Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.mft
File:                     m1FsBRZinvsTjrDmhbBboA6_Tn8.mft (raw, json)
Hash identifier:          cZQTLapIvwS8cj/+dQrPcd0QXOG4bwST2I/+hUDNwsU=
Subject key identifier:   05:D1:6A:4B:AB:85:27:9B:2A:3F:A9:B1:23:26:40:3F:0C:12:97:75
Authority key identifier: 9B:51:6C:05:16:62:9E:FB:13:8E:B0:E6:85:B0:5B:A0:0E:BF:4E:7F
Certificate issuer:       /CN=A9193552/serialNumber=9B516C0516629EFB138EB0E685B05BA00EBF4E7F
Certificate serial:       D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1FsBRZinvsTjrDmhbBboA6_Tn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.mft
Manifest number:          D5
Signing time:             Sat 23 Aug 2025 05:45:01 +0000
Manifest this update:     Sat 23 Aug 2025 05:45:01 +0000
Manifest next update:     Sat 30 Aug 2025 05:45:01 +0000
Files and hashes:         1: m1FsBRZinvsTjrDmhbBboA6_Tn8.crl (hash: uk/xHAiBrsIU0KkPWmk5EvLIVW4/78ehT4mZAc5775g=)
                          2: 8426E9543A8211EF9F1ED16FC4F9AE02.roa (hash: Cmiqcg21C+LyhA2gAp/ZQEO6k8THpOIRSGDyZ2gTNpQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.crl
                          rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1FsBRZinvsTjrDmhbBboA6_Tn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193552, serialNumber=9B516C0516629EFB138EB0E685B05BA00EBF4E7F
        Validity
            Not Before: Aug 23 05:45:01 2025 GMT
            Not After : Aug 30 05:45:01 2025 GMT
        Subject: CN=68a9555d-c99a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a9:93:ed:1d:fe:db:24:6d:5b:16:8b:a6:e7:
                    96:69:23:e6:4b:71:87:cf:f0:c7:99:6a:d9:09:d3:
                    8c:0e:7a:17:72:4f:02:48:b7:44:d9:88:b2:16:90:
                    6e:e7:5c:ea:74:19:08:d7:00:b5:1a:69:f7:b2:51:
                    c4:8d:a9:73:5d:7e:7f:73:16:47:56:f3:dd:4a:e7:
                    03:a9:56:53:2b:da:b8:a8:09:e6:ed:60:6d:22:3e:
                    de:b2:a5:b4:8f:70:2b:3d:c6:7c:cf:72:b4:63:3d:
                    51:45:94:be:8e:42:7f:cb:f0:23:2a:5e:4d:0e:2b:
                    74:12:e8:1e:f4:7e:59:c4:fc:80:ee:d8:6e:6c:3c:
                    3e:71:34:0e:99:a3:15:17:67:fa:e8:b9:e6:cb:80:
                    87:59:76:21:1c:ef:fa:f3:73:7e:99:b4:77:24:ef:
                    4e:b3:14:c1:6b:43:88:40:d7:5b:fd:e8:88:b4:ca:
                    53:16:59:15:aa:21:36:4f:20:ad:a2:81:7d:97:be:
                    7e:77:0d:af:57:00:65:76:60:37:3d:98:d6:bb:74:
                    16:2c:27:2e:c3:a6:3f:08:55:f1:03:e3:8d:75:2f:
                    02:ef:24:e8:36:a8:39:66:85:49:ef:00:94:bd:67:
                    6d:99:89:4d:ee:12:fe:5c:ec:3f:27:42:16:f4:71:
                    32:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D1:6A:4B:AB:85:27:9B:2A:3F:A9:B1:23:26:40:3F:0C:12:97:75
            X509v3 Authority Key Identifier:
                keyid:9B:51:6C:05:16:62:9E:FB:13:8E:B0:E6:85:B0:5B:A0:0E:BF:4E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1FsBRZinvsTjrDmhbBboA6_Tn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:8e:69:b7:09:51:de:0e:86:40:6b:dc:ad:03:2d:24:54:34:
         90:8d:e0:a0:a1:0e:f8:dc:98:c6:18:7a:37:a7:99:2c:90:65:
         45:fc:ff:0a:0d:fb:e4:17:8d:c9:7c:17:dc:6a:bc:86:79:cc:
         5d:5c:6b:f5:15:df:f6:64:a2:36:85:b8:6e:5b:b6:47:2a:e3:
         55:12:49:31:af:c5:17:63:b7:94:ac:84:2c:09:22:06:22:cf:
         ac:83:81:3c:03:b0:b7:ff:e4:14:65:e4:85:6b:45:24:b1:8e:
         a9:cb:02:d8:45:de:55:59:4b:19:48:45:63:7c:fb:11:82:85:
         b8:0d:11:e5:e8:1e:57:49:13:7a:f0:2e:99:d1:78:98:ee:b0:
         d0:10:8d:2e:c0:7e:00:65:7e:00:10:5f:2a:37:00:5e:7b:0e:
         6f:af:0b:22:44:7c:a6:3d:38:e8:a4:25:f3:89:0f:c6:41:d3:
         b0:d9:29:2c:13:8a:80:8b:85:6c:53:a1:2d:df:9f:a6:34:24:
         e8:a3:78:4e:6e:8f:cb:3b:dc:77:74:34:0e:8b:63:e6:c0:f6:
         6b:24:5f:94:4c:77:68:ec:ca:ce:0d:bf:b7:45:e7:70:12:89:
         99:2d:e7:88:c1:ce:27:a6:b4:80:1c:68:4b:89:8e:c2:6a:82:
         a8:57:b4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:43:29 2025 by rpki-client