Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft
File:                     5nG8sr6VpsiFJxIdiBXovPGKoeI.mft (raw, json)
Hash identifier:          8B4HLX3a9FkyVFq598MtocDDHWZalwQ/MYsJ3q1LTRg=
Subject key identifier:   2D:18:B6:75:93:73:2D:D9:8E:77:90:E0:80:12:49:AB:D1:E9:3C:63
Authority key identifier: E6:71:BC:B2:BE:95:A6:C8:85:27:12:1D:88:15:E8:BC:F1:8A:A1:E2
Certificate issuer:       /CN=A9124926/serialNumber=E671BCB2BE95A6C88527121D8815E8BCF18AA1E2
Certificate serial:       09F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft
Manifest number:          09EE
Signing time:             Sun 24 Aug 2025 19:53:50 +0000
Manifest this update:     Sun 24 Aug 2025 19:53:50 +0000
Manifest next update:     Sun 31 Aug 2025 19:53:50 +0000
Files and hashes:         1: 5nG8sr6VpsiFJxIdiBXovPGKoeI.crl (hash: pqdInVWTrZUcwmzaan/BPrm5VDe49kmp4XITg8Kt5mU=)
                          2: 209BA8B682DF11EAABBC5018C4F9AE02.roa (hash: BPcITeixSaXAriwkv0vsDzYrlqCAlvQdRZ4cRFHy1EA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.crl
                          rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Aug 2025 19:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2551 (0x9f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124926, serialNumber=E671BCB2BE95A6C88527121D8815E8BCF18AA1E2
        Validity
            Not Before: Aug 24 19:53:50 2025 GMT
            Not After : Aug 31 19:53:50 2025 GMT
        Subject: CN=68ab6dce-820d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6a:5f:17:0b:db:7c:15:e3:93:8e:3a:12:c2:
                    09:7c:e6:79:cb:d5:05:6f:41:c5:9c:34:ea:19:3d:
                    8d:9e:25:78:22:74:44:b0:a4:9e:d9:16:7e:19:50:
                    36:ce:2c:02:2d:aa:6e:d1:dc:5b:68:ff:cd:10:2f:
                    6e:2f:5c:52:40:e9:1f:cc:ed:00:f7:a0:af:c3:44:
                    b5:e4:3c:61:b1:dc:3d:5d:dc:9a:f6:d2:fd:48:fc:
                    94:1d:68:df:e2:d9:0f:18:f0:c3:ee:87:e3:ed:62:
                    0b:85:13:7f:89:9b:35:65:3d:be:27:ae:2c:ce:e2:
                    82:d2:22:99:23:8a:2b:56:22:8f:48:e3:a6:2e:2f:
                    1e:34:64:00:ad:5f:9b:91:de:b6:ad:1e:31:47:ad:
                    8a:15:46:7c:a4:c9:27:18:38:44:36:2f:a5:47:a7:
                    4c:78:0b:d1:d4:ef:49:ed:55:62:8a:3e:d7:ff:f1:
                    4a:4f:8f:49:07:0b:c7:c4:41:fd:58:5d:02:88:1b:
                    30:40:32:35:eb:3d:ae:4c:6d:0b:b5:94:71:88:10:
                    b3:16:c2:a3:ae:62:47:ca:99:80:79:ea:74:91:f5:
                    45:72:8c:c5:d4:37:85:10:f2:07:30:9b:77:8a:14:
                    72:5a:a3:79:b7:0e:8b:36:5a:98:e5:33:bc:84:b5:
                    1a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:18:B6:75:93:73:2D:D9:8E:77:90:E0:80:12:49:AB:D1:E9:3C:63
            X509v3 Authority Key Identifier:
                keyid:E6:71:BC:B2:BE:95:A6:C8:85:27:12:1D:88:15:E8:BC:F1:8A:A1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:90:1b:49:d9:16:49:c8:70:4e:99:13:0c:af:de:95:69:31:
         09:93:d0:2b:42:90:25:51:bd:73:f9:97:56:85:98:74:7c:70:
         75:70:29:38:b3:f0:5a:91:f1:11:51:0d:b4:a1:93:fb:22:d9:
         fb:c1:a7:da:f5:1d:23:42:b3:24:ff:38:53:1c:f8:93:80:8b:
         f3:00:e5:f1:24:7b:4f:c8:70:e9:36:82:8e:39:55:61:bc:2d:
         83:eb:4c:4c:e8:b7:e8:cd:ae:45:4a:75:3d:73:a2:ec:88:12:
         32:e0:03:c8:be:1b:be:7e:f9:dd:28:1e:79:e1:6e:ac:e6:fa:
         ab:46:b9:c6:5a:9e:c4:05:f9:41:1b:90:43:1a:50:48:1e:ee:
         62:9d:ec:b7:68:1e:07:cc:6b:ed:85:38:12:64:57:6f:78:27:
         b3:20:08:ec:07:36:06:0c:06:03:73:95:30:13:9e:f4:11:a2:
         43:2e:48:e8:62:d8:14:f9:bb:67:3c:30:a4:22:34:6f:be:2d:
         7e:c8:38:da:0e:9a:d2:a1:07:df:53:ae:09:96:2b:bb:33:1f:
         71:ac:21:48:73:de:ad:66:85:cb:da:e4:10:45:07:e0:73:25:
         c2:91:31:45:0f:73:38:57:4d:7a:b3:79:6c:54:e6:fe:ca:a2:
         4e:f6:39:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 22:18:35 2025 by rpki-client