Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft
File:                     pK73BplO997sjIomg0NykQSEsbA.mft (raw, json)
Hash identifier:          ogo9cJ+/NaKtfw6SqUuaL7kzl5hzJYly0hOMGiHyRu8=
Subject key identifier:   25:98:42:74:5C:A3:8F:51:14:38:FD:1E:A1:1E:86:3B:08:4C:C2:0D
Authority key identifier: A4:AE:F7:06:99:4E:F7:DE:EC:8C:8A:26:83:43:72:91:04:84:B1:B0
Certificate issuer:       /CN=A9196412/serialNumber=A4AEF706994EF7DEEC8C8A26834372910484B1B0
Certificate serial:       06BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pK73BplO997sjIomg0NykQSEsbA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft
Manifest number:          06AD
Signing time:             Sat 28 Jun 2025 21:48:29 +0000
Manifest this update:     Sat 28 Jun 2025 21:48:28 +0000
Manifest next update:     Sat 05 Jul 2025 21:48:28 +0000
Files and hashes:         1: pK73BplO997sjIomg0NykQSEsbA.crl (hash: OBCUTbzk0em+k/E0PrbA9o5EzvoVcCGtqg9Cnbysuwc=)
                          2: 7568D85E731211EBAFF0B481C4F9AE02.roa (hash: 4hu+Ea1WW3aPEC6/j9KPgOfcmbDhbVy01ftALoJDrTc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.crl
                          rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pK73BplO997sjIomg0NykQSEsbA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 21:48:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1723 (0x6bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196412, serialNumber=A4AEF706994EF7DEEC8C8A26834372910484B1B0
        Validity
            Not Before: Jun 28 21:48:28 2025 GMT
            Not After : Jul  5 21:48:28 2025 GMT
        Subject: CN=6860632c-a19b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9e:f5:e9:d6:95:4b:5c:26:20:1a:ea:88:7f:
                    39:b8:26:2a:7c:3b:55:3d:22:2e:7a:ff:0a:1e:30:
                    00:a5:c7:a5:4a:6f:14:41:fb:23:ae:68:d1:76:59:
                    da:93:24:e2:3a:77:0b:bc:e7:d6:44:37:50:9f:00:
                    55:48:6c:ff:8d:d9:88:0c:03:98:2d:4d:c1:42:39:
                    17:f9:0d:da:76:f4:9d:76:a1:35:12:5a:ed:86:18:
                    c9:a4:fe:b6:a7:4a:a8:54:77:1f:16:69:7e:9f:a1:
                    d8:47:97:aa:47:05:aa:3e:41:43:5a:dd:72:f0:29:
                    d4:ba:9e:54:87:7d:49:08:e6:2a:65:8b:aa:81:4c:
                    c5:d3:6a:38:64:47:44:c9:2a:12:45:5b:d0:c0:43:
                    b1:4e:6d:e7:54:4f:de:92:0b:23:40:27:ed:7a:ad:
                    20:ef:48:80:73:2c:f6:34:dc:81:17:88:0f:d7:8c:
                    dd:85:1d:91:4b:08:ab:f6:94:6a:a6:99:25:90:bc:
                    0c:1d:36:25:a6:2b:3a:f8:be:a1:e9:c0:2c:b1:78:
                    6d:7c:46:3d:4a:fc:dd:e1:50:7c:3d:fa:ba:e8:46:
                    bd:65:2b:c5:31:cf:af:3a:72:5f:49:08:03:a1:e4:
                    05:50:b3:e1:3c:50:87:37:59:85:44:19:1b:9d:d6:
                    74:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:98:42:74:5C:A3:8F:51:14:38:FD:1E:A1:1E:86:3B:08:4C:C2:0D
            X509v3 Authority Key Identifier:
                keyid:A4:AE:F7:06:99:4E:F7:DE:EC:8C:8A:26:83:43:72:91:04:84:B1:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pK73BplO997sjIomg0NykQSEsbA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ea:1e:09:48:13:3b:c1:59:3e:0e:ad:ec:95:65:50:c6:b0:
         d7:5b:c6:eb:a6:f1:d1:e5:43:1f:40:04:0e:5f:27:2f:7f:ae:
         55:4a:31:f8:5a:70:3a:0e:43:15:44:fb:dd:44:46:b4:03:b2:
         38:bf:2c:4d:c8:06:fe:bd:18:38:04:d0:1e:5b:e6:53:6d:b9:
         c2:a9:17:8a:dd:9c:25:19:48:94:15:34:a5:b4:26:a7:94:c1:
         4b:7d:87:5f:46:c1:b2:41:8d:40:4f:23:ce:01:b2:66:1a:aa:
         e8:3e:8a:fe:74:3e:79:a7:01:d3:85:dd:37:be:71:5f:b0:4e:
         ff:87:11:f4:47:28:04:26:5c:50:be:9b:eb:9b:d4:9c:bb:5f:
         53:c9:56:03:bd:6f:bb:6c:0f:57:c7:a9:f7:fb:ae:79:db:f0:
         5b:db:5c:2c:85:83:f6:2b:d6:e4:e1:f6:ee:1e:e0:2c:d4:28:
         25:64:4c:2a:ca:8d:7c:c8:89:e1:95:62:15:0b:26:c0:6e:2f:
         32:78:27:d6:a4:4d:20:16:be:6a:83:23:23:b0:72:87:a8:23:
         a5:a9:0f:8b:bc:7f:41:08:60:df:19:4b:5d:50:3a:69:0b:f5:
         90:b1:c0:89:3c:46:ed:9c:c8:72:bd:be:10:8d:5d:bb:07:ed:
         91:2b:c9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:00:21 2025 by rpki-client