Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft
File:                     9BV_dExCEMP_Rqrw4CLe5on0bj8.mft (raw, json)
Hash identifier:          KhlaJjhn5gOKmuxBbEU41xu1YDY8WpX9LNBGGa6Wwlo=
Subject key identifier:   AD:E2:04:5E:75:1C:78:3B:7F:2C:6A:23:2C:6B:E7:4E:84:37:D4:7A
Authority key identifier: F4:15:7F:74:4C:42:10:C3:FF:46:AA:F0:E0:22:DE:E6:89:F4:6E:3F
Certificate issuer:       /CN=A91F7B81/serialNumber=F4157F744C4210C3FF46AAF0E022DEE689F46E3F
Certificate serial:       0416
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft
Manifest number:          0412
Signing time:             Wed 23 Jul 2025 00:48:33 +0000
Manifest this update:     Wed 23 Jul 2025 00:48:33 +0000
Manifest next update:     Wed 30 Jul 2025 00:48:33 +0000
Files and hashes:         1: 9BV_dExCEMP_Rqrw4CLe5on0bj8.crl (hash: bcRuqwnFIPU2NWXWLi9Rta+XvtL+u/qBBVoFIp2F33Q=)
                          2: B4C25A82772811ECA418E366C4F9AE02.roa (hash: +nAeLjb+TBEYVVPImLnPfEQNMqbzuQHLMiBByx+ZAiw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.crl
                          rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 00:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1046 (0x416)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7B81, serialNumber=F4157F744C4210C3FF46AAF0E022DEE689F46E3F
        Validity
            Not Before: Jul 23 00:48:33 2025 GMT
            Not After : Jul 30 00:48:33 2025 GMT
        Subject: CN=68803161-0caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9a:af:ac:98:bd:af:7e:36:31:58:1e:44:c9:
                    c7:5e:ff:6d:47:2e:10:26:10:99:b3:48:49:a9:db:
                    f0:cb:1b:3e:6d:1a:b8:7c:32:44:88:29:43:49:8f:
                    0c:c6:4f:7a:34:59:92:92:78:88:72:b7:ce:7f:f6:
                    45:ae:8b:33:6e:74:13:0e:26:83:07:96:56:7e:2a:
                    cf:84:05:8b:11:d2:da:36:71:f5:f5:b4:38:aa:a2:
                    69:af:4c:12:aa:fc:ac:7b:4d:00:72:f6:d3:0e:49:
                    11:b4:8d:fc:c6:28:40:3d:dc:85:d9:58:5b:a4:e0:
                    e4:4e:07:c2:c2:a9:b6:42:26:10:aa:0b:c9:e5:4b:
                    20:44:11:eb:01:20:51:55:af:0f:62:5b:55:50:9a:
                    8b:02:b8:2b:2a:ed:0a:5b:ca:5a:36:e9:17:0c:42:
                    e1:54:9b:29:c6:14:68:ef:66:6f:26:bf:34:38:b5:
                    96:46:47:33:6d:75:c8:5a:0d:cb:54:81:ed:7d:03:
                    25:ae:4c:7b:73:38:7e:12:03:de:9b:53:e2:7a:2c:
                    48:d7:f2:60:6d:8f:5a:97:88:8b:01:6a:c6:39:16:
                    94:f5:dc:98:7d:19:31:34:cd:35:dd:22:89:d2:b4:
                    68:50:21:b9:7c:7c:e3:53:b2:b8:05:f6:a2:b5:1c:
                    20:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E2:04:5E:75:1C:78:3B:7F:2C:6A:23:2C:6B:E7:4E:84:37:D4:7A
            X509v3 Authority Key Identifier:
                keyid:F4:15:7F:74:4C:42:10:C3:FF:46:AA:F0:E0:22:DE:E6:89:F4:6E:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9BV_dExCEMP_Rqrw4CLe5on0bj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7B81/49C8925E772411ECA7659060C4F9AE02/9BV_dExCEMP_Rqrw4CLe5on0bj8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:2c:63:48:03:14:39:df:7d:b4:fe:8e:c1:6c:11:87:8a:8f:
         1f:34:75:0a:79:ab:1e:ca:dc:03:5a:18:cb:7b:38:10:ce:6d:
         44:cc:42:d8:e8:45:ca:d7:3f:b9:f8:6e:c5:1a:8f:d1:ab:9d:
         0b:47:3b:63:91:10:21:5e:8e:7f:ea:d6:36:21:f4:a2:14:79:
         16:52:f7:49:07:31:85:82:f2:65:94:3c:32:f5:50:86:37:58:
         4a:c3:93:56:09:fa:69:f0:21:33:ed:8d:90:9c:5b:9e:22:b4:
         ba:a6:5c:23:c4:92:e9:c5:f0:74:10:65:11:4c:c9:4c:f7:07:
         19:27:d3:17:49:c0:9d:8f:ab:d0:65:73:7e:9b:e0:ec:ec:c0:
         37:61:a2:10:2c:35:c7:52:4f:5f:2b:9d:94:16:f0:4e:6d:00:
         db:9e:30:7c:67:30:a6:7d:c9:13:ab:8f:69:39:87:cf:68:a1:
         7a:92:cf:fc:79:1f:32:d5:95:f2:88:db:f0:8a:4e:12:43:ac:
         de:00:87:51:10:d8:8a:21:bb:2e:e1:3c:09:3d:e1:64:b6:c9:
         68:93:9c:4b:d2:67:ee:ef:2d:cf:7e:72:f3:33:b0:b2:2c:f2:
         1f:06:f2:77:f5:5a:34:4d:66:28:32:84:d5:81:a8:11:33:77:
         d1:70:e7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:34:42 2025 by rpki-client