Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft
File:                     9BP1HYe7_0sKQQchh0duvgfTYb8.mft (raw, json)
Hash identifier:          pX2tdNJeREkFj0fPxVGu5LKhGF6GlJLQtiDaKvnb4jw=
Subject key identifier:   65:BF:CE:39:85:1D:02:69:26:1E:4E:A5:21:74:52:6B:C1:AB:11:39
Authority key identifier: F4:13:F5:1D:87:BB:FF:4B:0A:41:07:21:87:47:6E:BE:07:D3:61:BF
Certificate issuer:       /CN=A9190CC3/serialNumber=F413F51D87BBFF4B0A41072187476EBE07D361BF
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft
Manifest number:          0105
Signing time:             Sat 23 Aug 2025 05:11:54 +0000
Manifest this update:     Sat 23 Aug 2025 05:11:53 +0000
Manifest next update:     Sat 30 Aug 2025 05:11:53 +0000
Files and hashes:         1: 9BP1HYe7_0sKQQchh0duvgfTYb8.crl (hash: 6xeKR9Uqv5zRzO5ahQm7BHPzlpzGc16igQfDdBblkjg=)
                          2: 88FD3F60EE7D11EE8868470EC4F9AE02.roa (hash: zOrZe+jWeFBIsL39iLL8vvCILEMIHLBZ3vsTVrAh2HY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.crl
                          rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:11:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190CC3, serialNumber=F413F51D87BBFF4B0A41072187476EBE07D361BF
        Validity
            Not Before: Aug 23 05:11:53 2025 GMT
            Not After : Aug 30 05:11:53 2025 GMT
        Subject: CN=68a94d99-6bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:73:2d:5f:49:1a:f4:f4:de:10:8f:b9:51:c3:
                    79:d4:40:9e:11:15:f5:aa:08:bd:84:2d:fb:9c:d4:
                    ab:d2:0b:97:37:4d:9f:1e:96:68:ec:32:7e:e8:a1:
                    59:13:4d:f5:ee:40:b0:ff:fb:de:03:a5:9c:77:f8:
                    bc:76:c2:b4:76:3f:3e:57:07:73:0a:ce:5e:9c:72:
                    60:63:94:e8:f8:73:39:40:98:9f:37:c3:d3:8e:a6:
                    23:11:f4:35:67:24:ff:4e:06:79:3d:71:f7:4d:c5:
                    38:7c:6d:64:6c:a0:40:ae:cc:28:38:74:99:4e:bf:
                    6b:5a:f1:9e:c0:62:2b:8a:d3:4c:c5:11:09:81:31:
                    11:e4:c5:26:d1:d7:15:16:9b:7e:76:c8:9c:a8:3a:
                    3a:91:d6:67:ad:e5:cf:ca:8b:a7:8a:b1:5a:58:fd:
                    0d:63:fe:78:7c:5c:75:fc:34:11:8e:1c:3b:ae:4f:
                    7b:07:13:13:01:9e:21:81:39:fb:16:fd:da:cb:90:
                    1c:22:e6:4b:6e:d5:51:3d:57:5e:9d:29:6c:82:9e:
                    30:26:50:dc:26:14:7b:d9:3a:c9:0b:60:b8:9a:52:
                    cd:a1:8b:22:f1:6f:bb:0e:94:0f:98:55:60:de:f6:
                    d6:46:60:cb:1f:06:6a:2b:89:7e:91:d1:5a:6f:e4:
                    31:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BF:CE:39:85:1D:02:69:26:1E:4E:A5:21:74:52:6B:C1:AB:11:39
            X509v3 Authority Key Identifier:
                keyid:F4:13:F5:1D:87:BB:FF:4B:0A:41:07:21:87:47:6E:BE:07:D3:61:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BP1HYe7_0sKQQchh0duvgfTYb8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC3/24B8E258EE7C11EE9F290E80C4F9AE02/9BP1HYe7_0sKQQchh0duvgfTYb8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:59:28:ab:d9:27:10:18:e3:a7:43:1e:8a:fe:44:4a:7f:b7:
         5b:ba:a1:4a:d6:2c:5b:d5:97:30:27:6a:91:47:13:1f:a2:06:
         88:a0:71:ce:b6:66:fe:04:17:e2:2f:28:86:e6:b6:4d:f7:98:
         f6:06:ad:4a:38:fc:ca:f2:e1:89:93:6e:6d:8e:93:5d:20:27:
         9f:cf:3d:45:80:17:2e:13:5b:c4:21:04:22:dc:69:68:a8:5f:
         d1:78:f8:45:07:f7:87:e7:70:47:8d:b4:b8:71:c4:fa:38:b9:
         8d:38:96:6b:d5:87:f1:62:14:1c:ac:46:a8:b3:9d:20:57:c2:
         97:57:44:f3:28:ac:70:7e:7d:5d:9d:c0:fa:46:46:25:09:a9:
         f5:bb:a1:6c:a6:e2:72:47:e2:5c:cc:ab:b4:7c:cb:a0:4a:e7:
         f4:81:14:a0:b4:cc:52:a2:76:a3:ef:be:0d:db:a9:cd:30:3d:
         e9:00:41:b2:40:75:05:30:18:26:40:6e:fb:24:c1:47:20:3c:
         e6:22:c1:cf:ce:6e:de:5c:3d:07:8e:a5:48:31:53:88:5b:21:
         fb:aa:8d:b1:5f:76:3e:e1:8b:e0:7c:4c:17:d6:36:b1:07:83:
         02:b8:aa:ae:5c:03:ac:a0:21:31:b6:43:61:4b:12:29:0b:e7:
         d4:78:e7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:03:58 2025 by rpki-client