Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919075D/78BDCB945B9911F098E65938C4F9AE02/9-atF_jVbGMrJcCb46mBDDEFNIM.mft
File:                     9-atF_jVbGMrJcCb46mBDDEFNIM.mft (raw, json)
Hash identifier:          Htaa8toNm+dHUDkJUhYuad8FjZFfh3cNkfAMz90GRG8=
Subject key identifier:   01:F0:67:E7:7C:2A:46:43:81:88:69:A6:7A:ED:E4:84:1E:65:05:B0
Authority key identifier: F7:E6:AD:17:F8:D5:6C:63:2B:25:C0:9B:E3:A9:81:0C:31:05:34:83
Certificate issuer:       /CN=A919075D/serialNumber=F7E6AD17F8D56C632B25C09BE3A9810C31053483
Certificate serial:       1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-atF_jVbGMrJcCb46mBDDEFNIM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919075D/78BDCB945B9911F098E65938C4F9AE02/9-atF_jVbGMrJcCb46mBDDEFNIM.mft
Manifest number:          1A
Signing time:             Sat 23 Aug 2025 08:09:41 +0000
Manifest this update:     Sat 23 Aug 2025 08:09:40 +0000
Manifest next update:     Sat 30 Aug 2025 08:09:40 +0000
Files and hashes:         1: 9-atF_jVbGMrJcCb46mBDDEFNIM.crl (hash: 5J7Ir2na3TF/TcMxWPkD8BscH9Pgu5SEIfrO1xRI3cU=)
                          2: D72BFBCE5B9911F095D51C3CC4F9AE02.roa (hash: WHWS1P16hF4kMTUYFllA7728ElvvfvE9jMzvVKIDsrg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919075D/78BDCB945B9911F098E65938C4F9AE02/9-atF_jVbGMrJcCb46mBDDEFNIM.crl
                          rsync://rpki.apnic.net/member_repository/A919075D/78BDCB945B9911F098E65938C4F9AE02/9-atF_jVbGMrJcCb46mBDDEFNIM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-atF_jVbGMrJcCb46mBDDEFNIM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 08:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919075D, serialNumber=F7E6AD17F8D56C632B25C09BE3A9810C31053483
        Validity
            Not Before: Aug 23 08:09:40 2025 GMT
            Not After : Aug 30 08:09:40 2025 GMT
        Subject: CN=68a97744-f934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:52:ae:4f:64:b7:8e:98:38:31:3a:2a:e1:3d:
                    32:e9:c6:ed:be:78:5b:fb:a4:86:9b:89:63:f0:af:
                    a9:a0:7e:c2:4b:e4:cf:3d:de:5f:f0:55:ec:20:5e:
                    da:3b:f9:97:d2:77:de:b2:03:43:0d:0b:1c:27:8a:
                    4c:f8:56:29:01:76:12:ed:12:84:50:74:3e:c0:76:
                    c0:e2:9f:49:cd:6f:63:80:cc:4c:33:82:7d:0f:1d:
                    0a:b3:dd:92:a1:0a:fc:dc:b3:bc:ce:04:56:7a:be:
                    fa:fa:e7:61:e3:1b:39:be:8e:ab:35:7b:08:85:26:
                    11:d2:9a:cc:80:55:2d:b8:bc:76:41:a9:dd:2a:7c:
                    bf:42:e2:91:a6:36:47:15:20:1e:57:73:3a:6b:27:
                    02:7a:55:74:61:c0:46:cb:51:3d:14:2f:03:38:88:
                    3a:c4:4d:ce:de:1c:fb:2d:17:c3:af:43:de:11:02:
                    11:b8:31:8d:bc:8a:c6:d5:53:11:bf:94:e5:ba:7e:
                    e6:b4:ee:5b:00:e7:ef:33:56:63:b6:59:4b:36:3b:
                    36:3d:bb:e5:ec:f1:56:93:52:b8:b9:55:76:82:c6:
                    64:f2:22:66:92:92:aa:e2:76:57:52:d9:39:9b:0d:
                    c8:11:8e:0b:b8:78:db:30:b1:8d:a4:82:ae:81:13:
                    e3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F0:67:E7:7C:2A:46:43:81:88:69:A6:7A:ED:E4:84:1E:65:05:B0
            X509v3 Authority Key Identifier:
                keyid:F7:E6:AD:17:F8:D5:6C:63:2B:25:C0:9B:E3:A9:81:0C:31:05:34:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919075D/78BDCB945B9911F098E65938C4F9AE02/9-atF_jVbGMrJcCb46mBDDEFNIM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-atF_jVbGMrJcCb46mBDDEFNIM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919075D/78BDCB945B9911F098E65938C4F9AE02/9-atF_jVbGMrJcCb46mBDDEFNIM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:83:59:a3:c6:79:aa:b1:db:bf:a3:99:6a:ed:61:ea:e2:0d:
         e4:f8:e5:96:f6:36:97:8a:c2:86:68:96:72:28:f5:13:02:f8:
         e0:4c:4c:18:eb:4c:03:12:b1:a6:2f:43:c4:dd:4a:78:42:6a:
         87:0d:e5:73:8f:0e:31:fc:e6:c3:a3:26:41:84:f0:96:f0:da:
         5c:60:27:4d:bf:8d:02:29:ba:5d:7a:89:5a:d6:7c:88:8f:ee:
         ce:29:27:65:90:35:7a:47:de:f4:63:48:90:86:b9:f1:2e:64:
         ac:70:a8:77:95:df:9c:e5:d3:18:f2:8c:ca:e6:da:03:f2:ef:
         aa:01:a3:ec:cd:54:44:a5:39:f3:35:96:d7:9c:b9:42:f7:9f:
         ab:36:de:11:bf:ad:33:f9:e7:fb:5c:49:58:0e:2d:df:8e:ec:
         6b:8f:b9:2e:ad:53:57:45:88:76:1d:87:75:82:c1:fd:5f:bf:
         43:6a:94:6f:32:47:9f:9b:78:94:ac:24:3d:5a:87:8d:86:ce:
         3d:9e:ca:59:80:65:5b:4a:2f:cb:f2:dc:49:28:a6:51:98:d1:
         b1:b3:93:c3:c0:56:39:db:19:4c:4a:b7:5b:16:98:0c:62:24:
         f3:2b:eb:94:ab:33:e2:94:a3:1d:eb:a4:87:27:dd:31:51:cc:
         b5:e3:65:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:05:49 2025 by rpki-client