Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft
File:                     fJ9yIp7REllMdyLTwhtRBeKfxIo.mft (raw, json)
Hash identifier:          pm7yGW8e49r1D/HMKPRA5z1F6l9Ksk8Fc1PgQwUDKCA=
Subject key identifier:   CD:6B:7D:4A:4B:63:A9:DE:B7:1B:31:41:2B:11:F8:70:A3:4D:27:DB
Authority key identifier: 7C:9F:72:22:9E:D1:12:59:4C:77:22:D3:C2:1B:51:05:E2:9F:C4:8A
Certificate issuer:       /CN=A91F77AD/serialNumber=7C9F72229ED112594C7722D3C21B5105E29FC48A
Certificate serial:       018A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft
Manifest number:          0184
Signing time:             Mon 21 Jul 2025 03:45:12 +0000
Manifest this update:     Mon 21 Jul 2025 03:45:12 +0000
Manifest next update:     Mon 28 Jul 2025 03:45:12 +0000
Files and hashes:         1: fJ9yIp7REllMdyLTwhtRBeKfxIo.crl (hash: v7iONhfz9EcjXyk1sSoKi6EAjxGMli79/KIAfOUh4pw=)
                          2: 0D99319006F011EFA8C8D445C4F9AE02.roa (hash: A4DVK+hVAcm077tOI0UtMRITW1ft4Rq073mjOE1b4lQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.crl
                          rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 03:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F77AD, serialNumber=7C9F72229ED112594C7722D3C21B5105E29FC48A
        Validity
            Not Before: Jul 21 03:45:12 2025 GMT
            Not After : Jul 28 03:45:12 2025 GMT
        Subject: CN=687db7c8-405e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bb:a9:95:ee:7e:f5:ec:67:33:1a:cf:77:88:
                    0c:cb:d1:e8:de:32:4b:14:92:a1:69:b1:fd:58:3e:
                    1f:b3:fa:49:c7:ba:b8:a4:38:a6:39:10:e8:7b:61:
                    cf:b6:d6:74:f1:63:15:bd:a5:b7:b6:6a:7e:ee:74:
                    d4:92:fb:31:84:27:3c:a9:88:58:fa:14:f3:5c:b8:
                    c1:02:2b:18:81:99:6a:04:22:69:40:f0:d3:a9:e2:
                    e8:1d:06:3d:e1:69:77:b1:d0:27:8d:c0:79:01:19:
                    93:35:c5:50:d8:d8:f2:05:71:e6:8e:38:9c:a2:1e:
                    ff:91:d7:3b:57:bb:2f:be:57:9b:59:a0:34:bc:61:
                    92:86:e4:b8:df:f0:39:b0:6b:6d:4f:7b:59:24:45:
                    43:f0:b3:8c:a7:2f:e7:d4:48:49:4c:80:cf:f8:44:
                    27:25:bb:12:48:52:1d:cb:e6:72:34:f8:8b:62:eb:
                    7a:52:19:fe:7a:d5:e7:17:8a:42:5a:32:6d:b6:58:
                    e2:4b:fe:ab:da:6e:7c:71:92:77:7a:b1:2a:a1:d2:
                    cf:9c:0b:f1:1c:ce:fe:8f:06:05:88:bf:eb:96:c0:
                    44:77:91:10:57:b0:bc:b8:06:ed:17:ea:c7:17:c4:
                    42:03:f2:b7:31:e5:3b:a7:95:a0:e8:d9:02:a3:52:
                    14:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6B:7D:4A:4B:63:A9:DE:B7:1B:31:41:2B:11:F8:70:A3:4D:27:DB
            X509v3 Authority Key Identifier:
                keyid:7C:9F:72:22:9E:D1:12:59:4C:77:22:D3:C2:1B:51:05:E2:9F:C4:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ee:a9:87:23:1e:6d:ec:59:e7:d1:1a:12:d8:0e:80:bd:4f:
         fa:ac:c4:5e:fc:a1:00:4b:0c:4c:b6:32:fa:d3:15:cb:fa:27:
         ea:33:10:36:19:6a:d7:c8:67:ce:f4:06:6f:2c:82:2a:d1:7c:
         16:aa:d4:96:d0:e7:2a:61:c2:17:ea:bd:5c:c7:59:9d:3a:d6:
         d6:c4:ff:c4:86:22:29:29:7c:a9:4a:a7:74:d2:c4:04:25:89:
         d0:5f:66:9b:92:49:cc:38:6b:6e:de:7d:86:1a:5e:b4:d9:14:
         fa:91:58:f6:9b:31:ba:4b:8a:6b:15:1d:c7:db:c4:33:68:0d:
         71:79:8f:0e:fb:99:49:20:86:4b:35:bd:52:c6:d0:61:1a:d8:
         77:d4:1a:8b:6e:16:fa:a5:8c:52:34:9f:a2:6f:2f:ec:6e:eb:
         6a:38:c3:93:ab:81:44:cc:8f:fd:95:96:5a:2f:aa:2d:5d:0a:
         f7:17:bc:ac:aa:6d:c5:f8:28:f8:70:f9:10:d8:8d:90:48:f3:
         eb:57:1d:58:90:c0:f8:9e:af:cf:58:53:61:6f:68:78:d9:d8:
         45:36:22:00:9f:bc:a0:33:e4:96:17:54:03:97:7a:2a:26:07:
         ca:6a:52:1e:84:83:3c:38:f3:45:81:93:71:af:26:de:67:1d:
         54:b7:d3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:11:11 2025 by rpki-client