Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
File:                     Ks6UC13DAzfS5UIXIhkauSOqdcc.mft (raw, json)
Hash identifier:          u9p/4sXIutA8HusGVfT34k2PfkYAVgk/pvfps7BxIBw=
Subject key identifier:   B0:D1:6D:E3:ED:E1:9A:F1:7F:88:39:4B:87:74:E6:6F:EB:A0:E6:2D
Authority key identifier: 2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7
Certificate issuer:       /CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
Manifest number:          0112
Signing time:             Wed 23 Jul 2025 05:11:09 +0000
Manifest this update:     Wed 23 Jul 2025 05:11:08 +0000
Manifest next update:     Wed 30 Jul 2025 05:11:08 +0000
Files and hashes:         1: Ks6UC13DAzfS5UIXIhkauSOqdcc.crl (hash: r8JpADmGlO8Sa/gPD1wmN/pW4l76etlzBDV4ulC9nJQ=)
                          2: 440FD944C56F11EE8FF5FF2FC4F9AE02.roa (hash: LYlNZimo/Kla2SAg6rJowkusOEeb0t8EqOyo/ewHEdM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl
                          rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 05:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138A9F, serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7
        Validity
            Not Before: Jul 23 05:11:08 2025 GMT
            Not After : Jul 30 05:11:08 2025 GMT
        Subject: CN=68806eec-dba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bf:7a:50:95:0a:01:26:d3:bc:70:14:07:ff:
                    88:95:1f:74:90:b9:4f:9e:8a:2a:15:82:93:89:92:
                    2f:d7:5f:67:49:c6:d5:25:a8:2e:e7:04:6a:e9:72:
                    60:72:fd:ac:ad:c9:f4:e5:e9:70:95:cd:25:af:ae:
                    c1:a2:83:94:c6:fe:e1:af:9f:5f:12:1a:f7:3f:00:
                    35:d9:cc:a5:2b:6e:21:c0:e8:e6:31:c6:d3:b8:87:
                    65:74:ed:1c:0b:c8:f4:42:9f:3d:ea:56:f8:3f:93:
                    2d:6f:bf:3a:32:71:b0:3b:37:de:a1:06:de:ac:b6:
                    20:2f:3e:35:dd:8e:ca:f3:b2:c6:ef:61:b1:e5:a4:
                    9c:9d:cc:2d:84:1d:aa:81:28:88:09:e3:9f:e8:45:
                    99:ca:fb:9c:8e:03:43:a6:01:79:ac:3c:98:2b:db:
                    9a:9a:6d:c5:94:90:fd:5e:28:5a:de:df:3f:23:02:
                    09:e3:fb:3d:ec:f1:34:69:03:22:07:e4:9f:30:67:
                    87:f3:b9:54:bf:27:57:5c:ef:11:1e:ef:e5:4a:9e:
                    b0:d7:34:bf:fb:b8:8a:70:bc:01:1b:00:0e:db:a1:
                    bb:86:ed:7b:b7:d7:ba:43:de:04:f3:ae:7c:e0:75:
                    ba:a0:3b:21:72:ae:3f:ac:e0:c2:27:1f:60:6c:d6:
                    70:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D1:6D:E3:ED:E1:9A:F1:7F:88:39:4B:87:74:E6:6F:EB:A0:E6:2D
            X509v3 Authority Key Identifier:
                keyid:2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:eb:0c:97:98:3e:fa:1a:15:40:3f:06:a6:80:93:2e:60:38:
         d6:67:fd:a4:24:2d:85:18:9c:ad:03:f3:2d:c3:7c:3d:74:e3:
         a7:b7:ff:92:7e:ae:a0:5c:d6:aa:0e:5b:c9:62:29:4b:3b:03:
         05:61:31:4e:a7:2a:49:2d:78:35:4f:f1:6d:77:2b:d5:e6:53:
         7b:37:54:31:4c:1e:98:47:61:8f:fe:4a:16:e4:36:9c:d1:e4:
         96:57:2b:88:79:0a:7d:31:b6:f1:5c:35:63:c6:a0:37:69:7b:
         6e:61:6a:9f:cd:a4:57:05:d0:67:72:ad:df:bf:9c:f3:3b:c5:
         00:40:7a:eb:85:4f:a5:15:a6:64:18:2b:87:65:e6:08:cb:73:
         b3:0a:8f:73:68:7b:a5:f3:a0:96:0f:f4:dd:67:e7:aa:b3:b6:
         af:8a:d6:d1:8d:d3:de:ad:e7:c6:d5:30:fb:db:8d:a8:55:b5:
         a8:99:1b:c7:bd:a6:7b:35:db:0d:96:fc:37:54:52:32:04:50:
         85:7f:28:e0:7e:fe:99:bc:ee:a3:36:cc:1b:66:d2:11:0e:3e:
         89:27:d2:43:68:19:b8:da:83:da:bd:43:d5:3d:ca:b9:85:53:
         6b:40:86:99:ae:e9:f4:05:1d:c7:cf:3b:a6:f9:cc:67:73:a0:
         ca:ff:a6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:22:39 2025 by rpki-client