Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft
File:                     R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft (raw, json)
Hash identifier:          oFFtq5kf43D2XiR59NfaaCdkBO6I4hV1RTVuXhuIW6c=
Subject key identifier:   E7:62:A4:42:6E:7A:57:42:EC:BD:6F:C9:F3:F0:88:4F:96:6B:BC:E3
Authority key identifier: 47:4B:F7:35:ED:28:F3:51:8B:CE:0A:C4:62:95:8B:EC:58:2C:D7:65
Certificate issuer:       /CN=A9166279/serialNumber=474BF735ED28F3518BCE0AC462958BEC582CD765
Certificate serial:       0B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft
Manifest number:          0A
Signing time:             Sat 19 Jul 2025 08:24:19 +0000
Manifest this update:     Sat 19 Jul 2025 08:24:19 +0000
Manifest next update:     Sat 26 Jul 2025 08:24:19 +0000
Files and hashes:         1: R0v3Ne0o81GLzgrEYpWL7Fgs12U.crl (hash: lQG1Lztnnv0K5Z1MPVKpD1eSWzWzSK6OtJyU3gUlP4Y=)
                          2: A7C3B19858CD11F083D7B477C4F9AE02.roa (hash: 8KYhw05nY7mchDEJfru3ck598S7WS2QrgetgJkL5mmM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.crl
                          rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 08:24:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166279, serialNumber=474BF735ED28F3518BCE0AC462958BEC582CD765
        Validity
            Not Before: Jul 19 08:24:19 2025 GMT
            Not After : Jul 26 08:24:19 2025 GMT
        Subject: CN=687b5633-7361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c7:46:d5:3a:4b:59:4d:cd:15:c3:08:81:60:
                    04:6e:1a:8d:f0:a7:9f:6d:81:fe:74:f0:2e:d4:a5:
                    1c:06:55:35:c7:c5:b2:9e:8b:41:8c:12:69:58:d4:
                    0d:fa:94:bd:7d:c5:b5:8f:fd:e1:d1:0a:3a:21:dc:
                    c0:80:fd:ce:10:bb:1b:0d:fb:09:10:3d:0a:a8:92:
                    2f:e6:1d:fb:2d:eb:f4:12:29:1f:e3:ff:07:2f:cd:
                    1b:b1:29:bf:95:c6:e8:50:9b:41:c6:fb:85:0e:b8:
                    96:e6:81:3d:cb:ec:a0:68:af:39:c6:9b:d3:3d:81:
                    0c:c8:6f:6d:c2:f0:09:a6:57:99:4f:b5:1b:25:bb:
                    23:c2:82:60:03:1a:42:0d:0e:9d:05:62:01:84:61:
                    45:55:65:97:8c:57:81:6f:49:d9:e1:a8:c0:c0:ee:
                    3e:a7:18:80:05:7e:a6:6f:1b:ac:7b:8e:82:29:a8:
                    aa:cb:61:34:5f:42:0e:53:80:17:6a:dd:e9:f0:26:
                    b8:90:b4:92:74:28:a7:04:87:1a:65:9f:1a:20:9b:
                    3a:f6:df:21:c8:ef:2a:c1:fd:0e:4b:d3:bd:c5:7f:
                    b3:61:84:7b:05:69:89:a4:ec:a8:84:da:db:79:f2:
                    e4:a7:93:05:4c:79:24:33:81:88:a6:66:1b:d1:dd:
                    e9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:62:A4:42:6E:7A:57:42:EC:BD:6F:C9:F3:F0:88:4F:96:6B:BC:E3
            X509v3 Authority Key Identifier:
                keyid:47:4B:F7:35:ED:28:F3:51:8B:CE:0A:C4:62:95:8B:EC:58:2C:D7:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:3f:2f:50:49:e7:e0:21:38:b2:cc:74:ed:80:f6:80:fd:6f:
         33:e6:01:92:c0:f7:b4:48:21:6f:12:a2:81:f6:db:ed:7b:4d:
         3b:0f:8b:82:31:ea:4a:0b:ea:3b:24:ec:69:07:ca:fb:74:d6:
         0a:a7:37:a8:a6:1e:9c:35:bd:57:0d:01:4c:ec:51:80:de:5d:
         23:ca:7b:24:55:29:9c:b4:93:93:25:0b:d9:d0:05:1a:ad:79:
         0c:0e:ac:78:ea:ed:e8:2b:b3:2b:41:b3:79:c0:27:6a:68:28:
         72:12:6d:a4:3d:46:b2:4a:45:bb:ed:f1:1e:e0:0e:00:96:94:
         0c:c5:c3:85:de:ff:12:30:3f:c7:05:b3:12:1a:68:fb:36:12:
         99:94:c2:2e:d1:c4:bc:52:99:83:ce:9d:df:a4:be:ff:a1:f5:
         e2:a2:f4:ec:6f:8d:f6:e7:97:c8:05:eb:af:5b:96:bb:ac:57:
         84:f4:94:7f:d0:b8:9d:46:4d:a4:c3:cd:5e:7b:34:a7:ce:19:
         9b:9a:8b:c9:cf:88:9e:1b:67:35:71:d8:49:e1:ea:94:54:57:
         0a:f2:a3:8a:92:6c:b0:53:dc:ca:ed:bf:3e:cb:35:dd:1f:4b:
         15:35:b5:e6:5d:18:3c:01:47:8d:81:75:80:9e:7b:d2:24:aa:
         e8:3f:4c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:50:10 2025 by rpki-client