Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
File:                     aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft (raw, json)
Hash identifier:          iTTSY/xZbAyUCWP7ZEGALio3qcaQ8HHT0dVjXg9GbXM=
Subject key identifier:   63:78:D4:AC:5E:F8:AC:79:08:3E:C3:45:1E:6E:E3:91:A7:BD:1E:BD
Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
Certificate issuer:       /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Certificate serial:       08C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
Manifest number:          0860
Signing time:             Fri 18 Jul 2025 21:15:25 +0000
Manifest this update:     Fri 18 Jul 2025 21:15:25 +0000
Manifest next update:     Fri 25 Jul 2025 21:15:25 +0000
Files and hashes:         1: aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl (hash: SVDmhPYYQcApj/van/pZ8F/iGQxvMkn3HrQtjbjnluE=)
                          2: 70F51BEE4B0D11EF94975151C4F9AE02.roa (hash: 5OJq3TQL6UcD1e0FTm6+f4tFRojNv3dxN2hOmwh/XMU=)
                          3: 14C388C2114311F0B3944E67C4F9AE02.roa (hash: mTf8cQmCDCOr2IAAbGwT5DT/HAjoFjlHGakTn87Xya0=)
                          4: 18F343922A5711EBB59D6526C4F9AE02.roa (hash: 67FA0fogoOEO8ZhRY0Z7X/jNdUDR2kpHHHAZ7zc0DNU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
                          rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 21:15:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2241 (0x8c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199197, serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
        Validity
            Not Before: Jul 18 21:15:25 2025 GMT
            Not After : Jul 25 21:15:25 2025 GMT
        Subject: CN=687ab96d-3742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:69:44:cb:54:4f:63:5e:56:8f:a1:32:68:b2:
                    45:b8:1c:a9:1f:b5:68:ec:82:10:dc:cc:07:e2:7a:
                    98:06:8b:11:79:27:38:c8:40:37:c3:25:88:68:4f:
                    e7:6b:6d:d6:a3:96:6f:00:b7:05:6a:90:bc:87:19:
                    c6:73:3f:45:9a:dc:e5:8b:a1:54:f2:d7:99:9e:d2:
                    c0:15:e8:71:44:c5:ae:be:58:b5:af:90:4f:5f:f0:
                    6b:24:4e:43:93:a7:8c:c6:84:7b:9c:8d:29:3e:93:
                    1d:9f:cf:2d:56:21:e5:8a:03:5b:c6:53:06:47:65:
                    75:35:68:a6:2c:7a:f6:89:7a:88:f6:2c:39:b4:68:
                    f8:0a:5d:5d:23:6e:99:4a:c5:c7:79:5f:a5:c4:0e:
                    72:cd:e4:6c:a7:2d:dd:8a:85:2c:4c:de:25:a9:cc:
                    cd:ce:80:67:e1:7f:fa:22:7a:4e:3a:82:76:c5:ab:
                    fd:b9:b6:a7:5d:c8:34:2a:0b:c0:10:a9:1a:71:e7:
                    f3:d1:58:70:b0:a8:0b:4a:60:e5:73:ab:ab:27:0c:
                    e3:1d:e0:b3:00:02:54:5c:23:e0:8f:17:66:11:a7:
                    78:c7:be:0c:2a:50:f2:df:7e:74:b8:83:4c:00:93:
                    ea:8a:c8:94:14:6f:6d:c6:a2:3a:0c:f1:5e:bb:6b:
                    fe:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:78:D4:AC:5E:F8:AC:79:08:3E:C3:45:1E:6E:E3:91:A7:BD:1E:BD
            X509v3 Authority Key Identifier:
                keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:8b:6a:69:04:df:89:5e:82:6a:e7:7a:96:37:ff:a0:88:7f:
         44:29:ad:85:88:00:50:cc:bd:f6:5e:35:d5:15:f7:58:83:91:
         a6:17:49:2e:aa:f0:c9:4e:5c:32:d4:20:aa:47:7f:92:72:6c:
         f6:86:50:f5:fb:2a:9e:24:80:43:48:8a:30:b3:4c:72:d9:80:
         34:19:9c:28:3c:5c:51:2f:c8:dc:f3:5b:bb:1e:12:65:81:8d:
         9c:fc:d5:a6:33:f3:a1:1c:a5:cc:a9:8a:d3:51:a8:3c:4f:79:
         79:f3:fa:d7:60:06:bd:a4:fa:8b:e6:d8:e6:87:25:03:e3:04:
         90:6e:30:11:e2:c2:3c:57:90:ba:01:68:7b:3f:9f:16:a5:3c:
         77:93:24:09:1c:a8:ba:bc:04:28:de:ca:9c:6b:22:83:6f:d0:
         81:de:9c:0c:82:8a:01:17:7c:09:8f:1e:2c:e3:5a:5a:0c:4d:
         94:53:0a:5c:72:25:46:0e:ab:5f:71:81:ba:ae:75:e2:92:85:
         f7:58:1a:ed:df:59:03:40:a3:5d:b5:a2:a2:49:57:cb:16:39:
         5f:ba:de:9a:a2:fe:da:ec:f6:68:e4:13:bc:18:74:46:0f:81:
         40:3e:41:f4:1e:a4:2a:c6:5b:89:47:d1:8e:b8:6f:75:67:eb:
         7b:05:d0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:15:52 2025 by rpki-client