Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft
File:                     cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft (raw, json)
Hash identifier:          Gs89fekoaOhC6pBXGTMpbC3LtoQzAP6K+b8NrNWw6h8=
Subject key identifier:   AB:AF:C1:B8:1B:3B:C7:AC:6B:34:23:3D:70:EE:11:9B:76:5F:2B:81
Authority key identifier: 72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92
Certificate issuer:       /CN=A9126356/serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492
Certificate serial:       112A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft
Manifest number:          1122
Signing time:             Thu 24 Jul 2025 17:25:42 +0000
Manifest this update:     Thu 24 Jul 2025 17:25:41 +0000
Manifest next update:     Thu 31 Jul 2025 17:25:41 +0000
Files and hashes:         1: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl (hash: pGmRUM7EnIJoMsngCGXmbgx8lPHvamkibO1ObRljZ7k=)
                          2: FBD6D2BE158711E9881C4D1FC4F9AE02.roa (hash: zNlH/Z07Yg4I4x55gc1ucSgdIggd1npatylNfrUQ3Ns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl
                          rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 17:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4394 (0x112a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126356, serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492
        Validity
            Not Before: Jul 24 17:25:41 2025 GMT
            Not After : Jul 31 17:25:41 2025 GMT
        Subject: CN=68826c96-0c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:d9:50:99:03:3e:a0:99:3c:98:0a:98:b6:6f:
                    c8:23:14:c3:46:f3:43:22:40:71:71:2c:67:62:ed:
                    18:9f:46:8e:3d:54:ba:05:be:d0:09:59:b4:21:bf:
                    9a:b5:aa:68:6c:22:67:08:a5:97:33:13:12:54:18:
                    00:72:26:68:66:c3:d8:6d:d1:4d:c8:dc:78:5f:28:
                    14:10:57:1f:d2:0f:09:af:44:ce:39:c6:61:5e:a2:
                    b4:b0:f1:38:4f:d6:45:ab:c8:ca:25:9c:16:81:0e:
                    06:99:e3:cd:b3:e5:6d:55:f6:0e:e0:fd:7f:42:eb:
                    27:69:30:c0:47:af:71:8f:f8:99:da:2b:70:5f:69:
                    64:22:0b:1f:af:6f:e1:ef:94:92:a4:4f:23:45:eb:
                    a7:18:f9:39:23:dd:87:96:88:d3:49:c0:28:a4:f2:
                    9e:a2:ec:6b:73:c3:09:1c:a0:56:a8:c0:f4:2a:fd:
                    df:fe:e7:25:db:72:33:d0:a5:96:e1:0d:af:48:81:
                    0c:83:8e:51:b5:14:dc:30:15:f8:82:fa:a9:6d:07:
                    99:b9:32:5d:5f:17:e5:d7:cc:d5:13:67:87:ce:27:
                    88:aa:af:51:ef:04:77:6e:c5:47:92:a3:a2:00:85:
                    d4:cc:2a:38:2a:38:c0:5f:e2:c1:07:dd:9b:c9:b8:
                    24:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AF:C1:B8:1B:3B:C7:AC:6B:34:23:3D:70:EE:11:9B:76:5F:2B:81
            X509v3 Authority Key Identifier:
                keyid:72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:44:d3:71:af:45:ca:1f:96:34:7e:fa:28:e7:41:d0:5a:d2:
         07:c9:47:ed:d5:58:f4:15:8c:f6:e3:4f:9b:71:5a:fa:20:62:
         78:22:8b:d9:40:d1:34:08:fd:fb:30:e4:99:9e:58:2c:a8:c3:
         43:84:f0:8d:cd:fc:ac:2c:02:b6:a0:a0:48:22:26:98:10:35:
         37:cb:c5:dc:e5:21:f0:f9:af:42:d8:6e:5f:7f:95:3b:3e:f9:
         11:cf:b4:6f:94:33:34:9f:ff:1f:58:04:fa:a8:ae:b9:a1:e1:
         48:a9:54:da:58:9f:aa:a2:ed:93:3f:5d:38:e4:d7:cf:c5:59:
         9a:c9:c3:73:e4:21:fa:4e:5c:2b:4c:6c:be:02:af:ae:c6:c2:
         69:0d:2d:9b:4d:bb:67:6e:61:85:ce:87:c2:04:66:cb:06:12:
         0f:ea:46:f8:73:f6:6c:27:fb:4a:3b:39:77:25:25:11:20:4b:
         93:46:a9:a1:f3:75:13:ee:89:a1:d9:44:11:08:1f:07:89:54:
         ce:e0:63:9a:39:0f:b3:50:d4:85:43:86:ce:6a:c7:f6:25:d0:
         7c:39:58:1d:b0:73:0b:0b:c0:c0:91:db:61:85:a6:b3:49:ff:
         f2:e9:d8:9a:ee:8b:a5:f3:eb:38:7b:16:df:3d:b6:1b:ba:e6:
         c4:fb:1e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 04:05:17 2025 by rpki-client