Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
File:                     -Fr9bnRbCjR8ppbujrwWfQikT1Y.mft (raw, json)
Hash identifier:          MfHOXMoSa+gnjm0Y4RQRXFps7y1aNbsngohBgj2glqQ=
Subject key identifier:   C0:55:E6:0A:EE:E4:7E:1F:F5:72:55:BD:79:03:52:B3:2C:15:E2:64
Authority key identifier: F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56
Certificate issuer:       /CN=A9192B84/serialNumber=F85AFD6E745B0A347CA696EE8EBC167D08A44F56
Certificate serial:       B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
Manifest number:          AF
Signing time:             Sat 19 Jul 2025 06:17:34 +0000
Manifest this update:     Sat 19 Jul 2025 06:17:34 +0000
Manifest next update:     Sat 26 Jul 2025 06:17:34 +0000
Files and hashes:         1: -Fr9bnRbCjR8ppbujrwWfQikT1Y.crl (hash: ZGxCu0ONSpv7DDkfAYcEj5IWe5R1w8PTQ9Si0TWg2ok=)
                          2: 4419BD7A5BA011EFB239695EC4F9AE02.roa (hash: KXezgGFWbIUkw3XjH1WWu+jwoNxTjSoHBx4zCxaN7e4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl
                          rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 06:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192B84, serialNumber=F85AFD6E745B0A347CA696EE8EBC167D08A44F56
        Validity
            Not Before: Jul 19 06:17:34 2025 GMT
            Not After : Jul 26 06:17:34 2025 GMT
        Subject: CN=687b387e-0148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:48:ec:32:9e:76:9c:0e:df:9a:a8:bf:07:23:
                    d5:3f:60:62:58:57:f8:85:2c:1f:d5:e6:a2:a7:10:
                    e8:45:95:65:02:02:87:3d:3d:d1:59:17:fc:7c:24:
                    75:31:a5:c9:2a:bd:01:97:22:32:6b:46:90:19:36:
                    1a:5f:f9:a5:46:35:13:13:63:d8:58:e5:2d:1c:31:
                    96:a8:b4:96:5e:da:84:69:02:4e:05:0f:55:ec:fb:
                    b8:f9:4b:db:11:1a:6a:08:fd:cd:a3:95:5c:07:20:
                    7b:ec:0d:23:ce:a3:c3:0a:af:17:81:0e:ef:e7:11:
                    c8:fe:89:2c:6d:1a:ae:fb:d2:ff:cf:89:eb:1b:d5:
                    17:84:e6:a1:02:d1:ed:86:bd:a1:ad:3a:6d:95:d9:
                    af:80:e0:c2:10:72:93:42:fc:46:48:cc:3c:bf:5d:
                    69:f3:f3:d5:01:cd:a9:42:a6:8a:ec:e5:5a:7e:90:
                    d9:48:8f:40:f7:2c:38:db:4d:5a:1c:7b:5d:98:19:
                    ef:a8:f7:74:67:81:7f:0c:f2:46:b5:52:8b:cb:1f:
                    6d:3c:dd:fa:b4:a2:06:ab:88:e4:8c:b7:bd:4e:3d:
                    ae:bf:f4:0e:61:67:33:0a:e6:b7:d9:16:05:56:0c:
                    fc:94:6f:ee:cf:12:5f:9d:e3:f5:9a:eb:bd:cb:70:
                    35:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:55:E6:0A:EE:E4:7E:1F:F5:72:55:BD:79:03:52:B3:2C:15:E2:64
            X509v3 Authority Key Identifier:
                keyid:F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d3:3d:5d:3a:a6:f2:cf:ed:52:62:12:30:de:1d:7e:f6:ff:
         fc:8e:eb:7b:3a:5b:46:e8:8d:21:f4:0c:23:2e:35:e4:44:88:
         12:c3:70:0a:08:31:07:21:95:11:82:89:c9:3a:27:b4:4a:f7:
         ac:83:85:a7:81:03:b1:43:fd:4b:6f:73:ab:fa:77:cb:d9:3a:
         c3:93:e7:b7:88:70:38:91:6e:c7:3d:77:04:2b:2c:e5:51:86:
         65:2d:52:cd:3c:33:c7:ab:ee:42:d1:15:15:a4:87:02:f7:33:
         bb:8d:11:52:94:40:5c:ad:5d:f6:25:9a:37:3d:75:b5:9f:dc:
         65:8d:17:a2:f4:bb:97:e1:0b:e4:d2:f6:e1:f1:b8:2d:48:c6:
         0b:10:79:80:ca:71:15:a5:00:af:be:20:58:ff:f4:b2:8c:a2:
         9a:31:0e:29:c4:62:20:60:b1:db:5e:b3:8d:68:2b:cc:2c:db:
         12:b0:8d:58:64:c8:ae:6f:e2:d3:cd:57:3c:8c:cf:77:00:07:
         1a:8d:61:11:c4:38:33:7f:0a:42:f9:ee:de:82:eb:18:bc:f0:
         96:7f:cd:37:18:d7:d3:8e:25:95:82:0b:e6:48:60:eb:b6:b7:
         9f:a6:e6:16:33:07:2a:1a:07:39:cd:b3:8a:a2:60:da:a6:2c:
         bc:62:91:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 15:03:45 2025 by rpki-client