Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft
File:                     AtoTJ_UsQCOjghrIeFDJF9joNSc.mft (raw, json)
Hash identifier:          WugBsnCk0mpZxrRQcCI6fB7BqBYdBhGNS1T89zpruu8=
Subject key identifier:   56:EA:80:36:BF:9D:3E:64:5E:7D:97:EF:B4:11:BA:C4:19:59:7B:F7
Authority key identifier: 02:DA:13:27:F5:2C:40:23:A3:82:1A:C8:78:50:C9:17:D8:E8:35:27
Certificate issuer:       /CN=A918DB7E/serialNumber=02DA1327F52C4023A3821AC87850C917D8E83527
Certificate serial:       BA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft
Manifest number:          B9
Signing time:             Sat 23 Aug 2025 06:08:42 +0000
Manifest this update:     Sat 23 Aug 2025 06:08:41 +0000
Manifest next update:     Sat 30 Aug 2025 06:08:41 +0000
Files and hashes:         1: AtoTJ_UsQCOjghrIeFDJF9joNSc.crl (hash: WqQCTyQHp+YwOffPOQ2uWfuNkcGjVSvB5709O32wTFk=)
                          2: CE1E14AE64DC11EFBE5A023AC4F9AE02.roa (hash: TL1SnZ/gVu4gXR6fktiVjS67hjGfn2PQM4oWEdnN0mQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.crl
                          rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:08:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DB7E, serialNumber=02DA1327F52C4023A3821AC87850C917D8E83527
        Validity
            Not Before: Aug 23 06:08:41 2025 GMT
            Not After : Aug 30 06:08:41 2025 GMT
        Subject: CN=68a95ae9-1be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a1:e3:1a:d5:9c:1d:bd:ae:da:01:16:65:bb:
                    2a:91:0e:58:11:00:fa:05:dd:70:a1:53:b5:8f:93:
                    4c:21:11:c1:6b:33:a1:ce:16:2e:34:01:33:44:ae:
                    68:e8:a1:62:d5:d0:96:01:b1:7d:e2:56:0c:d7:74:
                    f4:8a:17:c0:9f:a1:e3:a6:5f:77:66:e7:27:fe:99:
                    4b:87:a3:de:01:79:ea:f3:17:e1:6b:38:4c:60:a2:
                    88:da:c1:55:f1:88:12:5f:79:67:80:b3:95:95:f9:
                    28:c3:1b:10:04:f9:dd:f8:d6:e8:94:5b:5e:56:da:
                    90:fc:6c:ff:d3:6b:18:e8:05:41:21:91:e1:f6:eb:
                    9b:c8:46:06:2c:71:d4:5c:ae:5e:44:69:bd:3a:a8:
                    39:ff:60:b2:9b:94:c7:d0:12:9f:66:17:53:99:0e:
                    92:7d:de:3d:fe:7e:0a:92:ef:d8:80:e2:d3:6d:34:
                    ce:2b:ac:58:28:3a:bc:26:47:f1:14:7b:07:11:af:
                    84:77:8b:55:a7:6a:66:4b:73:85:62:81:af:69:b1:
                    e3:4c:13:38:f8:18:f4:9c:1e:6d:4c:d0:d1:88:84:
                    2b:64:5f:12:d1:75:6c:a9:c9:1d:fa:02:a7:d3:83:
                    ea:e4:17:eb:48:2c:2d:6e:dd:f9:2e:9d:df:ac:5d:
                    5c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:EA:80:36:BF:9D:3E:64:5E:7D:97:EF:B4:11:BA:C4:19:59:7B:F7
            X509v3 Authority Key Identifier:
                keyid:02:DA:13:27:F5:2C:40:23:A3:82:1A:C8:78:50:C9:17:D8:E8:35:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:78:53:e6:c6:e3:c7:ed:68:89:b3:a1:eb:8b:64:26:97:91:
         b2:f4:43:8a:63:c7:63:14:0c:53:ae:6d:9c:0e:04:f5:28:a4:
         01:19:15:f8:50:30:6a:cb:5b:ae:e3:34:ea:9b:f1:f9:0c:9d:
         7c:af:af:09:ce:dd:0d:90:29:29:e0:df:7e:f1:98:7b:35:d3:
         e6:9e:09:4b:eb:ba:98:5f:7f:c5:53:73:a3:95:46:f1:28:8f:
         cc:cf:f0:a2:69:00:ae:4f:6f:d5:0e:6b:a5:6b:6e:66:99:b2:
         39:96:15:f7:9f:22:dc:30:11:ac:eb:c7:4f:93:28:4d:b8:21:
         08:f0:06:03:29:44:46:77:40:87:21:51:68:bf:7a:b7:d9:fd:
         f8:fa:e6:03:6e:2e:b6:e3:58:70:91:d4:7a:e8:de:31:ec:7b:
         17:d1:32:4e:49:d9:1d:42:3e:28:ce:cc:1b:91:4a:a2:03:ff:
         8f:db:a2:3d:05:ea:de:5f:4e:0f:0c:06:e4:62:f0:7d:40:e5:
         ad:6c:3c:04:63:ff:5c:2b:4a:9e:1b:08:6c:0a:64:7b:eb:8e:
         a5:69:6b:2e:cf:4c:64:aa:74:c3:e8:b1:4f:43:f2:a0:eb:88:
         22:cf:8e:1c:05:cf:fe:c3:b0:d6:a9:ee:f7:c3:70:ee:56:ea:
         f2:c1:91:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:28:10 2025 by rpki-client