Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
File:                     9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft (raw, json)
Hash identifier:          8BMqU+7OL4EgwIfGECejQXl+Jg9k4vuF61ygr5cNma4=
Subject key identifier:   CF:53:2B:40:2B:28:7C:0E:A2:0C:62:B7:F7:E1:4E:E7:5E:5A:37:74
Authority key identifier: F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6
Certificate issuer:       /CN=A912EFFD/serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6
Certificate serial:       23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
Manifest number:          22
Signing time:             Wed 23 Jul 2025 08:11:36 +0000
Manifest this update:     Wed 23 Jul 2025 08:11:36 +0000
Manifest next update:     Wed 30 Jul 2025 08:11:36 +0000
Files and hashes:         1: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl (hash: axPdOhUaYtYpCovOS0twhqrk+DiRNEex5iYU9bP5/SE=)
                          2: 8F93DAA0332311F0BF038621C4F9AE02.roa (hash: P1i8JlTHvQeelXBaQFnkoslfsZeeYGvP6Iqsm2zpN2s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl
                          rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 08:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912EFFD, serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6
        Validity
            Not Before: Jul 23 08:11:36 2025 GMT
            Not After : Jul 30 08:11:36 2025 GMT
        Subject: CN=68809938-f54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7e:2b:72:8a:ab:26:3f:f8:0a:7e:3f:9b:5f:
                    47:85:e2:12:00:44:19:dc:3d:be:26:90:a9:ac:d1:
                    d2:d3:4a:fc:92:b9:37:ff:a0:df:4e:d1:14:79:6e:
                    23:35:5b:dc:e4:71:66:db:13:33:ec:6a:ea:89:67:
                    62:1d:43:39:3a:df:ca:b0:84:c7:d9:5e:ff:0f:bb:
                    34:5f:55:70:a1:2d:ba:4d:94:57:18:24:f8:1c:a5:
                    c9:2f:eb:6f:52:14:45:40:26:74:c1:74:15:21:84:
                    5e:f7:e8:22:2f:07:05:24:a0:2b:db:0c:c8:cc:0b:
                    7c:9e:6b:10:3a:55:b7:1a:51:dd:92:c9:0c:8b:50:
                    6c:8e:63:15:b8:c0:00:f3:f8:62:de:ef:ab:be:0e:
                    34:81:5d:2f:0b:c0:b6:67:de:98:7a:2b:b2:7b:24:
                    f7:61:4b:eb:30:47:13:81:ab:56:6b:98:ff:38:53:
                    ec:c3:41:43:f5:58:03:62:86:4f:27:ad:ec:6c:0f:
                    44:a9:6f:60:cc:a5:f1:e4:0b:9f:26:0b:5d:5c:e5:
                    14:61:29:fe:d9:05:53:99:ee:2e:87:7f:7c:ee:d0:
                    87:cc:c1:1a:7e:32:65:e2:87:08:22:73:df:00:de:
                    bf:22:d6:22:8b:52:e4:7f:7f:f6:f7:77:da:dd:25:
                    9d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:53:2B:40:2B:28:7C:0E:A2:0C:62:B7:F7:E1:4E:E7:5E:5A:37:74
            X509v3 Authority Key Identifier:
                keyid:F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:a5:26:3e:48:c1:a7:a5:0d:49:82:d7:6f:28:ef:bd:97:5c:
         cb:1d:41:16:4d:8e:b0:ce:0d:c3:a1:f8:ef:bd:74:28:b3:d0:
         f1:66:70:9d:ff:f0:44:cf:06:f8:b3:79:32:92:bb:47:b7:e9:
         a0:bb:0f:c6:a3:c1:e8:29:4d:f2:d0:55:72:93:b8:79:61:c7:
         74:46:7c:fc:ac:bd:b4:88:7d:dd:6e:7f:b5:34:91:0c:82:ed:
         6e:dc:76:a6:7a:3c:85:e6:72:ce:c3:5c:f4:68:2c:a6:ee:ae:
         1e:e9:87:e3:2e:06:4c:ea:5d:75:71:85:14:5a:11:60:3d:1d:
         4c:58:3f:53:5c:f5:ec:c4:8d:d5:dd:b0:62:31:31:2a:01:22:
         c9:22:83:23:62:ad:ce:35:bf:19:60:64:60:b0:8c:d4:8d:02:
         7d:6e:fe:b9:81:94:a6:c1:2c:d3:69:98:2b:93:60:49:f0:7c:
         0d:d3:d0:c3:8b:4d:7e:20:c2:45:fb:e2:47:3c:28:cf:32:6e:
         5d:0d:9a:da:66:ea:55:20:02:27:bc:6f:0a:9e:ca:37:e1:69:
         1e:7f:95:7a:bb:f6:2c:69:d0:9e:9e:52:03:70:70:e6:d9:01:
         71:a9:68:6f:80:4a:66:08:54:b3:5d:5a:fc:83:15:b3:0f:b4:
         3c:0e:48:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 05:02:12 2025 by rpki-client