Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
File:                     t9PrYcwCjDi_0_eigPNpBGhlWwY.mft (raw, json)
Hash identifier:          ER2GqGbY9KVCbXyb3ze4GkYgsg9p7UNzF/8wouoxKn0=
Subject key identifier:   E7:EA:2E:AB:B1:19:7B:58:A7:66:CC:AB:6E:93:F5:ED:BB:25:A8:42
Authority key identifier: B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06
Certificate issuer:       /CN=A91FED7C/serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06
Certificate serial:       093F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
Manifest number:          0939
Signing time:             Fri 04 Jul 2025 20:36:12 +0000
Manifest this update:     Fri 04 Jul 2025 20:36:12 +0000
Manifest next update:     Fri 11 Jul 2025 20:36:12 +0000
Files and hashes:         1: t9PrYcwCjDi_0_eigPNpBGhlWwY.crl (hash: I5IxkWSKTjbeAZP15slY86Bfpg9jvMEwepP7V9huj7Q=)
                          2: E5DA330E9FF411EABA55D530C4F9AE02.roa (hash: CHvHnzrsNRtyF0f1bsjGZNNk/7bOq09fS+B9V5tsdBI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl
                          rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2367 (0x93f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FED7C, serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06
        Validity
            Not Before: Jul  4 20:36:12 2025 GMT
            Not After : Jul 11 20:36:12 2025 GMT
        Subject: CN=68683b3c-9b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:56:ba:10:43:b1:09:d8:79:01:00:bf:a9:58:
                    01:45:85:b1:e7:d8:ed:ab:18:0d:c6:d8:5e:a8:09:
                    70:b4:9e:c0:58:b4:f1:e7:a7:ba:a9:11:ef:38:b3:
                    f7:b9:3a:21:fa:95:15:b1:c7:b7:e7:af:66:e7:d9:
                    9b:a0:8f:df:52:3d:d5:ff:eb:84:21:1f:8e:c0:8e:
                    04:a4:44:44:2d:f6:48:93:87:a3:ff:3a:0d:d1:4f:
                    4a:60:44:cf:6e:07:95:8e:d5:49:0e:5f:e6:12:c0:
                    8e:b1:86:c0:a1:6d:8f:97:92:4f:eb:fe:49:21:a2:
                    eb:be:3b:87:eb:ff:be:13:27:26:c9:6f:b1:b6:bd:
                    e1:6e:e0:7f:50:8c:04:3b:75:4a:c6:33:ec:b4:93:
                    c3:b6:f7:ed:4f:79:ca:e1:36:42:3a:2d:a9:ff:b1:
                    54:4c:aa:5f:0b:7e:b3:09:89:cb:f5:77:57:06:59:
                    ba:09:fe:81:41:6e:92:78:13:6e:d2:2a:9e:9d:83:
                    c7:e8:b2:7c:92:6c:d5:17:94:fb:63:8f:c9:9d:7a:
                    90:e2:31:91:44:3b:ad:80:00:5d:56:db:9d:e9:a0:
                    59:e5:e6:4d:27:8e:0e:40:4d:27:76:fb:f3:50:03:
                    41:a6:aa:3b:ea:a5:a3:38:cb:27:cb:e1:3c:94:cc:
                    77:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EA:2E:AB:B1:19:7B:58:A7:66:CC:AB:6E:93:F5:ED:BB:25:A8:42
            X509v3 Authority Key Identifier:
                keyid:B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:0e:8a:bd:07:f6:aa:05:5e:1a:0f:47:a5:55:42:e2:fb:b4:
         a2:61:49:d4:a9:dc:72:d5:e9:81:cd:b9:69:81:13:f4:10:fe:
         80:a5:09:13:7d:9a:58:14:ec:31:d2:40:bb:00:87:db:25:a4:
         37:a1:3f:44:95:69:b5:2e:ca:76:db:4a:34:7c:c1:1f:90:77:
         d6:47:8a:5a:c3:4e:d1:d9:8a:ec:ef:41:dc:e1:62:f2:78:1c:
         d0:8d:46:85:05:9a:1f:6d:c1:97:b5:ce:64:04:92:12:c0:e8:
         0c:db:bd:45:b8:2e:1f:9e:9b:bc:db:81:3b:f3:80:60:f8:8c:
         0b:ea:4e:4a:bf:f2:d3:fd:3b:54:46:97:e7:98:02:47:3e:c2:
         3f:30:40:15:0b:c0:b8:61:3e:e3:98:f9:67:98:54:60:9b:a8:
         27:66:fc:d1:5f:b1:07:19:b9:66:d0:52:0d:a8:83:4e:b5:dc:
         92:e0:80:15:6d:94:8e:0c:0c:ab:34:5f:11:43:44:9d:ae:e6:
         c6:a8:a8:b0:4c:1a:bf:ba:7a:2c:49:cb:11:69:c0:d9:2c:17:
         fb:3b:03:48:ef:51:3f:dd:b6:54:40:de:ea:d9:e3:5d:f7:99:
         b2:bd:26:4e:3a:69:ea:76:59:7f:0a:5d:1e:ac:36:0e:72:53:
         06:b3:d5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:49:46 2025 by rpki-client