Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
File:                     -Fr9bnRbCjR8ppbujrwWfQikT1Y.mft (raw, json)
Hash identifier:          YGn4aOqjAR1ALD09RXKb7s05KQzRchJ1PObIqUrte3I=
Subject key identifier:   C6:94:DC:C1:B3:0C:18:FA:10:61:16:2E:58:36:EC:C3:1E:D7:AF:7C
Authority key identifier: F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56
Certificate issuer:       /CN=A9192B84/serialNumber=F85AFD6E745B0A347CA696EE8EBC167D08A44F56
Certificate serial:       8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
Manifest number:          8D
Signing time:             Sun 11 May 2025 05:15:53 +0000
Manifest this update:     Sun 11 May 2025 05:15:53 +0000
Manifest next update:     Sun 18 May 2025 05:15:53 +0000
Files and hashes:         1: -Fr9bnRbCjR8ppbujrwWfQikT1Y.crl (hash: neEEF+IjeaA249hJxYIVQ8ys6Kl+H/Y8FmOd/sTe5GI=)
                          2: 4419BD7A5BA011EFB239695EC4F9AE02.roa (hash: KXezgGFWbIUkw3XjH1WWu+jwoNxTjSoHBx4zCxaN7e4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl
                          rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 05:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192B84, serialNumber=F85AFD6E745B0A347CA696EE8EBC167D08A44F56
        Validity
            Not Before: May 11 05:15:53 2025 GMT
            Not After : May 18 05:15:53 2025 GMT
        Subject: CN=68203289-db69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:60:5d:95:df:f9:42:32:6e:cd:25:cf:0d:5f:
                    b8:3b:0c:ff:8b:3b:cb:a4:73:bd:5b:24:f1:2d:e3:
                    49:9c:5e:c5:2e:29:8e:6b:a7:6a:b1:a4:df:f1:63:
                    db:fe:f1:f1:c3:a8:65:25:62:0e:c6:b0:f2:65:0a:
                    e3:64:74:c8:ef:e5:d6:4e:bb:64:a4:b4:e5:37:1a:
                    4e:97:f8:98:5f:cf:d3:5f:7f:df:fd:09:7b:05:19:
                    14:49:96:27:5c:a0:ea:cc:44:1d:78:03:de:35:d4:
                    05:50:4a:68:74:50:7e:55:c8:22:bc:63:22:9b:7a:
                    db:82:01:0a:6b:b6:dd:29:14:ce:38:70:73:cc:66:
                    a7:cf:9a:be:51:b4:90:5f:ef:02:61:1d:e0:c7:ef:
                    37:3b:a2:0c:e7:bb:c2:75:20:14:eb:75:e4:42:4f:
                    80:60:c5:64:61:49:2e:7c:86:c9:34:2c:4b:c6:10:
                    c2:31:da:a0:f7:66:f8:16:5f:fb:fe:a0:84:44:b6:
                    ac:9d:d3:a9:79:be:9b:90:0a:97:d8:72:b6:76:b4:
                    22:a6:fc:3c:02:94:53:36:81:33:8a:b3:e4:22:21:
                    79:64:c1:21:d6:f2:25:99:88:2c:25:2e:28:0e:1a:
                    74:51:1c:d1:fe:66:f0:7f:2e:65:77:62:64:9b:17:
                    57:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:94:DC:C1:B3:0C:18:FA:10:61:16:2E:58:36:EC:C3:1E:D7:AF:7C
            X509v3 Authority Key Identifier:
                keyid:F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:5b:c8:2a:48:0d:53:5b:5c:2f:51:d9:ed:af:6a:b8:08:de:
         fb:f7:da:23:61:35:70:45:2f:8d:54:f1:0f:19:4c:c6:3b:57:
         fd:ba:c8:04:11:02:37:eb:f1:c0:da:f8:68:57:95:47:a1:7d:
         64:e3:b8:4e:a6:1d:72:15:a6:dd:7c:44:74:c0:1c:4a:e2:d7:
         1d:d0:43:77:96:46:4e:a1:b7:7c:03:ed:d8:56:f6:07:f3:84:
         23:c3:80:3a:85:54:7c:19:e6:82:8e:ef:7f:ae:7e:4d:ed:92:
         f8:b5:63:1b:67:1f:36:6d:98:45:b5:df:20:37:68:08:05:af:
         b5:5b:79:17:ab:ee:61:8d:ec:eb:b4:3f:06:bb:91:38:b2:a0:
         ec:1c:88:5c:f5:e7:71:69:6e:83:34:0d:f0:be:7b:37:09:27:
         51:29:6e:c9:ae:b6:50:19:ed:09:fe:ca:76:b0:9c:b9:a6:87:
         47:d1:10:18:99:90:c8:b3:3c:d7:a4:9d:e6:fd:62:9f:97:ef:
         73:6b:7c:a9:5d:c8:04:70:e9:88:83:bb:34:78:ce:39:47:ad:
         c2:f9:85:54:7b:8b:c3:9e:e1:ea:74:70:58:2c:bd:02:ec:0c:
         15:e9:3f:90:83:48:2f:9c:45:17:6c:5d:47:df:ea:15:e2:67:
         b2:73:6f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:30:39 2025 by rpki-client