Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft
File:                     1m4Cgid2-1UUPQyeVJAyhlal4I0.mft (raw, json)
Hash identifier:          WcLl5Lrg8I6NDRmrk/aIOHUlPUSuG62TUGKJVikaqI4=
Subject key identifier:   6D:00:0C:C2:BB:63:BD:62:4D:05:FE:2C:4C:8D:39:B7:09:CC:EC:1C
Authority key identifier: D6:6E:02:82:27:76:FB:55:14:3D:0C:9E:54:90:32:86:56:A5:E0:8D
Certificate issuer:       /CN=A9123180/serialNumber=D66E02822776FB55143D0C9E5490328656A5E08D
Certificate serial:       0C69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft
Manifest number:          0C61
Signing time:             Sun 24 Aug 2025 18:26:18 +0000
Manifest this update:     Sun 24 Aug 2025 18:26:18 +0000
Manifest next update:     Sun 31 Aug 2025 18:26:18 +0000
Files and hashes:         1: 1m4Cgid2-1UUPQyeVJAyhlal4I0.crl (hash: Sk2Ewb+3cEPQa0Q4CYLKiSEUuux0ugC62UccP8QY/+I=)
                          2: 0EE3438A07FC11EABAD90A47C4F9AE02.roa (hash: o6uzXxi45nuYDCicVYaDwUO/XE7Lp0WVGghWkgO8ZII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.crl
                          rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Aug 2025 18:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3177 (0xc69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123180, serialNumber=D66E02822776FB55143D0C9E5490328656A5E08D
        Validity
            Not Before: Aug 24 18:26:18 2025 GMT
            Not After : Aug 31 18:26:18 2025 GMT
        Subject: CN=68ab594a-d289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b2:ab:41:6c:c4:d6:b1:48:ea:3e:ec:38:b6:
                    1b:bf:c6:1c:47:dd:74:92:1c:b5:e3:88:c8:5e:e4:
                    c3:59:fc:be:31:df:6a:59:d3:b2:03:49:55:3d:77:
                    fa:1f:65:ea:e3:a6:99:04:12:fa:66:1a:90:9b:d8:
                    d1:e7:11:15:5b:93:fb:3d:6e:1f:4e:9e:a6:fd:a9:
                    95:21:41:2c:5b:bb:ec:94:ba:af:a1:bf:71:3b:04:
                    0f:f9:de:11:2b:c7:9e:ed:c6:cb:3f:2a:42:35:cf:
                    9a:9f:1e:50:fb:ef:bc:48:72:76:30:5c:6a:fe:4f:
                    14:99:e1:e1:ab:12:a5:bd:60:8b:35:ae:20:11:48:
                    d3:68:44:f5:df:62:09:e8:11:6c:3e:63:81:22:c3:
                    46:35:aa:60:c4:80:7a:59:2d:05:ff:51:a3:92:87:
                    24:98:67:cb:95:3f:58:a1:c1:74:4e:5f:a2:9a:69:
                    bf:bd:db:f7:9f:3e:74:7f:da:d1:70:d9:84:f1:0b:
                    9d:87:88:e5:23:cf:38:01:48:c1:0e:be:8e:f3:1c:
                    df:80:94:38:f6:71:26:91:ad:98:5a:ca:13:67:64:
                    6a:11:2e:38:65:a3:9b:09:c6:a7:27:db:6e:e6:1d:
                    aa:52:f9:c5:66:cb:bb:7a:62:26:1e:01:2c:c7:99:
                    b9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:00:0C:C2:BB:63:BD:62:4D:05:FE:2C:4C:8D:39:B7:09:CC:EC:1C
            X509v3 Authority Key Identifier:
                keyid:D6:6E:02:82:27:76:FB:55:14:3D:0C:9E:54:90:32:86:56:A5:E0:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:f9:3e:a6:7f:53:8f:48:15:4e:2a:e1:6f:f1:d6:7f:47:c3:
         97:0e:ca:c2:18:d8:c7:cd:d2:ed:85:b0:d8:07:86:5d:51:60:
         fd:6d:38:3e:cf:3a:76:43:b5:de:68:c4:7c:86:2a:40:8b:7c:
         ad:80:fb:29:b2:97:e1:7f:4f:98:a1:84:71:23:d0:69:5f:f1:
         1c:03:0e:a9:33:64:78:f2:e2:74:21:c4:b0:7b:28:df:32:c6:
         78:b8:b5:fe:53:6a:f4:f5:65:c8:cc:18:b4:cb:35:83:a5:5a:
         2f:67:46:36:d3:66:dd:35:11:61:d8:22:44:0f:82:59:fb:f2:
         bf:f9:2d:87:b2:da:d4:62:51:55:d5:5f:81:7c:ae:7f:94:2a:
         db:c6:48:78:d1:d1:89:76:43:29:fc:0c:80:2a:42:73:bd:d3:
         fc:fd:b5:89:64:ec:23:44:33:92:28:9f:30:1a:4a:3f:a7:b4:
         a4:22:90:ed:5b:23:57:57:4a:bb:e3:fb:b7:a2:a1:cc:0f:34:
         c8:11:31:d6:86:56:01:c5:5f:cd:3e:ff:90:66:1c:d0:ac:77:
         f8:e4:6e:56:d7:d1:32:27:cf:8e:b6:de:97:26:1a:67:45:9f:
         04:1a:8d:a4:0b:55:b6:ac:ed:76:67:26:18:de:35:2d:d9:19:
         4a:7c:6b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 21:38:46 2025 by rpki-client