Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft
File:                     rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft (raw, json)
Hash identifier:          53AnHkpuT3QCNwMJDT2t5kXCu4KUMBAOU9omvBHVO/w=
Subject key identifier:   13:0A:66:A4:0B:AD:90:D2:26:E3:6F:E5:EA:7D:77:7F:58:55:53:E2
Authority key identifier: AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A
Certificate issuer:       /CN=A9196DCA/serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A
Certificate serial:       7B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft
Manifest number:          79
Signing time:             Sat 23 Aug 2025 07:00:10 +0000
Manifest this update:     Sat 23 Aug 2025 07:00:09 +0000
Manifest next update:     Sat 30 Aug 2025 07:00:09 +0000
Files and hashes:         1: rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl (hash: OTK/F0RHCc8jq2OYBMLeu6uS1Pw09jzNQHYUQ5NHVaU=)
                          2: E39AF9C6CB3611EFAE3C1A10C4F9AE02.roa (hash: HaAP7uUg1XzzgFWY/CdSRARMCuA2gGNyuumYnBvV1lw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl
                          rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196DCA, serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A
        Validity
            Not Before: Aug 23 07:00:09 2025 GMT
            Not After : Aug 30 07:00:09 2025 GMT
        Subject: CN=68a966fa-6389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:77:ad:4b:8a:6a:d5:dd:ee:90:89:03:65:fd:
                    13:6e:c4:7a:98:8e:82:56:48:ba:df:88:62:28:78:
                    d6:3d:91:05:fb:a8:21:5c:74:24:f6:a9:6b:fb:f1:
                    34:7d:3a:fc:e6:eb:1f:4d:d2:a4:d8:3f:9c:4e:8c:
                    14:f3:7c:17:19:78:c1:c5:6b:4f:0b:ef:e2:4f:3e:
                    90:c8:53:61:14:6c:86:48:b7:57:62:3f:11:74:76:
                    df:f6:39:54:0b:3f:07:b2:51:1f:12:20:e6:0c:16:
                    a9:a0:d2:88:aa:a3:9e:60:09:fd:03:2d:ee:f0:78:
                    ff:12:26:78:47:f0:39:65:b2:6d:ea:b7:b9:55:fa:
                    fd:e6:39:a5:fe:5f:a3:34:0d:87:3d:4d:60:f3:2d:
                    cc:04:a8:72:6d:f8:d7:3d:37:60:eb:eb:88:e6:a5:
                    2c:25:58:54:32:64:76:ae:e8:2f:ed:82:33:1c:13:
                    d2:e3:58:8b:22:71:19:f6:9b:3d:47:76:9f:7a:69:
                    95:9e:18:db:18:8d:47:ea:9c:bf:be:a0:bc:07:e3:
                    58:a7:96:83:c7:21:0c:c4:1a:c6:46:3d:0d:b1:1b:
                    02:b2:b8:02:0d:c5:9f:4b:1c:64:7a:12:58:22:61:
                    55:dd:14:d6:ea:18:8a:cc:5a:b1:bd:9f:40:92:08:
                    14:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0A:66:A4:0B:AD:90:D2:26:E3:6F:E5:EA:7D:77:7F:58:55:53:E2
            X509v3 Authority Key Identifier:
                keyid:AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:4a:11:47:0e:fe:b1:c4:83:ce:92:2f:71:8e:eb:d2:f4:fb:
         63:13:d4:b9:d5:db:58:89:41:4a:45:d4:6c:e2:11:9d:60:8c:
         84:4c:cc:b3:2b:81:10:25:3e:94:ef:74:ba:68:c6:26:40:19:
         1b:7b:ce:2d:d7:be:f4:d6:a4:75:ee:e6:82:1e:cf:84:dc:9e:
         c1:28:4e:70:77:81:9e:0f:1e:5a:69:0c:a7:44:b4:b2:9e:27:
         a5:18:c2:25:83:e3:5a:2c:0a:a7:a4:e0:da:0c:3c:f0:4a:2c:
         3e:cf:92:59:e8:8e:43:fb:48:cd:f0:00:8c:14:b9:e9:16:9a:
         a8:ee:a4:92:4a:e7:db:15:18:64:d2:c5:95:be:16:44:3d:7c:
         eb:f2:14:c1:c0:a7:21:01:5b:4e:b0:75:bb:c9:26:f8:36:f7:
         80:6d:62:62:cf:fd:d6:d9:57:1f:86:18:77:45:38:ca:c5:9a:
         34:37:f3:8c:68:0e:2b:5d:8f:cf:03:e1:44:79:d2:43:f4:29:
         59:2f:23:f5:0f:33:48:54:b2:0d:85:5d:f1:32:c6:60:17:0b:
         cf:07:b6:19:be:f5:94:5e:ce:f8:40:73:36:62:4b:f2:a9:b0:
         f9:81:51:c2:64:37:1e:47:02:c4:52:95:c2:c9:c2:19:e9:d5:
         8e:f1:eb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:44 2025 by rpki-client