Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft
File:                     SihlGpSsY59qsTJHTTHrDfzm3Hk.mft (raw, json)
Hash identifier:          ub+ua0udH0TSArY/smwdica5itRCh9Un3dzyBOxpssE=
Subject key identifier:   E4:45:44:4D:58:E8:B3:EE:4D:A5:EA:EA:BE:C6:92:F6:C8:A8:A2:1B
Authority key identifier: 4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79
Certificate issuer:       /CN=A9122373/serialNumber=4A28651A94AC639F6AB132474D31EB0DFCE6DC79
Certificate serial:       0509
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft
Manifest number:          04F8
Signing time:             Wed 17 Sep 2025 00:04:26 +0000
Manifest this update:     Wed 17 Sep 2025 00:04:26 +0000
Manifest next update:     Wed 24 Sep 2025 00:04:26 +0000
Files and hashes:         1: SihlGpSsY59qsTJHTTHrDfzm3Hk.crl (hash: utVzWGHLD1mjsyQe7IqoYTGaSfwolU5Sr1+qKGyQF8o=)
                          2: A64296622BAA11EC9618D864C4F9AE02.roa (hash: OMr4Dz07a9K+JRAHryD2B9Vl/J9RaoHPdVjAOTh62ZI=)
                          3: C420EBE06EC911EC8A5A940AC4F9AE02.roa (hash: t0Udbj/BMaf/sH0WctEk56jZ3TVW9akvyOH3KkeFZWA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.crl
                          rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 00:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1289 (0x509)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122373, serialNumber=4A28651A94AC639F6AB132474D31EB0DFCE6DC79
        Validity
            Not Before: Sep 17 00:04:26 2025 GMT
            Not After : Sep 24 00:04:26 2025 GMT
        Subject: CN=68c9fb0a-942e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a2:3e:81:f6:c6:d0:16:d6:16:ca:43:1a:10:
                    16:71:1a:86:3e:53:3e:68:28:81:d1:2c:67:1b:29:
                    ca:3c:9e:32:8a:fc:27:8b:7f:10:c8:1d:f1:d0:f7:
                    c4:4e:b2:76:c0:85:b5:0a:79:a0:bb:95:ab:5c:41:
                    12:58:e5:46:b8:9b:47:ad:64:46:5d:3a:0b:ea:5c:
                    15:44:04:5a:76:5f:54:57:9c:ab:23:04:88:c1:ab:
                    fa:8d:f5:ff:2c:7b:f3:98:ff:56:06:45:ed:25:0d:
                    ab:5b:f0:50:98:54:42:ad:44:39:de:8a:a7:b9:c5:
                    b8:a2:29:43:39:0f:fa:2d:ca:fd:e9:2d:1a:82:a7:
                    04:bb:0b:a6:39:1e:9f:78:8b:64:e1:09:1c:13:6c:
                    73:1d:5e:9d:cc:33:e8:2a:a6:dc:40:d4:ba:d5:39:
                    57:0e:4c:99:97:8b:7a:1c:73:ba:5b:c5:96:a6:e7:
                    fa:56:2f:77:52:46:40:48:f6:cd:df:35:ca:03:5c:
                    59:51:60:94:91:5f:52:68:32:c6:d7:4f:43:3e:3a:
                    12:5f:87:2d:51:32:8f:73:d2:7f:23:4d:38:62:f2:
                    b0:67:2c:bd:59:97:04:d8:8b:5e:a2:4a:92:8a:67:
                    6a:78:56:4f:53:74:73:59:1b:f0:6b:20:7a:4e:c9:
                    a3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:45:44:4D:58:E8:B3:EE:4D:A5:EA:EA:BE:C6:92:F6:C8:A8:A2:1B
            X509v3 Authority Key Identifier:
                keyid:4A:28:65:1A:94:AC:63:9F:6A:B1:32:47:4D:31:EB:0D:FC:E6:DC:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SihlGpSsY59qsTJHTTHrDfzm3Hk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122373/2C006BB82B2D11ECB84E7273C4F9AE02/SihlGpSsY59qsTJHTTHrDfzm3Hk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:73:8f:8d:e7:46:44:5f:d0:8d:bf:d4:3b:df:d2:e6:b1:a4:
         ca:ff:e0:3d:2f:93:a4:cb:f6:01:69:32:d2:06:4b:a1:26:66:
         38:92:cf:a9:e7:1c:11:78:6d:8b:b2:56:d9:86:d1:4c:0d:77:
         26:f4:bc:70:3f:a8:9a:c0:22:3e:45:55:85:f4:f8:56:5f:0a:
         b1:9d:17:78:b3:2a:90:96:a6:72:48:fe:50:8f:af:84:ab:d1:
         55:b4:ff:a3:73:f8:00:35:22:d4:50:37:06:60:75:65:d5:38:
         99:d8:73:03:8d:89:a5:80:d6:1c:1e:db:d3:30:cd:5f:03:cd:
         9c:95:5f:52:ea:d6:0b:d4:b6:0e:d4:ad:50:cc:6b:b3:b8:e1:
         0f:c4:c8:e4:7e:2c:a5:7d:a9:30:7a:22:cd:1e:95:13:09:4e:
         a6:e5:53:29:ed:21:4e:6b:e2:f0:bf:ca:6e:df:8d:ad:67:53:
         32:68:e0:36:df:08:19:59:c2:5c:09:38:11:24:9c:fe:c0:d5:
         32:bd:cc:68:6b:59:48:f4:0e:6e:94:e0:82:9e:30:46:b3:2c:
         56:4b:2e:0a:1a:8a:cb:85:b6:0a:c0:e1:5d:ab:08:f7:84:9b:
         d7:68:10:cb:39:bf:99:03:ce:4a:fa:48:68:97:0e:07:d2:2e:
         e9:c6:75:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 01:07:13 2025 by rpki-client