Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
File:                     kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft (raw, json)
Hash identifier:          1D0UKgxYm/QicB543nhIAYPArm9wog3aUsQgMBMrBcI=
Subject key identifier:   FB:EC:AE:E7:B0:56:2B:AA:3B:EB:56:93:D5:7B:8C:8E:5F:1E:E8:0A
Authority key identifier: 92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18
Certificate issuer:       /CN=A919B883/serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
Certificate serial:       09AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
Manifest number:          09A1
Signing time:             Thu 24 Jul 2025 20:12:30 +0000
Manifest this update:     Thu 24 Jul 2025 20:12:29 +0000
Manifest next update:     Thu 31 Jul 2025 20:12:29 +0000
Files and hashes:         1: kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl (hash: 4848LecPyXg8vUXycRQ9N1CnlguVgpzWDclj2sbxpbg=)
                          2: BB7C684E8E0011EA90489A40C4F9AE02.roa (hash: 4L/8MzP5Gv0BrcSJxbpf30TM5iV0Rok3eBScr5m+tTk=)
                          3: EC4788308DFD11EA8AAFBB36C4F9AE02.roa (hash: TDeFd4z1mfEd9OqdDhf5hU/55tTk1mPNz/sxM3VsRgg=)
                          4: EA74C41E84D911EF9E11D46FC4F9AE02.roa (hash: iwk36RqjK4+CbUIlYGdivIX0PP8tUC3WVzRS7SZf7Rc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl
                          rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 20:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2478 (0x9ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B883, serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
        Validity
            Not Before: Jul 24 20:12:29 2025 GMT
            Not After : Jul 31 20:12:29 2025 GMT
        Subject: CN=688293ad-c7de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:69:00:7c:8b:ab:ec:3e:3a:04:0a:33:d4:a1:
                    21:de:74:6c:00:a2:39:65:d4:52:0f:68:16:f9:3b:
                    7c:2f:c9:cb:62:8a:36:f3:7f:d8:78:b3:42:10:75:
                    43:cc:67:94:25:9d:02:e8:74:19:e3:e6:0b:95:3c:
                    4d:78:94:65:b1:c3:ab:01:2e:88:a8:5c:d8:19:0a:
                    c6:d9:02:7e:be:74:46:59:87:82:e8:e4:7e:2a:90:
                    37:21:64:15:09:e9:bd:74:40:a8:3e:7f:79:d2:8b:
                    f4:a5:dc:2d:37:da:0c:b7:e9:35:52:4f:a9:c3:63:
                    4e:31:57:33:79:04:78:9d:33:49:08:67:3e:db:be:
                    7f:6b:9a:23:a1:b8:47:8e:d9:ed:7c:f2:fb:73:d4:
                    59:07:c7:67:a2:c6:84:d1:1d:91:ca:79:df:0d:e3:
                    58:f0:86:6b:3c:2c:28:08:78:d8:5c:a1:d7:07:e7:
                    56:99:ac:33:08:77:d0:c2:45:cf:13:d3:2f:a4:69:
                    28:11:04:22:c8:84:60:1e:78:20:d6:41:fb:83:4b:
                    1a:4e:db:f9:54:e6:11:6b:de:ec:f9:e2:9e:c8:73:
                    f6:b5:ae:8a:19:46:6d:ea:3b:76:88:ce:9b:67:f9:
                    a5:a9:62:99:1b:de:4b:8c:4d:53:06:98:4e:c7:14:
                    17:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:EC:AE:E7:B0:56:2B:AA:3B:EB:56:93:D5:7B:8C:8E:5F:1E:E8:0A
            X509v3 Authority Key Identifier:
                keyid:92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:82:16:ff:23:7f:05:d6:00:c0:d3:53:c2:4b:5a:d6:2c:6f:
         ea:5a:18:c9:74:81:c4:5d:03:5c:c5:8d:56:5b:c9:8b:65:cf:
         c0:4a:b8:e9:cb:f0:67:b6:48:94:38:31:90:b8:a4:52:51:25:
         fd:86:de:45:ca:01:c9:2a:88:49:46:99:fe:cf:54:db:4e:4f:
         28:86:8f:5e:8f:d8:1f:ab:91:95:d8:5d:9c:19:57:18:ff:dc:
         53:32:4d:c1:73:a2:f4:37:57:cc:c3:8b:d5:b5:68:4c:82:3e:
         5e:68:ca:84:21:2f:16:c5:80:9a:9b:e6:b3:0a:c6:a1:a6:47:
         46:57:9c:1e:ad:1c:39:c4:94:4d:72:5d:de:07:0e:88:1a:94:
         98:de:aa:d8:64:35:32:7a:b0:8f:41:bc:3e:c5:ae:40:98:f2:
         8b:a7:2d:64:53:d8:d1:07:36:30:28:dd:f7:dd:d1:95:37:ea:
         41:09:bb:42:a0:3c:9f:f3:82:15:3b:cd:74:5a:b6:3e:51:b2:
         0b:5f:36:9d:98:bf:27:a5:c9:ab:68:68:24:9a:c8:12:23:c3:
         da:e0:86:78:31:e1:79:9a:36:c5:6f:5e:2f:61:2c:2a:36:7e:
         06:0e:62:4c:0d:9f:9e:ad:e9:a2:c3:c8:c2:32:e7:f6:3b:8f:
         0b:c7:c0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:56:39 2025 by rpki-client