Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft
File:                     rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft (raw, json)
Hash identifier:          P0jqOt+bq5LoKum6wVZINrq3HMGjfkzawrgzq+bhd3A=
Subject key identifier:   6B:FE:EC:18:C2:FA:26:05:3B:4F:1E:5D:E5:22:E4:FF:7F:2C:0D:03
Authority key identifier: AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17
Certificate issuer:       /CN=A911B6FB/serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17
Certificate serial:       FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft
Manifest number:          F9
Signing time:             Sun 07 Sep 2025 05:37:32 +0000
Manifest this update:     Sun 07 Sep 2025 05:37:32 +0000
Manifest next update:     Sun 14 Sep 2025 05:37:32 +0000
Files and hashes:         1: rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl (hash: sdj0/R6vXgiQlSU4s5JnB/4Be0nn80gyRPdVDtndBWs=)
                          2: 849C352211F811EF820BF24FC4F9AE02.roa (hash: b3uced97w9HX8eWf4q1QzAvxi1eeuc/tsrxa1EU++kg=)
                          3: 274C6AEA11F811EFAE75044FC4F9AE02.roa (hash: jYT3h3nuK8EuInDGgHZ314Lk8EIylHxKqFUTo50wOF8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl
                          rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 05:37:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B6FB, serialNumber=AD234E3F1EBBADAD019FE09AFFF70E8075AFDE17
        Validity
            Not Before: Sep  7 05:37:32 2025 GMT
            Not After : Sep 14 05:37:32 2025 GMT
        Subject: CN=68bd1a1c-7bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:58:de:44:3c:1d:e2:b8:a9:a0:09:ac:f8:48:
                    82:8d:36:a1:51:27:7f:71:2a:3b:be:61:eb:ea:00:
                    e8:cb:09:76:73:d0:2c:53:dc:64:ca:67:65:60:95:
                    9d:65:83:f6:60:19:9a:81:19:89:68:3c:d9:5e:af:
                    e6:ca:b7:99:48:c1:d4:b8:50:2e:c4:f6:4b:f6:40:
                    29:2d:9e:81:87:4e:c2:4f:6e:51:00:a9:46:d8:ed:
                    8c:55:9f:9e:a8:f8:27:45:e7:c8:13:6b:c0:e5:db:
                    9d:03:0b:a6:98:f0:f5:0c:97:12:4d:c3:d6:07:ed:
                    68:19:7f:6c:5a:0a:43:ed:81:5a:e1:90:47:0c:97:
                    fb:7a:3f:4e:87:b0:e4:63:98:1f:2c:00:0c:25:90:
                    83:11:e8:a1:3a:1a:61:1b:d3:62:4a:a4:d7:eb:9d:
                    a3:f9:f5:85:5b:8d:9e:84:37:dc:4b:93:e6:ed:a0:
                    98:5e:92:82:96:69:89:ba:a3:35:dd:38:dc:44:2d:
                    54:f2:35:f4:79:85:ca:74:9c:2f:39:91:9f:ed:78:
                    cd:20:f2:ed:5c:f7:b3:01:37:a4:43:c8:90:cd:6a:
                    7a:b4:fc:18:46:f6:a9:0b:10:82:41:a3:1d:57:2a:
                    c3:fb:48:34:14:5e:79:ec:f6:61:e8:93:cf:fc:bc:
                    ed:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FE:EC:18:C2:FA:26:05:3B:4F:1E:5D:E5:22:E4:FF:7F:2C:0D:03
            X509v3 Authority Key Identifier:
                keyid:AD:23:4E:3F:1E:BB:AD:AD:01:9F:E0:9A:FF:F7:0E:80:75:AF:DE:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSNOPx67ra0Bn-Ca__cOgHWv3hc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B6FB/D9CC9EDE11F711EF93BD944EC4F9AE02/rSNOPx67ra0Bn-Ca__cOgHWv3hc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:4e:35:3c:88:8f:6d:27:34:82:8a:9c:d5:22:6d:a0:fc:96:
         5e:6f:f1:96:2f:4b:f4:2c:50:ce:86:9b:53:93:7a:aa:42:d3:
         b0:80:fc:47:90:3e:e9:ef:f7:ec:23:bd:21:4e:9a:e2:9d:8b:
         19:89:ec:81:45:34:4e:b5:0d:1f:39:34:25:ad:37:d7:7d:c0:
         f2:f5:af:81:0c:e9:4c:4b:6f:ad:1e:da:79:74:47:97:8f:04:
         0a:56:8f:b9:19:40:9f:6c:d5:7a:84:bf:a4:1a:b2:4f:07:9d:
         08:19:d8:34:fc:2d:21:f5:22:43:30:03:10:a1:c8:c0:9e:c5:
         fb:67:94:df:1a:39:81:19:98:55:19:bd:74:d4:64:8a:5a:bd:
         46:e0:77:3e:5d:c6:70:1b:b4:2e:c7:33:fd:a2:90:ee:a8:ae:
         f1:14:7d:d8:bc:96:12:b0:70:41:dd:f5:2b:d0:db:5c:b2:83:
         fa:4d:41:7b:ab:6a:6f:d2:32:f2:82:c9:97:56:03:79:00:b6:
         54:a9:fe:de:ed:8a:b5:4b:33:35:3c:40:4d:81:b9:49:dd:03:
         e0:94:bd:5f:21:57:84:01:e5:7c:22:9b:e8:9a:a2:33:de:7e:
         e1:f8:37:4d:51:36:70:10:cc:c4:ab:53:49:cd:8b:36:3e:0a:
         0a:92:4d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 17:41:40 2025 by rpki-client