Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
File:                     _dkd0w6bH-o7t-Eq73YhZigSmyM.mft (raw, json)
Hash identifier:          domRkaI7JygB0wfBqbhg1puQVVjC22KM+dQRtAwqETk=
Subject key identifier:   B5:5E:1E:B9:AF:F6:7F:4D:E1:84:F9:B4:8E:66:9A:C6:E5:05:50:EF
Authority key identifier: FD:D9:1D:D3:0E:9B:1F:EA:3B:B7:E1:2A:EF:76:21:66:28:12:9B:23
Certificate issuer:       /CN=A9192B86/serialNumber=FDD91DD30E9B1FEA3BB7E12AEF76216628129B23
Certificate serial:       013A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
Manifest number:          0136
Signing time:             Sat 23 Aug 2025 04:38:00 +0000
Manifest this update:     Sat 23 Aug 2025 04:38:00 +0000
Manifest next update:     Sat 30 Aug 2025 04:37:59 +0000
Files and hashes:         1: _dkd0w6bH-o7t-Eq73YhZigSmyM.crl (hash: Afajotsr1YjErg77Ct29yVh1BxnXU2P696vfmpeUdWU=)
                          2: DECE1662A87D11EE882D7B6EC4F9AE02.roa (hash: C77jJoshdfxzPcbWVGuVdmC/Yt4X5b0+J8bsZe99ndM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.crl
                          rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 04:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192B86, serialNumber=FDD91DD30E9B1FEA3BB7E12AEF76216628129B23
        Validity
            Not Before: Aug 23 04:38:00 2025 GMT
            Not After : Aug 30 04:37:59 2025 GMT
        Subject: CN=68a945a8-1c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4d:7a:da:b3:50:26:aa:5f:1b:d0:54:bd:80:
                    f1:3e:8f:f9:70:fd:45:79:12:a8:84:14:44:a8:0e:
                    41:ab:6a:4e:c5:03:85:f8:4a:02:b4:01:28:88:44:
                    59:79:e6:ab:ba:fe:a0:a6:f1:d2:78:09:c1:d6:c2:
                    54:d2:62:9e:3e:35:3a:f9:53:53:5c:b6:0d:fa:77:
                    1f:27:22:d6:a5:be:91:05:63:b2:64:7f:64:e4:be:
                    1c:7f:5e:e6:b1:48:a4:9b:c8:c8:e0:cc:86:87:b1:
                    f6:66:5c:88:0a:80:10:87:95:d7:dc:64:f5:fe:67:
                    76:d7:99:5f:00:91:b1:9c:73:d7:ae:38:d3:4d:be:
                    02:11:45:fd:57:b7:7f:a1:1f:52:94:6c:91:28:14:
                    ba:de:d9:8f:c7:be:83:c9:55:fc:84:74:18:d9:ea:
                    1e:59:57:5e:b9:7b:3f:92:9f:a1:87:23:9a:15:6f:
                    0c:65:c7:56:3b:cd:0f:0e:78:da:1b:41:ac:8d:4e:
                    f0:ea:48:82:62:59:d2:8e:c7:72:9f:e5:35:a3:6a:
                    96:5a:3c:f8:c2:d9:28:29:b5:76:2c:a0:be:f1:c6:
                    07:fd:62:d8:5b:01:7d:4e:db:fd:ce:a2:d5:24:b3:
                    4a:7e:94:1a:c1:48:e1:95:af:d6:25:e9:20:d7:34:
                    80:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5E:1E:B9:AF:F6:7F:4D:E1:84:F9:B4:8E:66:9A:C6:E5:05:50:EF
            X509v3 Authority Key Identifier:
                keyid:FD:D9:1D:D3:0E:9B:1F:EA:3B:B7:E1:2A:EF:76:21:66:28:12:9B:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:e2:56:36:2b:6c:92:eb:98:10:77:a0:cc:47:b4:7a:7d:1e:
         7e:f4:fe:47:d4:07:5e:f5:dd:41:0a:81:4d:cc:3a:ea:78:8a:
         5b:5e:8e:97:d8:9f:7a:7e:15:53:b1:56:12:d6:92:3b:2f:31:
         56:ef:78:4f:4f:1e:d7:1b:50:64:ce:08:be:96:96:f2:e0:dd:
         15:e8:08:ff:c9:93:16:de:99:2d:53:4e:b1:8e:26:13:0f:f8:
         06:73:04:2e:68:0c:b3:d0:fe:e3:5e:30:81:1b:d0:19:8f:c8:
         8f:4e:72:60:9e:5f:a1:71:60:63:f5:c8:7c:47:03:11:46:5b:
         a4:c4:42:c5:32:0b:a3:1d:4f:62:2c:7d:63:d1:ed:df:a9:66:
         5f:de:cf:b6:15:73:19:66:80:ff:85:69:5b:3c:de:05:81:98:
         d8:4c:3a:71:06:cf:b0:74:81:84:e3:74:ef:e3:9e:a6:81:21:
         ef:bf:b8:0e:48:2a:2f:a9:bd:23:ab:a6:28:c8:44:d8:b8:e9:
         60:ab:a0:fb:9e:4d:15:c7:3e:68:16:8d:92:3a:ff:cf:af:82:
         77:ba:67:24:3a:23:0e:64:f9:30:a3:69:d3:8b:9b:22:2c:87:
         27:78:1f:94:1d:2b:57:f4:10:68:54:b1:a9:3f:56:b8:98:18:
         9f:58:a0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:11:04 2025 by rpki-client