Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
File:                     f3dZIELjyHvlbu2B2cyw6XQCzdc.mft (raw, json)
Hash identifier:          CA249S3q6OPjWIAjNRkR4lUX2t0zResDYoH74dOGN/M=
Subject key identifier:   A8:1A:53:29:B7:F1:FB:EB:99:01:83:5B:75:BE:76:0F:81:21:E0:8F
Authority key identifier: 7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7
Certificate issuer:       /CN=A9192A47/serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7
Certificate serial:       6A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
Manifest number:          69
Signing time:             Thu 03 Jul 2025 07:13:44 +0000
Manifest this update:     Thu 03 Jul 2025 07:13:43 +0000
Manifest next update:     Thu 10 Jul 2025 07:13:43 +0000
Files and hashes:         1: f3dZIELjyHvlbu2B2cyw6XQCzdc.crl (hash: m/HCUxKp3UJxp4aLtgwfXrUr50xHDDKw3RrlpBTXV4s=)
                          2: 43631816B82211EFB74FF56BC4F9AE02.roa (hash: +OL0LwWDdzCSmXdG5gDsUEjfzy5Uq5zJxTv17RF0xXQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl
                          rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A47, serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7
        Validity
            Not Before: Jul  3 07:13:43 2025 GMT
            Not After : Jul 10 07:13:43 2025 GMT
        Subject: CN=68662da8-a922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6a:46:0a:ec:e4:2a:8a:06:8e:6c:e2:a8:b3:
                    ab:f3:2e:eb:7a:05:b0:35:e7:eb:b6:fc:8a:42:b4:
                    20:84:1f:42:2e:63:69:9e:08:4a:01:a4:33:d2:db:
                    bf:80:8c:ae:b4:0f:d6:03:e3:e4:9f:e2:de:00:76:
                    69:72:1c:66:d3:1e:36:ec:2f:db:e4:43:eb:d6:78:
                    1a:4a:9f:38:a4:43:54:64:cf:59:6c:58:52:27:e9:
                    5c:07:ca:01:b6:42:81:b0:f1:78:a7:76:07:38:89:
                    f2:d9:8a:12:7b:28:fa:fd:8d:1d:29:4d:a7:7f:9e:
                    9c:48:c7:a2:e1:a3:bb:4b:76:df:27:91:93:cc:1c:
                    ff:cc:e9:5c:9c:9e:30:c0:f6:01:c6:c0:91:80:5d:
                    ae:86:5e:70:3d:d8:82:f0:ff:f4:78:35:00:63:18:
                    9c:92:55:59:6f:e3:f1:bb:84:c7:ff:37:14:82:23:
                    71:13:65:b3:69:bf:2f:29:0d:84:a9:88:db:a4:a4:
                    3c:ae:08:1e:54:08:f1:48:d2:21:f9:e2:a5:e9:4e:
                    a3:15:b9:1f:25:b3:75:c5:36:ce:dd:38:7a:f5:bc:
                    ff:ee:29:21:38:eb:78:15:0b:49:61:bd:3b:34:f5:
                    02:c9:75:a2:02:93:38:42:62:a7:b0:c4:ed:f3:7a:
                    60:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1A:53:29:B7:F1:FB:EB:99:01:83:5B:75:BE:76:0F:81:21:E0:8F
            X509v3 Authority Key Identifier:
                keyid:7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:50:3b:c6:02:6e:c1:7d:7b:ad:ca:86:37:4a:db:e4:8a:94:
         21:81:bf:9b:0f:7d:0c:02:2b:e8:04:2c:ae:39:ce:9a:35:94:
         ed:28:72:c2:17:02:ea:df:d0:36:3f:a3:a5:63:0a:7d:6f:66:
         db:3b:1a:df:93:d8:23:1a:a9:3b:79:0c:ee:12:0e:70:d6:e9:
         d3:d0:7d:fa:d7:d5:3c:5c:8a:c6:00:13:35:27:91:c1:87:dd:
         20:c3:26:a1:36:21:3e:a4:49:e1:b7:7a:2d:44:63:d2:af:5b:
         21:92:e9:fa:4b:9d:7c:37:60:77:6b:51:95:54:ba:2e:9e:06:
         77:2a:dc:ba:62:6a:63:55:51:79:9c:c2:a0:81:a0:24:b9:ab:
         60:4b:81:68:c0:55:ed:51:fc:b4:d7:93:f7:3d:39:51:56:99:
         0e:f8:c8:fb:43:e1:49:87:c8:af:48:20:db:16:93:47:61:b7:
         66:cb:d1:ce:ac:6d:45:59:c7:3a:7e:a6:da:7f:28:cd:0d:de:
         a4:10:b5:a9:e3:4f:fa:f4:5f:c6:7e:37:46:56:94:df:06:29:
         ed:ce:b6:2b:11:d9:3d:27:8e:4a:65:6a:f6:8b:b4:93:b7:dd:
         2e:19:4a:6c:cc:36:29:00:63:97:07:9e:7b:78:5a:90:e2:95:
         3b:28:be:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:20:55 2025 by rpki-client