Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
File:                     CcSauZoFYD1stgicc9N2kJhCHgA.mft (raw, json)
Hash identifier:          Z9YU1d3Fug2DPwUpZFSAazR8/+sDJogjpv0Cq6xOye4=
Subject key identifier:   1B:50:B9:39:B8:75:38:47:98:6E:44:2F:0A:1F:23:52:12:A2:B7:20
Authority key identifier: 09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00
Certificate issuer:       /CN=A912D109/serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
Manifest number:          014B
Signing time:             Fri 05 Sep 2025 04:38:19 +0000
Manifest this update:     Fri 05 Sep 2025 04:38:19 +0000
Manifest next update:     Fri 12 Sep 2025 04:38:19 +0000
Files and hashes:         1: CcSauZoFYD1stgicc9N2kJhCHgA.crl (hash: P91MrFPnahyc5Vg6MYuTSLM0Ha/32d0SS579zy1s2vY=)
                          2: 8415F4AA928511EE8AE43D75C4F9AE02.roa (hash: Fl6atygIAOnJfBaO72/s6xAJoCMVco87/j+JtQku3zQ=)
                          3: 7C76E4F6928611EE9B72027FC4F9AE02.roa (hash: Fm2GFDeckTvyapLgYWUd+q+9ZGt0Kt0IDFuGxReJTVw=)
                          4: 7BFABFDE928611EE9B72027FC4F9AE02.roa (hash: kWW5cRDXuhjkk+iiH/wUKjwNBV8vRl665o5zsQhUdP0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl
                          rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 04:38:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D109, serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
        Validity
            Not Before: Sep  5 04:38:19 2025 GMT
            Not After : Sep 12 04:38:19 2025 GMT
        Subject: CN=68ba693b-d92c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8c:90:7c:26:d8:1d:85:40:09:c8:b7:d7:8e:
                    70:45:d9:9b:41:c3:88:46:0d:16:60:53:4a:f5:9d:
                    be:49:bc:8d:70:24:07:54:5b:21:c4:59:0f:fa:ef:
                    c3:3f:70:27:51:7f:94:6d:ca:0a:c6:61:78:98:52:
                    ef:2a:72:b6:bd:36:61:4c:7e:1b:8b:eb:12:01:24:
                    3f:0f:ba:77:97:86:b7:09:6c:87:97:82:f4:05:99:
                    38:c2:3c:82:bf:01:06:fc:3b:a4:ba:58:25:f4:c1:
                    67:e7:21:fb:c3:8f:04:94:2a:a7:37:e9:7a:51:a1:
                    de:b3:ec:de:c7:28:f2:34:7f:9d:38:f3:02:9e:a4:
                    43:85:46:7d:a3:9b:de:ee:92:7e:73:c4:79:35:52:
                    cd:3a:79:83:9b:87:03:b3:b3:a3:40:df:7c:de:a4:
                    4f:4e:7f:dc:b4:15:49:8f:93:8b:c3:67:8d:33:ea:
                    67:f8:af:50:18:18:aa:14:f4:81:69:cf:99:ca:97:
                    4c:c2:ab:46:d1:49:3e:cc:a9:3d:ec:b3:b2:69:1e:
                    77:b4:6c:1f:e8:b7:7b:78:32:a6:5c:98:2a:11:c9:
                    65:ef:92:df:cb:fb:7e:a6:d6:80:37:b0:85:9e:7f:
                    62:ee:07:c1:6e:81:83:a5:2b:50:4f:fa:89:b8:c4:
                    71:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:50:B9:39:B8:75:38:47:98:6E:44:2F:0A:1F:23:52:12:A2:B7:20
            X509v3 Authority Key Identifier:
                keyid:09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:3b:c0:f3:83:d5:d8:40:00:38:4b:7d:60:48:b4:ff:24:8e:
         b6:13:a9:29:e4:2c:19:93:87:f8:42:98:5c:ad:bd:e2:39:fe:
         4b:06:3d:66:ed:05:46:72:53:98:b6:73:ee:4e:de:04:7f:75:
         f4:81:10:11:bc:d2:3e:50:3a:a1:0e:49:8c:4f:0c:b1:f1:2c:
         59:85:39:21:71:24:f1:53:dd:61:17:4f:3b:30:23:d1:ed:48:
         30:88:1e:aa:14:a7:90:c2:09:40:88:0c:9f:0d:d5:d7:9d:a7:
         d1:2e:86:64:d0:a2:2e:a2:3b:20:de:d5:78:0f:a8:a5:51:3f:
         26:5c:b6:9a:52:f7:07:43:73:68:84:ec:35:a1:55:c6:88:2b:
         3a:70:0b:d0:e7:cb:08:8e:56:e5:6f:67:11:e2:5e:11:f7:86:
         83:d7:ad:65:df:2e:0d:45:a0:33:01:8e:9e:98:ee:8d:d7:6b:
         7f:6f:5e:de:6b:e4:b4:07:dc:3f:40:d2:d5:1c:a5:36:f5:93:
         4c:ae:3b:92:6c:35:e3:b1:22:3a:f5:89:3e:8f:65:34:d7:12:
         43:58:17:4c:fb:33:e9:fa:ab:2c:03:b8:70:1e:ed:40:3d:b8:
         32:86:aa:7f:7b:58:95:72:6f:d3:e6:f7:95:5c:33:80:41:66:
         ff:4f:22:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 15:34:17 2025 by rpki-client