Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft
File:                     Iq_UzdnE9MODdis-k-7PGub_nRY.mft (raw, json)
Hash identifier:          ZrwMSA5LSoNj/bGoe/D+DkqVPhHYu8luZysgT65klUQ=
Subject key identifier:   10:0D:C0:19:77:10:77:D1:26:8E:62:35:1E:B6:9D:42:86:41:95:E5
Authority key identifier: 22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16
Certificate issuer:       /CN=A917DFDA/serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft
Manifest number:          E9
Signing time:             Sat 23 Aug 2025 05:34:04 +0000
Manifest this update:     Sat 23 Aug 2025 05:34:04 +0000
Manifest next update:     Sat 30 Aug 2025 05:34:04 +0000
Files and hashes:         1: Iq_UzdnE9MODdis-k-7PGub_nRY.crl (hash: K9s3dITbLEFPrLeGTWG8v1et/uSEm58u2CJAKp5g5rY=)
                          2: 493F98CE230111EFB4355F5FC4F9AE02.roa (hash: 2Ea6pfyMHuu7UJGQSJfsHF3FX8pvDKiDVHdhUSz8QqA=)
                          3: 1E85ABA6231E11EFA893585AC4F9AE02.roa (hash: fSTt/OP/CCIEWdda0wFEWb+9ChFos6G9oFISz4g6itU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl
                          rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DFDA, serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16
        Validity
            Not Before: Aug 23 05:34:04 2025 GMT
            Not After : Aug 30 05:34:04 2025 GMT
        Subject: CN=68a952cc-61be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:28:60:29:87:d5:9f:45:2f:ce:89:d9:4e:9b:
                    57:79:f3:ea:26:0d:6b:a1:ba:b7:ad:26:e5:81:42:
                    0e:2f:bf:a8:73:a2:4a:7a:22:41:fd:aa:2b:04:79:
                    9f:0c:5f:ef:dc:94:06:23:08:fb:e1:53:80:0a:b1:
                    a1:b0:18:50:32:b1:b8:35:0b:9d:7f:42:f2:4e:e6:
                    49:af:f9:33:b1:40:54:87:4b:51:5f:5d:bd:63:b5:
                    2a:60:87:c0:40:41:47:19:a0:10:ef:d1:ac:20:6d:
                    a5:00:16:dc:d5:8f:60:63:68:62:7b:37:57:48:9b:
                    6f:db:da:c6:2d:9e:b1:a8:aa:64:4d:61:27:88:51:
                    f0:69:d0:e0:63:67:df:c1:3a:0c:5f:9a:f4:0c:d1:
                    6d:21:e6:ef:43:a2:ad:f8:3c:98:be:5a:f8:89:28:
                    f3:bc:99:c3:ba:3f:82:db:62:37:b2:fc:33:77:1d:
                    1b:6c:67:ed:6b:fa:70:d3:ed:e7:4c:16:88:bb:1b:
                    13:69:29:74:cb:a2:d4:86:4a:e4:c1:12:8b:60:c9:
                    46:71:e7:00:ee:40:16:b8:1e:c5:58:a2:3a:14:23:
                    1e:48:b0:b4:37:34:9d:de:7f:5f:46:61:aa:34:cb:
                    67:0e:fe:e5:be:69:9a:6b:cb:6d:b2:87:2d:57:87:
                    12:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0D:C0:19:77:10:77:D1:26:8E:62:35:1E:B6:9D:42:86:41:95:E5
            X509v3 Authority Key Identifier:
                keyid:22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:1e:eb:47:c9:17:82:b7:34:04:d0:69:a6:97:58:1e:a6:60:
         52:0e:64:d4:1c:41:e3:ea:39:a7:49:fd:72:d6:58:50:a8:df:
         5b:d5:df:8f:6f:83:2f:59:aa:ce:ba:e7:8e:ff:fc:3c:05:27:
         87:aa:14:dc:8e:6e:d1:58:bc:ea:e2:90:eb:58:93:e7:ac:87:
         09:76:16:9c:5c:47:f0:6a:8c:53:12:f7:9e:2a:65:93:70:a7:
         fc:96:c1:14:a7:17:46:a9:83:19:e4:ad:34:2e:4a:fa:f1:07:
         c7:6f:da:f0:9a:94:90:48:b2:1e:29:84:35:b3:2e:8b:5e:ba:
         94:fb:1a:70:3f:dd:7d:49:fb:4f:a2:44:48:2c:6d:ce:da:06:
         e1:0b:7a:1e:c5:a0:86:04:d0:14:ad:2b:e8:85:32:80:72:d9:
         ff:fd:17:6f:ad:55:d9:a0:6d:17:51:b1:4c:11:da:d5:77:7f:
         5c:ee:27:aa:02:36:a9:06:1c:af:b1:e3:05:61:9a:1d:36:3a:
         cf:21:8a:4b:85:94:94:12:71:e2:88:62:1f:7a:0b:db:ed:37:
         68:54:87:57:e1:79:15:1c:3b:e3:8b:85:10:5f:16:1e:65:27:
         e7:21:1c:79:ce:34:6e:eb:13:60:84:1f:f8:b1:db:9c:b3:33:
         7c:82:30:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:21:41 2025 by rpki-client