Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
File:                     Ks6UC13DAzfS5UIXIhkauSOqdcc.mft (raw, json)
Hash identifier:          UIQWpZKZq7Jr7vW6KlYvXaf+QYJzaC9SzAfpokMK25Y=
Subject key identifier:   D9:EF:25:66:B3:9A:5D:3E:93:46:2A:D6:E6:B8:9E:7C:9B:59:30:53
Authority key identifier: 2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7
Certificate issuer:       /CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7
Certificate serial:       0114
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
Manifest number:          0111
Signing time:             Mon 21 Jul 2025 05:02:31 +0000
Manifest this update:     Mon 21 Jul 2025 05:02:30 +0000
Manifest next update:     Mon 28 Jul 2025 05:02:30 +0000
Files and hashes:         1: Ks6UC13DAzfS5UIXIhkauSOqdcc.crl (hash: DANpE6rESv50C9SlSE3JdVeonytLrQae+1loDjAiK+k=)
                          2: 440FD944C56F11EE8FF5FF2FC4F9AE02.roa (hash: LYlNZimo/Kla2SAg6rJowkusOEeb0t8EqOyo/ewHEdM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl
                          rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 05:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138A9F, serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7
        Validity
            Not Before: Jul 21 05:02:30 2025 GMT
            Not After : Jul 28 05:02:30 2025 GMT
        Subject: CN=687dc9e7-95f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c3:9a:cb:3e:33:ed:97:40:78:0e:66:2c:dd:
                    a5:40:3f:6d:d2:c1:8f:40:37:9a:25:90:55:ad:71:
                    a0:de:fd:cb:f7:32:12:0b:97:a1:54:5d:f8:1a:df:
                    45:41:e2:9d:74:47:47:e0:bb:e2:4e:65:86:d1:de:
                    78:16:8c:05:00:cd:5c:ad:2a:af:59:8e:9a:2e:69:
                    54:04:ed:d2:fb:17:cb:0d:ca:ba:a1:84:60:a7:c9:
                    94:60:c8:4c:3a:34:6f:de:67:09:16:ad:6c:49:26:
                    94:4f:93:44:8c:9b:60:3b:91:ba:e6:3e:86:d0:76:
                    96:d0:ed:f9:15:0e:5b:ae:1c:78:d4:d3:66:60:01:
                    9a:26:5d:ac:49:1f:ab:16:38:24:7b:68:63:f8:a4:
                    cb:fc:c6:48:b8:59:71:92:72:0c:27:54:85:6c:0a:
                    68:b3:31:12:4e:73:d9:92:31:a9:2c:c0:ad:59:1c:
                    06:f6:65:bc:9e:46:10:8e:23:10:9e:67:4f:7a:ed:
                    cd:6e:7b:ae:ba:a2:7f:4f:91:f1:42:9a:f5:1e:42:
                    b3:6d:2b:9d:88:5f:bc:47:e2:10:f1:de:a0:5c:a6:
                    98:c0:85:4c:67:3c:5f:c1:d7:ab:fb:91:5e:65:5f:
                    cd:bb:1b:08:c8:63:11:51:02:22:c6:9f:d8:f3:1e:
                    8e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EF:25:66:B3:9A:5D:3E:93:46:2A:D6:E6:B8:9E:7C:9B:59:30:53
            X509v3 Authority Key Identifier:
                keyid:2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:43:e6:ed:b5:1e:5e:75:1a:57:8d:f6:36:93:bd:96:02:f4:
         9a:fd:77:a5:f9:4e:c6:f9:4b:c8:a8:0d:17:27:40:a0:1e:68:
         de:f6:95:d1:15:98:3a:5e:20:03:1c:09:32:9e:2f:c2:6b:67:
         b4:3f:d1:c2:85:55:b5:8c:b1:a6:50:d4:21:b1:7c:d3:53:70:
         08:9c:dd:ae:07:5c:92:84:90:df:d6:9c:cc:65:e0:33:f6:83:
         f7:dc:76:be:eb:75:b0:c0:2c:22:45:0c:78:b9:c3:ae:a9:f2:
         da:2d:f9:ef:f1:8f:44:3c:64:d4:a0:36:1f:09:6b:8b:24:5a:
         28:91:f0:57:a5:e2:11:05:78:f1:f0:0c:07:f9:a3:fe:88:f4:
         0f:cb:54:60:4a:45:98:dc:c7:d4:d1:e3:e7:55:f0:cc:70:fe:
         f0:f5:1a:48:38:16:31:ab:af:58:05:42:2c:1e:8c:00:47:1b:
         86:95:a5:e9:71:4b:b1:3d:b4:70:b3:b7:c1:a8:bb:dc:63:2a:
         14:e9:56:ca:ea:7f:b4:1a:cc:bc:4d:6f:c5:9d:6f:ef:b9:fa:
         30:47:f4:f3:92:6b:e5:86:5e:2f:17:e0:46:60:90:5f:fe:86:
         ca:ba:3a:ee:ac:f7:6d:f5:b9:fc:21:19:24:57:d4:f6:7c:9a:
         f8:90:4c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:21:19 2025 by rpki-client