Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
File:                     aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft (raw, json)
Hash identifier:          hj5wnR3C5N7vEcO0QmOUzooiO94OmgWfJtEk9pw0TOM=
Subject key identifier:   6F:05:11:FF:7C:D1:04:55:57:7A:DC:97:B0:66:3A:F6:2B:69:C9:86
Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
Certificate issuer:       /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Certificate serial:       08B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
Manifest number:          0858
Signing time:             Wed 02 Jul 2025 21:17:51 +0000
Manifest this update:     Wed 02 Jul 2025 21:17:50 +0000
Manifest next update:     Wed 09 Jul 2025 21:17:50 +0000
Files and hashes:         1: aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl (hash: qwAqHMGL/Hl+d1vegEaX5/Hn2vWyiUwO1bdzWYjw6mM=)
                          2: 70F51BEE4B0D11EF94975151C4F9AE02.roa (hash: 5OJq3TQL6UcD1e0FTm6+f4tFRojNv3dxN2hOmwh/XMU=)
                          3: 14C388C2114311F0B3944E67C4F9AE02.roa (hash: mTf8cQmCDCOr2IAAbGwT5DT/HAjoFjlHGakTn87Xya0=)
                          4: 18F343922A5711EBB59D6526C4F9AE02.roa (hash: 67FA0fogoOEO8ZhRY0Z7X/jNdUDR2kpHHHAZ7zc0DNU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
                          rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 21:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2233 (0x8b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199197, serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
        Validity
            Not Before: Jul  2 21:17:50 2025 GMT
            Not After : Jul  9 21:17:50 2025 GMT
        Subject: CN=6865a1ff-795e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c9:cf:ec:38:21:3d:f1:b3:b4:c3:d4:fb:67:
                    a8:72:9e:a0:6e:83:db:71:9b:5b:b0:30:73:b7:63:
                    b0:fb:ed:86:2d:89:d8:7c:18:5e:e8:19:48:65:bd:
                    99:a0:78:23:2f:9d:a6:51:37:17:42:5c:3b:23:e4:
                    54:da:49:36:84:1c:85:42:02:60:08:05:d5:9b:c1:
                    74:cf:25:b1:69:e9:40:d2:8e:7e:74:3b:75:54:4d:
                    72:f2:03:df:29:32:58:95:3d:85:6a:0f:8b:50:5d:
                    c7:66:0e:85:02:37:bb:be:fa:7d:a6:d6:ac:8e:cf:
                    30:ac:11:5c:8d:e3:80:2d:98:95:61:62:f9:96:5a:
                    66:49:44:28:be:aa:a8:8f:51:5c:4a:4e:dd:92:76:
                    1c:5d:59:62:e3:f8:4b:c9:50:0f:2e:90:b4:ea:c2:
                    fc:01:c9:67:f3:b9:a2:ba:ac:f2:4c:d1:cf:e2:11:
                    ec:4d:c8:72:61:4d:dd:ab:d6:f5:ce:9e:cc:e2:96:
                    0e:60:45:ad:9b:f9:c8:e4:a8:30:ff:77:6d:5c:a6:
                    78:d8:b2:bf:58:46:00:f9:69:0c:0b:2e:a7:4e:13:
                    42:ab:1a:9c:e7:a8:ad:e2:de:3a:07:17:78:f9:43:
                    63:82:37:e4:9e:c2:a0:17:93:03:40:6d:d7:d7:08:
                    f0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:05:11:FF:7C:D1:04:55:57:7A:DC:97:B0:66:3A:F6:2B:69:C9:86
            X509v3 Authority Key Identifier:
                keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:09:88:84:56:8b:65:3b:e5:5f:3b:45:60:03:8f:5c:35:58:
         25:12:f3:7c:fa:e4:b4:2b:49:1e:20:b9:b7:bf:6b:a2:c5:bf:
         cc:9b:f7:aa:6a:48:61:6c:62:84:35:8b:5a:9e:e6:40:e1:06:
         2f:87:2d:b5:17:17:e9:ef:db:54:ca:5f:46:59:cd:34:39:7c:
         66:5a:38:f7:1f:e3:d5:13:18:d6:63:96:30:7d:b2:1a:11:67:
         a4:d3:c8:6f:bd:05:6e:90:ac:7d:11:68:cc:ee:79:4f:20:b8:
         8d:48:7d:95:9d:4b:da:fe:a1:67:16:ae:96:5c:38:48:eb:29:
         db:54:1b:b1:12:98:86:57:1c:1c:48:f8:28:b7:0c:0b:50:ea:
         13:5b:cd:33:b5:11:c9:2a:a4:45:5c:ed:20:fb:56:e6:d4:e7:
         31:4c:87:86:00:d8:5f:c9:3f:37:0f:f3:b9:fb:b9:4f:a9:ef:
         69:53:99:06:ab:61:4e:4a:54:3e:c1:58:55:12:8e:39:67:9d:
         95:73:f9:ea:cf:6e:f1:7e:57:62:50:43:bd:6c:6f:03:4a:23:
         e6:79:15:20:0d:be:ed:f6:71:d5:43:e3:8d:bf:d7:47:59:32:
         8d:dd:c0:37:d7:1d:7e:74:8a:9b:07:38:d1:c3:1d:24:f1:8d:
         d1:f8:1a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:06:05 2025 by rpki-client