Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
File:                     Psg0IE1rqvmRQMA712IRRcB7umI.mft (raw, json)
Hash identifier:          58aiSSXxdDflikHu+Z6zvstZVvGDXRS//xNIJeC4Dus=
Subject key identifier:   C9:20:41:DF:13:B8:7C:0C:71:CE:77:BF:D2:68:7D:0D:9D:C3:10:37
Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
Certificate issuer:       /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Certificate serial:       34B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
Manifest number:          34A8
Signing time:             Thu 24 Jul 2025 15:10:23 +0000
Manifest this update:     Thu 24 Jul 2025 15:10:23 +0000
Manifest next update:     Thu 31 Jul 2025 15:10:23 +0000
Files and hashes:         1: Psg0IE1rqvmRQMA712IRRcB7umI.crl (hash: oDdWzYRisYbrBcndIQ6Gq/LdXZBrMWl/LQy3cEzijXI=)
                          2: E7DDE5B8682811EB8D635520C4F9AE02.roa (hash: u3o7AHzkAWjpm//p/0D10Rom5wmEBlx/qRmPwbhLS5Y=)
                          3: E73006AA682811EB8D635520C4F9AE02.roa (hash: /iYEOgQAhfI0KK0K51Ux9lFp8lKBTgd9K9F6YiH5y0o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
                          rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 15:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13493 (0x34b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196D24, serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
        Validity
            Not Before: Jul 24 15:10:23 2025 GMT
            Not After : Jul 31 15:10:23 2025 GMT
        Subject: CN=68824cdf-6972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:eb:63:81:dc:1b:cf:4f:f5:c8:54:ff:30:62:
                    5f:1e:2d:23:bb:1d:2b:48:13:47:ce:cb:c5:23:14:
                    24:d8:83:16:d3:60:de:01:43:1c:dd:45:ba:30:8f:
                    cf:69:d1:d9:e7:9e:ed:1b:6b:54:30:a4:8b:32:39:
                    8d:c8:34:65:6d:69:c4:ec:77:9e:3b:09:ba:3f:47:
                    ff:39:28:5c:18:56:5b:76:61:c9:68:16:5a:49:1a:
                    3f:19:66:5b:a2:3b:1a:b0:0d:25:c3:19:8f:61:be:
                    01:59:03:c3:23:7b:a9:80:fc:0e:c7:41:98:83:73:
                    1b:f6:a5:62:bc:c3:92:72:5f:87:b3:64:d4:9b:49:
                    24:95:2b:c8:d8:76:56:42:8f:29:dc:32:df:5e:41:
                    cb:1e:66:ef:2a:c0:86:7c:c3:67:91:51:60:3d:92:
                    6f:8d:fb:43:6d:0b:68:d3:75:b5:5b:6d:07:64:10:
                    a9:bc:3a:d3:3a:16:33:ff:ee:53:0e:b9:26:e7:5f:
                    53:9b:3c:b2:18:ec:83:73:29:6f:c9:d2:08:e1:b6:
                    d6:2f:9d:d4:7c:4e:10:6b:9e:3a:94:d0:f3:7f:80:
                    68:ba:93:73:c1:a7:38:5e:38:c4:35:56:98:23:b7:
                    9f:49:78:1e:93:89:ba:cb:dd:6b:13:6a:8c:75:92:
                    20:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:20:41:DF:13:B8:7C:0C:71:CE:77:BF:D2:68:7D:0D:9D:C3:10:37
            X509v3 Authority Key Identifier:
                keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:67:d5:58:c1:d9:a2:b6:12:58:ef:d9:87:84:82:65:ce:19:
         0e:ce:99:79:e5:db:3f:d1:b6:58:8f:35:91:21:5f:1b:aa:71:
         62:2b:41:d3:02:30:1f:9f:25:8c:ed:b9:a2:54:13:f9:4d:7c:
         82:98:2d:ef:7e:50:cc:06:0c:10:ed:f9:dc:58:5e:ed:96:c2:
         71:a7:86:c8:ce:8a:80:96:1a:39:78:84:9a:c8:57:6b:7e:c6:
         a1:49:ae:2e:5d:66:98:73:2b:0f:7d:15:32:7f:f8:af:ea:09:
         9f:63:28:7e:ba:73:dd:73:11:2d:f9:e1:b2:88:ed:ff:9c:b4:
         f1:a4:dc:ef:39:55:29:a3:69:b5:62:a5:96:cc:dc:7d:a5:0c:
         c6:da:28:8b:8e:bd:86:ab:10:73:a5:e9:c7:a1:0b:ad:58:ba:
         32:bd:0c:95:9d:97:82:6d:ec:1a:4c:44:55:f2:14:3c:74:22:
         01:34:d2:99:40:f2:29:2a:b2:90:e2:44:b2:13:66:57:9b:d0:
         41:af:bc:22:fc:b4:2d:eb:eb:0c:13:66:3a:f3:ac:2b:45:1c:
         e5:5a:4d:5e:4a:44:df:54:59:ad:a0:d8:b0:2e:6a:db:d8:1d:
         3f:9f:33:8e:32:24:af:55:7e:d6:b5:db:03:d6:5a:55:09:7e:
         72:6b:b8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 04:00:12 2025 by rpki-client