Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
File:                     CcSauZoFYD1stgicc9N2kJhCHgA.mft (raw, json)
Hash identifier:          i8Dezd8orh2xt12tRb4BvwyrBoCZ/Y5eHw/d81d+ZT4=
Subject key identifier:   8B:37:99:B0:9C:EB:6B:77:F0:8F:69:85:15:E4:6A:66:CB:3E:4C:C3
Authority key identifier: 09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00
Certificate issuer:       /CN=A912D109/serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
Certificate serial:       013B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
Manifest number:          0132
Signing time:             Sat 19 Jul 2025 04:45:45 +0000
Manifest this update:     Sat 19 Jul 2025 04:45:44 +0000
Manifest next update:     Sat 26 Jul 2025 04:45:44 +0000
Files and hashes:         1: CcSauZoFYD1stgicc9N2kJhCHgA.crl (hash: Jzh4017ai09Q7zTa2O7NJC7zkZmZ8uDeZBiAEvY3uxw=)
                          2: 8415F4AA928511EE8AE43D75C4F9AE02.roa (hash: Fl6atygIAOnJfBaO72/s6xAJoCMVco87/j+JtQku3zQ=)
                          3: 7C76E4F6928611EE9B72027FC4F9AE02.roa (hash: Fm2GFDeckTvyapLgYWUd+q+9ZGt0Kt0IDFuGxReJTVw=)
                          4: 7BFABFDE928611EE9B72027FC4F9AE02.roa (hash: kWW5cRDXuhjkk+iiH/wUKjwNBV8vRl665o5zsQhUdP0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl
                          rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 04:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D109, serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
        Validity
            Not Before: Jul 19 04:45:44 2025 GMT
            Not After : Jul 26 04:45:44 2025 GMT
        Subject: CN=687b22f9-97f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:01:77:3e:c7:e0:a5:c6:3a:2d:6e:e3:bd:7f:
                    5e:85:d5:c5:0a:48:9e:90:43:ca:4c:41:1a:98:14:
                    05:20:fd:7d:0b:dc:6d:7b:c5:84:1e:22:be:bf:7b:
                    12:1a:4f:b5:b9:aa:6c:d3:c8:25:4b:92:a1:86:20:
                    9a:66:93:d5:b7:23:7b:55:49:ee:9c:df:54:bb:7f:
                    1b:94:1c:c0:bf:a6:34:03:8f:de:f2:26:f5:eb:bb:
                    a5:88:72:1b:0e:2b:7a:de:eb:f7:45:74:c8:bd:58:
                    57:3f:67:73:c7:bb:27:c1:33:2d:19:71:e2:93:7c:
                    a3:98:3e:5f:8a:6a:d9:31:00:3a:45:29:47:29:f2:
                    d2:f3:04:84:42:83:55:f4:11:a8:bc:25:6d:c6:67:
                    a1:03:68:dc:70:93:50:c1:0d:20:aa:c3:02:7b:67:
                    25:ce:d3:07:a0:f8:a0:66:02:f2:a3:77:ee:9a:ba:
                    cc:59:7f:21:84:01:c0:a7:c9:06:d8:ce:12:ed:8c:
                    89:77:2a:d0:bf:ff:db:73:94:85:71:fe:83:ca:b4:
                    0f:fd:61:f7:2e:10:8d:f9:a3:75:37:d7:0e:93:5e:
                    0f:70:1b:cf:69:b8:f8:6b:9b:13:af:9a:1a:d1:77:
                    b6:92:3e:fb:80:d3:3d:49:42:fa:8c:c9:58:a9:6d:
                    69:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:37:99:B0:9C:EB:6B:77:F0:8F:69:85:15:E4:6A:66:CB:3E:4C:C3
            X509v3 Authority Key Identifier:
                keyid:09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:83:38:9a:cc:77:6f:a8:f1:0e:28:d6:98:ea:31:20:66:70:
         a4:80:86:21:96:6e:cd:9b:86:bf:5b:de:87:66:a9:e6:1b:2b:
         3a:c1:e1:6c:d2:38:fa:8f:ee:ec:eb:b4:72:66:03:a7:75:c8:
         9b:94:d3:82:7b:79:69:a0:7c:77:50:fa:eb:a1:4e:b4:f7:bb:
         6a:22:3c:3e:2b:d9:ae:88:48:9a:2c:84:71:87:c5:0d:91:70:
         ec:0a:b8:83:50:47:cd:b8:2f:99:e7:37:b1:ca:f3:8c:e5:1c:
         43:20:66:00:62:be:ab:81:f7:36:65:3d:4f:13:21:4f:98:c3:
         64:be:b9:ac:5f:6d:9e:a2:ea:87:f7:3c:18:75:03:63:5c:c1:
         e2:fd:1d:52:17:c2:56:ee:f1:4b:fd:80:db:cf:45:94:d1:93:
         68:31:c4:e5:24:9f:41:93:e0:23:4e:11:76:d0:cb:26:d1:ce:
         f5:a7:03:93:21:0e:16:7a:49:5f:18:0f:85:96:24:5d:9a:dc:
         6c:9c:42:9d:b0:73:cb:d2:97:8e:aa:97:47:33:27:0f:51:f5:
         c1:49:53:6e:c1:b7:5e:4b:a1:ff:da:d8:ba:37:28:19:85:6a:
         5e:7e:cf:ac:e8:af:7d:c4:cc:a0:58:70:85:97:87:dc:04:82:
         b6:3a:c2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 10:16:19 2025 by rpki-client