          rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 05:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A66F, serialNumber=B22C3D0ABCD3919486A3E61E8D788923922BF6A5
        Validity
            Not Before: Jul  1 05:35:01 2025 GMT
            Not After : Jul  8 05:35:01 2025 GMT
        Subject: CN=68637385-4149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:01:40:0b:13:66:35:fc:ac:ab:88:ee:47:f4:
                    b8:bc:ba:ab:86:97:a4:d9:36:b1:ad:a5:ee:2d:3b:
                    9d:56:c0:70:ab:44:5d:c1:8c:d8:76:09:49:58:ff:
                    b0:95:26:fc:37:9d:ae:28:d1:30:b5:db:59:5d:50:
                    86:47:be:1a:7b:b6:5e:d2:f8:d3:fd:4d:59:09:ea:
                    83:aa:5b:5b:b4:0a:81:2e:04:4a:8f:94:63:e6:2a:
                    65:9a:3d:02:ad:6b:38:ba:24:e0:94:09:3c:a8:06:
                    e8:fc:d3:9a:7c:e8:c8:57:ac:57:fc:c0:47:db:a0:
                    73:48:f8:a0:fe:63:36:0b:92:31:b6:b9:36:ac:47:
                    0a:42:f4:10:7c:df:ac:51:d0:bb:d1:8c:78:7d:70:
                    36:53:94:ba:9b:29:f2:f2:a1:2e:0a:8f:61:69:43:
                    9e:96:9e:17:80:40:40:95:0b:e7:be:4e:4f:52:38:
                    a8:20:c3:3a:b9:23:f3:7d:cc:ef:4c:5f:1e:d9:58:
                    cb:47:a4:44:6c:23:21:b3:7a:3d:79:c8:c5:a6:78:
                    55:21:0e:20:f4:6b:12:83:7f:6c:a1:fa:d7:55:3d:
                    23:8d:d4:ed:66:32:36:6b:c9:0a:f6:87:bd:08:85:
                    7e:64:2e:c6:7a:d3:38:61:84:23:fc:cb:6f:49:17:
                    57:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E4:A5:54:2A:FF:58:3B:6C:07:14:A6:11:9A:3C:97:45:C8:E9:07
            X509v3 Authority Key Identifier:
                keyid:B2:2C:3D:0A:BC:D3:91:94:86:A3:E6:1E:8D:78:89:23:92:2B:F6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/siw9CrzTkZSGo-YejXiJI5Ir9qU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A66F/8FCC9D28C6F911EE97E6FB1DC4F9AE02/siw9CrzTkZSGo-YejXiJI5Ir9qU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:15:21:47:26:db:dd:ec:de:16:32:68:cc:5e:4a:5b:3e:af:
         37:5a:92:ad:1b:a4:27:b8:9d:3b:f3:73:ce:68:fe:1e:d1:97:
         eb:50:49:9b:1d:19:61:10:2c:34:5b:c6:d4:7b:5f:73:39:e8:
         38:93:76:e9:1a:8e:69:90:cb:0a:56:7c:f4:67:48:08:bc:36:
         b3:67:3a:91:e9:7a:3a:0c:55:7e:83:9f:f3:95:3c:ce:91:e2:
         77:16:aa:7d:2e:80:e2:26:36:dc:0f:35:72:a2:f2:06:5b:49:
         c0:b8:d2:5f:b6:c7:7c:57:71:2e:bc:9a:22:dc:d3:12:e6:1e:
         df:c4:de:ef:ed:2f:fd:49:3b:b7:5f:13:fb:7c:af:43:bc:ec:
         fb:62:30:fb:bd:1c:be:0b:f2:e8:1e:5b:b3:49:6b:ff:f1:05:
         75:28:5a:1e:cd:20:2e:7f:47:d7:47:e3:a4:96:03:64:44:65:
         0e:92:79:83:45:c2:53:64:13:e9:90:60:13:6b:0f:25:b5:4f:
         01:be:84:98:1d:d2:57:79:27:67:3a:47:e2:04:33:5f:0e:35:
         30:7d:7a:20:27:58:0e:05:17:36:31:43:03:17:d9:e6:b9:71:
         ce:e5:75:3b:f0:6f:b9:83:a7:3a:9b:32:d6:76:e7:76:94:ff:
         e2:2e:52:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:59:57 2025 by rpki-client