Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
File:                     mZujdBECimL7UV3PAozaLcmrydE.mft (raw, json)
Hash identifier:          DX3b2NJQ2XQXSjYrHwoHvMusP0EOXy19lebstaViCaU=
Subject key identifier:   73:20:BE:1A:65:2F:A4:08:95:41:30:1D:3C:26:8B:FF:D9:F7:52:9A
Authority key identifier: 99:9B:A3:74:11:02:8A:62:FB:51:5D:CF:02:8C:DA:2D:C9:AB:C9:D1
Certificate issuer:       /CN=A9184359/serialNumber=999BA37411028A62FB515DCF028CDA2DC9ABC9D1
Certificate serial:       019C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
Manifest number:          0199
Signing time:             Tue 01 Jul 2025 03:47:15 +0000
Manifest this update:     Tue 01 Jul 2025 03:47:14 +0000
Manifest next update:     Tue 08 Jul 2025 03:47:14 +0000
Files and hashes:         1: mZujdBECimL7UV3PAozaLcmrydE.crl (hash: m9LpR5yir7jVxwCY/iyBrdhjPKR5eR+R2U1JqiKgJlI=)
                          2: F27BE0E2E4CC11EDBAFF045BC4F9AE02.roa (hash: FcVq7MapsG0tiRr/INQ1mEf1XPC8HnzEbnMHkTHPq4w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.crl
                          rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 03:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184359, serialNumber=999BA37411028A62FB515DCF028CDA2DC9ABC9D1
        Validity
            Not Before: Jul  1 03:47:14 2025 GMT
            Not After : Jul  8 03:47:14 2025 GMT
        Subject: CN=68635a42-da15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f9:01:cf:48:75:88:5e:40:5c:76:5d:49:37:
                    d7:9c:06:0c:7c:25:cd:83:1a:04:cb:9a:51:a5:8a:
                    17:9b:df:29:2f:03:07:82:a6:47:8e:a6:65:22:7c:
                    69:41:15:7a:4d:82:8f:bc:30:50:f4:00:c2:96:e3:
                    fc:c1:92:c8:b5:b9:d1:52:6c:f0:f2:ca:a8:f9:a3:
                    87:fd:be:01:72:af:a8:35:27:8d:77:15:0e:95:90:
                    80:b3:30:ea:16:9b:1c:2e:7a:13:f2:73:0b:d7:b5:
                    5b:8b:ae:3c:40:a6:7e:52:4b:3e:40:fd:ac:57:0d:
                    73:7a:70:79:d8:d7:6f:2d:58:a6:7e:d7:55:3f:da:
                    58:2f:89:23:f0:aa:a5:8a:4c:14:14:7d:e0:b4:77:
                    12:02:37:2e:c4:5a:64:ca:6d:cf:1b:1d:d6:e1:91:
                    0b:9c:04:f5:8e:f3:d9:2d:fb:cc:f0:47:6c:76:67:
                    6e:6f:29:87:36:f6:80:10:8f:c7:f3:03:bb:af:af:
                    e9:c6:ab:43:75:b1:2f:07:92:6e:01:b9:ec:5a:33:
                    6c:92:8d:18:36:72:79:f9:6a:ab:cb:75:c6:2e:a3:
                    25:f2:dd:c0:70:4f:5c:c9:a8:a0:20:3d:38:17:2d:
                    71:00:09:a4:11:b3:31:94:da:99:9a:cb:0c:7b:01:
                    d5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:20:BE:1A:65:2F:A4:08:95:41:30:1D:3C:26:8B:FF:D9:F7:52:9A
            X509v3 Authority Key Identifier:
                keyid:99:9B:A3:74:11:02:8A:62:FB:51:5D:CF:02:8C:DA:2D:C9:AB:C9:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:75:9a:19:ba:a3:f4:2d:9c:8e:11:96:25:95:55:47:52:36:
         26:ec:73:4d:9b:c0:c0:ba:29:9b:e1:3e:35:f2:eb:56:f4:4b:
         f4:6f:4c:32:f0:79:dc:a5:a3:bd:b5:11:93:2f:74:9f:a6:3f:
         02:1f:55:34:e0:32:04:f0:e4:3a:0b:8d:8a:aa:17:42:66:04:
         52:d6:2e:5a:48:73:63:42:89:9b:d8:55:f2:a5:91:9b:39:33:
         3a:87:c4:05:fd:8b:dc:1d:f9:3d:8a:15:f1:08:38:eb:29:68:
         75:d4:8f:f0:9d:93:40:68:84:c4:b6:1f:2c:ae:e3:1a:11:c9:
         22:e6:cc:d7:f9:e0:a5:2d:2d:86:92:28:4a:eb:e9:24:f9:00:
         97:46:ad:3c:5c:08:63:7b:8c:79:85:b5:d6:35:c5:72:af:e5:
         0c:99:fe:ce:8c:2b:91:8f:61:ff:50:e3:64:6b:a7:9b:99:d9:
         fc:c0:93:9f:9c:01:83:bc:f1:f6:f4:0e:f6:83:28:48:a0:40:
         18:83:dc:ee:b3:b3:90:b1:9f:65:96:f7:0b:f4:04:b9:b9:e9:
         9b:1c:c6:ee:41:e7:e7:3e:91:c2:e3:cc:38:6f:5c:f6:f2:8d:
         c8:6c:76:d5:93:a1:58:c4:23:a6:c6:dd:b3:d2:02:44:a8:4b:
         c5:f9:e2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:31:34 2025 by rpki-client