Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.mft
File:                     m1FsBRZinvsTjrDmhbBboA6_Tn8.mft (raw, json)
Hash identifier:          lZ0sK489/ApDNEWJRrLkxWYGzIf36veXMvpcXZzryqw=
Subject key identifier:   1F:40:4C:E2:8A:42:F6:B9:9B:78:6E:CF:CE:BE:11:6B:B2:AC:F2:1F
Authority key identifier: 9B:51:6C:05:16:62:9E:FB:13:8E:B0:E6:85:B0:5B:A0:0E:BF:4E:7F
Certificate issuer:       /CN=A9193552/serialNumber=9B516C0516629EFB138EB0E685B05BA00EBF4E7F
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1FsBRZinvsTjrDmhbBboA6_Tn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.mft
Manifest number:          C4
Signing time:             Mon 21 Jul 2025 05:56:41 +0000
Manifest this update:     Mon 21 Jul 2025 05:56:40 +0000
Manifest next update:     Mon 28 Jul 2025 05:56:40 +0000
Files and hashes:         1: m1FsBRZinvsTjrDmhbBboA6_Tn8.crl (hash: N0f8dLypVrwUa/Xf3uR3T4vCLoddxeEAdTEk1qF7Cn8=)
                          2: 8426E9543A8211EF9F1ED16FC4F9AE02.roa (hash: Cmiqcg21C+LyhA2gAp/ZQEO6k8THpOIRSGDyZ2gTNpQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.crl
                          rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1FsBRZinvsTjrDmhbBboA6_Tn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 05:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193552, serialNumber=9B516C0516629EFB138EB0E685B05BA00EBF4E7F
        Validity
            Not Before: Jul 21 05:56:40 2025 GMT
            Not After : Jul 28 05:56:40 2025 GMT
        Subject: CN=687dd698-b49b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:70:0d:28:fc:a7:cb:0f:8a:e1:71:55:21:fc:
                    b9:37:6e:1c:fd:3d:28:13:0d:b0:cc:d8:bd:59:b3:
                    18:3d:9a:8c:9e:6c:92:87:c1:f4:61:a6:58:88:e0:
                    18:ad:cb:59:ce:54:d0:c1:0e:56:65:af:2f:2f:6e:
                    30:f6:3c:52:f1:08:f5:9a:a1:8f:bc:e0:b0:40:f0:
                    58:d6:b9:fe:88:ae:d6:c0:9a:d9:10:c8:5e:08:7c:
                    d1:e4:64:15:f8:ca:9d:05:0c:da:43:7a:70:92:32:
                    df:c7:b0:a5:3d:36:19:9e:84:3d:db:19:fa:40:2f:
                    04:d8:0e:a8:a6:dd:b8:6c:bb:4d:f9:45:b0:32:b2:
                    24:70:55:72:45:a1:a3:9a:89:59:21:eb:d8:b4:69:
                    0b:26:7e:c0:af:93:2f:c7:a8:6b:74:87:6b:12:75:
                    90:cc:8c:3d:32:86:4d:e6:75:96:4b:29:fb:fb:a3:
                    6c:f5:f7:39:b6:a4:47:e4:ca:28:5c:79:33:95:cf:
                    29:9b:8a:33:6b:71:01:07:e6:2d:d9:e5:49:e7:05:
                    b6:cd:7a:6c:7c:6b:ad:6e:d2:8c:eb:9b:00:5e:fd:
                    65:9b:7f:10:39:e4:3a:e6:04:00:98:38:88:2a:a6:
                    d6:ea:c9:c5:c5:97:ef:01:a1:80:69:cd:76:55:85:
                    87:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:40:4C:E2:8A:42:F6:B9:9B:78:6E:CF:CE:BE:11:6B:B2:AC:F2:1F
            X509v3 Authority Key Identifier:
                keyid:9B:51:6C:05:16:62:9E:FB:13:8E:B0:E6:85:B0:5B:A0:0E:BF:4E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1FsBRZinvsTjrDmhbBboA6_Tn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:60:1a:00:b1:e4:c8:c1:06:19:49:13:66:04:02:35:f9:fe:
         f1:08:dc:47:27:4c:cf:37:aa:09:c8:b2:75:c6:23:0f:e8:94:
         a0:cc:e6:18:99:58:f9:03:82:35:29:e7:a5:e3:86:d6:71:f3:
         1c:56:4c:f6:ed:2b:64:67:16:c4:00:ab:4b:55:93:d9:92:58:
         d7:33:93:31:13:62:4d:8b:3c:55:0a:47:7d:f3:b6:fd:c0:8d:
         14:86:9c:d7:5d:02:54:87:06:44:32:35:5e:42:e4:e6:bb:20:
         63:67:7e:42:33:e8:55:c2:a1:fa:90:06:aa:7d:37:3c:78:e6:
         a1:a6:75:f9:cf:73:6c:74:32:61:2f:9a:ee:e4:c3:e3:c0:1c:
         d1:8f:85:c7:a2:40:56:74:44:26:8d:8e:bb:2a:b9:fa:08:73:
         4b:f6:e4:d7:c2:55:2d:5c:2b:df:62:2b:83:fc:3e:e8:85:d1:
         98:e0:bc:b1:db:75:f3:a4:b6:f1:99:46:2e:49:bb:81:18:01:
         c7:a0:ad:3e:02:77:05:77:80:87:ee:56:56:1b:13:18:ef:c2:
         b6:86:d2:c3:f1:34:b8:63:6e:26:8f:c6:b5:ca:5f:93:ee:cc:
         8e:d0:5d:29:07:54:05:f6:be:f4:74:5e:e6:54:e6:7f:80:54:
         55:78:21:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 01:33:23 2025 by rpki-client