Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft
File:                     svBcLOw1UNLTyetRODn0egAqhy4.mft (raw, json)
Hash identifier:          Q5zIhLNQZfTfy3ZkxCeDBCJ37DtjWbMgOknWXCE5MrY=
Subject key identifier:   9D:8A:40:6D:81:A7:C7:27:F9:CA:6C:D4:1F:0A:D7:D8:6E:96:60:4C
Authority key identifier: B2:F0:5C:2C:EC:35:50:D2:D3:C9:EB:51:38:39:F4:7A:00:2A:87:2E
Certificate issuer:       /CN=A9172D88/serialNumber=B2F05C2CEC3550D2D3C9EB513839F47A002A872E
Certificate serial:       03D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft
Manifest number:          03CD
Signing time:             Fri 25 Jul 2025 01:00:39 +0000
Manifest this update:     Fri 25 Jul 2025 01:00:38 +0000
Manifest next update:     Fri 01 Aug 2025 01:00:38 +0000
Files and hashes:         1: svBcLOw1UNLTyetRODn0egAqhy4.crl (hash: VTkJmPspqlOiKembln2XQ9LYmZcfuWr5MLawNhoCDMI=)
                          2: D118AD20820911EDAC2FD360C4F9AE02.roa (hash: ICtN0AhdlHgfYIx82KgCcqvbtFC2Nt85yrH3EgkUFWk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.crl
                          rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 01 Aug 2025 01:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 979 (0x3d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172D88, serialNumber=B2F05C2CEC3550D2D3C9EB513839F47A002A872E
        Validity
            Not Before: Jul 25 01:00:38 2025 GMT
            Not After : Aug  1 01:00:38 2025 GMT
        Subject: CN=6882d737-e2f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0b:c8:9b:b3:49:94:75:c9:aa:36:e7:3c:0a:
                    52:e4:5a:15:a1:71:ec:dd:2c:db:ca:01:ea:a7:ab:
                    34:36:dc:35:79:b1:39:de:ad:6b:76:31:29:83:ae:
                    12:db:35:a3:d6:6f:73:2a:53:9f:50:f8:f1:ca:f1:
                    ba:d1:64:18:99:9c:21:9f:fc:6c:2d:dc:80:6a:df:
                    b5:08:92:f4:3e:c4:23:aa:08:ea:88:b2:90:8a:2f:
                    00:53:3c:5e:07:dd:6d:43:39:a5:ee:db:58:4c:f6:
                    00:15:4d:38:08:e0:96:69:5a:19:8f:f0:2d:1f:c2:
                    31:81:87:bc:26:fb:85:b6:4c:1a:5e:f7:d2:dd:f4:
                    ea:bf:82:16:5c:7a:01:85:1a:d4:80:94:22:13:d8:
                    39:e5:0c:15:f4:66:3d:73:16:61:22:17:74:50:96:
                    7a:77:57:1f:f2:2e:05:27:16:b9:2b:87:48:7b:b7:
                    18:56:84:8e:ad:9b:67:00:a3:4d:c3:9d:8a:38:85:
                    61:86:0f:6b:d4:2b:01:16:12:85:c5:9e:ff:d2:da:
                    8f:b8:53:55:91:71:70:f9:a0:0a:80:fa:da:16:54:
                    ca:50:ff:82:39:22:ba:61:f0:37:5c:f4:b3:71:56:
                    3c:28:01:ad:51:34:75:18:dc:5a:f3:f5:b2:98:79:
                    e9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8A:40:6D:81:A7:C7:27:F9:CA:6C:D4:1F:0A:D7:D8:6E:96:60:4C
            X509v3 Authority Key Identifier:
                keyid:B2:F0:5C:2C:EC:35:50:D2:D3:C9:EB:51:38:39:F4:7A:00:2A:87:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svBcLOw1UNLTyetRODn0egAqhy4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D88/F1B7EABA93AC11ECB67A3152C4F9AE02/svBcLOw1UNLTyetRODn0egAqhy4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:15:ba:cc:92:4e:bb:ce:f1:4f:6a:97:2c:83:0b:12:f1:d6:
         21:39:b1:ca:8f:9c:25:ce:8f:1d:9c:61:bd:ff:af:43:66:6b:
         0f:20:f6:45:27:eb:ae:80:24:eb:74:98:8b:6a:f6:75:76:47:
         ed:ed:ce:f2:5e:8d:49:ed:1c:8b:ec:7c:83:3d:8e:5f:87:bb:
         19:b3:b6:80:3b:3a:f3:59:67:d0:e3:20:ff:c3:9e:76:41:ed:
         24:0f:14:ea:57:f6:fb:c7:22:8d:9d:a9:1c:d0:aa:ca:2b:d6:
         cc:c2:18:47:54:92:ce:c9:6d:33:07:f5:02:f5:08:6c:0b:ed:
         f8:95:5a:6f:29:63:b1:6a:c3:f5:2b:bb:d9:39:6d:a3:23:19:
         4d:50:23:31:26:53:b6:29:b5:26:83:7d:c7:b8:71:e5:5a:5e:
         ad:75:dc:d4:65:2d:7c:e4:f0:ca:ab:0f:ee:9b:54:a8:c6:c2:
         e6:31:35:f5:4b:46:5c:8a:a4:83:b0:e0:e0:3b:ce:1d:dd:ba:
         14:21:1a:4f:8b:0f:c5:0c:0c:86:a2:64:c6:1a:0c:16:4d:74:
         21:ae:e5:07:28:c4:2c:ef:82:f8:ee:e2:13:66:6d:23:88:6e:
         c2:be:e8:74:65:82:cf:e2:33:52:3b:ff:37:b4:f7:5d:7b:6d:
         c5:68:a5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 16:57:31 2025 by rpki-client