Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
File:                     9-pxtubNBKVdrrDRWOBE3poSIWo.mft (raw, json)
Hash identifier:          HKuT+4YEVKIncM9u5TjZbqwx2Njq6QnFbMO9aVMTaQY=
Subject key identifier:   11:5E:F9:ED:2B:56:9F:80:47:87:54:1E:42:F5:22:6C:22:5B:B2:69
Authority key identifier: F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A
Certificate issuer:       /CN=A914976C/serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A
Certificate serial:       B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
Manifest number:          B3
Signing time:             Sat 19 Jul 2025 06:12:58 +0000
Manifest this update:     Sat 19 Jul 2025 06:12:58 +0000
Manifest next update:     Sat 26 Jul 2025 06:12:58 +0000
Files and hashes:         1: 9-pxtubNBKVdrrDRWOBE3poSIWo.crl (hash: YSYLOQKKH1Xvj4PtXdNSkTq8kHPIREHDnbgy4rYl3qY=)
                          2: D65DAE8A595C11EF8FABE750C4F9AE02.roa (hash: nYA6qJYLssodvPidYdiPlhElm9th4J64wlRbRyUbQK0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl
                          rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 06:12:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914976C, serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A
        Validity
            Not Before: Jul 19 06:12:58 2025 GMT
            Not After : Jul 26 06:12:58 2025 GMT
        Subject: CN=687b376a-f7ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bc:27:6e:d6:43:42:44:24:f7:2d:9a:e0:fc:
                    a3:cf:c8:14:e6:48:c2:15:35:7e:d7:d5:87:bd:ac:
                    7f:4b:6e:39:f6:b8:b4:c7:67:c6:08:fd:48:db:84:
                    0f:59:7e:62:d5:a3:e8:1f:af:5e:67:81:ab:74:89:
                    d4:c0:9b:1f:33:dc:77:9f:c4:de:bb:02:d3:6b:df:
                    01:46:7e:53:5f:f6:e1:63:46:50:1a:8f:71:b8:5d:
                    a1:36:43:1a:9f:b7:48:f7:c3:23:e8:b6:bf:45:80:
                    8d:5a:d0:7c:8c:9a:72:bd:e5:3f:b0:4b:18:a1:4d:
                    04:db:b7:e7:30:97:64:9f:c2:15:44:32:f5:43:37:
                    5d:1d:0d:05:15:76:f2:30:91:04:05:0a:c0:6c:99:
                    3b:39:e4:64:e0:6d:2b:ee:eb:e4:1a:cd:d2:90:a4:
                    8a:90:b7:d9:49:25:f3:ea:9c:7c:9e:f3:89:ec:d5:
                    7c:ad:fa:2e:05:d2:ce:53:57:8f:f4:3b:d1:31:9c:
                    c6:b8:0c:88:4b:72:fe:db:eb:db:54:af:cd:79:37:
                    f4:6b:9b:f1:e8:e0:0b:58:71:7e:fe:b3:3a:c0:39:
                    ed:07:9c:2e:9e:3c:78:a2:9c:0e:d9:3e:90:06:cc:
                    94:17:d3:59:3b:24:7c:f6:48:59:1c:0f:db:63:34:
                    70:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5E:F9:ED:2B:56:9F:80:47:87:54:1E:42:F5:22:6C:22:5B:B2:69
            X509v3 Authority Key Identifier:
                keyid:F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:a1:7b:7f:56:6b:13:6e:38:00:67:ba:76:c7:b5:31:af:d8:
         81:e7:52:e6:4e:07:cf:0a:18:61:d9:e0:1b:93:7e:34:8c:25:
         22:dc:f4:d4:f8:fd:a8:c3:4d:66:08:aa:5f:c4:fd:69:bf:28:
         33:0d:9b:d2:da:de:ca:ef:0c:2f:26:cf:58:0d:6b:d4:70:b7:
         9c:cd:11:81:1c:74:4d:2e:63:32:83:c8:f7:30:dc:16:88:c2:
         1e:85:be:79:05:e0:78:0d:9e:aa:78:bb:ab:ec:b5:13:ad:a4:
         ce:35:4e:49:dc:8f:c9:28:14:73:72:11:39:34:69:c9:04:6d:
         30:1c:4c:91:7a:ff:77:43:05:f2:46:30:8b:1e:10:fb:4c:67:
         ec:1b:c6:64:7e:54:38:13:3f:74:94:a3:40:90:a1:33:71:f1:
         87:b6:fb:0f:d6:2c:06:c5:3d:19:d1:6f:c8:9c:9f:65:d2:24:
         73:6c:51:98:a9:ac:7f:c3:c7:8d:c8:87:ca:58:f9:b9:6f:c0:
         04:00:0f:a3:88:13:16:32:5d:bb:55:7c:30:86:af:96:53:5a:
         df:f9:94:c8:1f:1b:33:0a:28:49:b5:b4:67:0e:7a:7e:c6:0c:
         a6:60:4b:38:97:94:6f:04:5b:51:f2:76:db:06:94:bf:ff:72:
         a9:b3:e0:73
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDk3NkMxMTAvBgNVBAUTKEY3RUE3MUI2RTZDRDA0QTU1REFFQjBEMTU4RTA0NERF
OUExMjIxNkEwHhcNMjUwNzE5MDYxMjU4WhcNMjUwNzI2MDYxMjU4WjAYMRYwFAYD
VQQDEw02ODdiMzc2YS1mN2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAubwnbtZDQkQk9y2a4Pyjz8gU5kjCFTV+19WHvax/S2459ri0x2fGCP1I24QP
WX5i1aPoH69eZ4GrdInUwJsfM9x3n8TeuwLTa98BRn5TX/bhY0ZQGo9xuF2hNkMa
n7dI98Mj6La/RYCNWtB8jJpyveU/sEsYoU0E27fnMJdkn8IVRDL1QzddHQ0FFXby
MJEEBQrAbJk7OeRk4G0r7uvkGs3SkKSKkLfZSSXz6px8nvOJ7NV8rfouBdLOU1eP
9DvRMZzGuAyIS3L+2+vbVK/NeTf0a5vx6OALWHF+/rM6wDntB5wunjx4opwO2T6Q
BsyUF9NZOyR89khZHA/bYzRwEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFe+e0r
Vp+AR4dUHkL1ImwiW7JpMB8GA1UdIwQYMBaAFPfqcbbmzQSlXa6w0VjgRN6aEiFq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTc2Qy84MzUwRDJCQzU5
NUMxMUVGOTE1OTYzNTBDNEY5QUUwMi85LXB4dHViTkJLVmRyckRSV09CRTNwb1NJ
V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzktcHh0dWJOQktWZHJyRFJXT0JFM3BvU0lXby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OTc2Qy84MzUwRDJCQzU5NUMxMUVGOTE1OTYzNTBDNEY5QUUwMi85LXB4dHViTkJL
VmRyckRSV09CRTNwb1NJV28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBMoXt/VmsTbjgAZ7p2x7Uxr9iB51LmTgfPChhh2eAbk340jCUi3PTU
+P2ow01mCKpfxP1pvygzDZvS2t7K7wwvJs9YDWvUcLeczRGBHHRNLmMyg8j3MNwW
iMIehb55BeB4DZ6qeLur7LUTraTONU5J3I/JKBRzchE5NGnJBG0wHEyRev93QwXy
RjCLHhD7TGfsG8ZkflQ4Ez90lKNAkKEzcfGHtvsP1iwGxT0Z0W/InJ9l0iRzbFGY
qax/w8eNyIfKWPm5b8AEAA+jiBMWMl27VXwwhq+WU1rf+ZTIHxszCihJtbRnDnp+
xgymYEs4l5RvBFtR8nbbBpS//3Kps+Bz
-----END CERTIFICATE-----
Generated at Sun Jul 20 15:10:50 2025 by rpki-client