Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft
File:                     u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft (raw, json)
Hash identifier:          PJ6pAisQgi0Eqp2Lv6+IMrw9Gsza50ggeTWp2D7Br3Q=
Subject key identifier:   A5:FC:C3:8E:B0:98:D4:6F:13:1D:89:F7:94:33:A5:7A:3F:23:20:CF
Authority key identifier: BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1
Certificate issuer:       /CN=A919B824/serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1
Certificate serial:       091C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft
Manifest number:          0916
Signing time:             Wed 02 Jul 2025 20:32:28 +0000
Manifest this update:     Wed 02 Jul 2025 20:32:27 +0000
Manifest next update:     Wed 09 Jul 2025 20:32:27 +0000
Files and hashes:         1: u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl (hash: rfNu++iTBSxAEhBwyhfNI9M4b4DCoJcAk6Mb1KAf5/M=)
                          2: EEC7D1CAA6C911EA8079FD17C4F9AE02.roa (hash: 1XpEnw/JwEEBYh3nZmy2aqDGrwdu6fQDgmNMuCskbDE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl
                          rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 20:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2332 (0x91c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B824, serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1
        Validity
            Not Before: Jul  2 20:32:27 2025 GMT
            Not After : Jul  9 20:32:27 2025 GMT
        Subject: CN=6865975b-7804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c3:80:55:11:f1:5c:ff:eb:8e:28:46:ed:50:
                    14:ad:96:4a:2d:62:14:14:2b:4a:aa:91:62:3d:83:
                    b0:56:6a:ba:d4:38:66:ba:be:18:6b:d2:41:80:7d:
                    b1:9f:e7:43:a6:d7:40:af:02:e3:21:5b:44:e3:8b:
                    22:5f:a3:5b:c2:44:33:f5:e9:ee:3a:23:5e:59:78:
                    ab:4c:61:ba:bd:dd:19:13:1a:b6:aa:77:ac:04:a5:
                    00:5a:33:f9:ae:e1:46:35:89:88:42:45:6a:bd:66:
                    41:e7:0f:87:43:44:37:3b:8a:04:0c:aa:ee:fa:f9:
                    f7:38:1e:93:e4:ae:ac:d9:3f:ee:9b:7d:be:6a:e4:
                    f9:0a:7c:58:c7:80:0a:3c:1d:7b:8c:8c:b1:68:66:
                    c6:40:67:9a:9d:05:46:88:ed:e0:30:fe:10:de:61:
                    49:39:ab:64:e6:1a:fd:f2:8d:f9:96:97:34:28:94:
                    ae:bd:94:79:e7:5e:38:72:6b:01:49:ef:81:58:9f:
                    88:7a:da:0b:b5:25:93:6a:72:f4:75:f9:fe:6e:cc:
                    6d:bc:a0:b5:9a:8d:f2:6a:32:25:10:69:33:a6:fe:
                    5b:5b:0e:c8:7f:bd:a4:66:13:e5:0d:a4:fd:b0:fe:
                    fd:69:61:27:8a:29:73:73:14:59:90:0d:88:39:5e:
                    24:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FC:C3:8E:B0:98:D4:6F:13:1D:89:F7:94:33:A5:7A:3F:23:20:CF
            X509v3 Authority Key Identifier:
                keyid:BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:3a:62:f6:6b:32:33:49:c6:77:17:96:c8:95:4d:2c:52:4b:
         49:df:c6:bd:04:2b:ed:dd:54:04:c5:2b:1c:c6:70:78:5b:80:
         c9:bf:ca:cc:43:0b:d8:1e:48:50:50:f7:74:63:d2:4b:bf:95:
         bd:fd:37:9a:4e:d8:0a:d1:53:be:1a:9c:0e:b1:08:7d:f4:3d:
         9c:8f:16:8a:98:a7:b9:3e:db:cc:16:fd:93:f0:bf:2a:3c:51:
         c8:26:c5:e1:da:29:2f:8e:14:01:c1:c8:86:3b:97:73:ab:b8:
         90:ed:04:78:0d:bb:0d:ef:50:47:7b:25:ff:e6:44:66:51:5a:
         7b:91:05:75:56:e0:2b:b8:f9:dc:36:4b:b4:50:95:ff:04:79:
         92:de:85:70:d9:84:d7:7a:3b:e3:a5:7a:be:59:49:d4:a8:8d:
         3a:84:f9:9b:c9:77:ed:79:6b:36:58:22:a5:85:7d:e8:6b:fa:
         27:dc:67:bf:5e:06:ae:f1:fe:cc:b5:1b:be:d0:60:20:13:9a:
         bd:f4:40:16:07:d4:96:0c:26:fb:fb:a8:1b:69:90:26:a0:55:
         b8:6b:4b:d5:6e:8d:03:11:45:83:4f:2a:4a:81:ee:60:33:80:
         21:3f:ad:20:de:de:23:15:12:e3:75:60:86:90:a5:9a:97:9d:
         a0:f4:53:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:41:05 2025 by rpki-client