Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
File:                     STl-M7McCo9o_NIHK9qazLZdAuw.mft (raw, json)
Hash identifier:          eVqw2D1J7gRUJkRLD7407x37GPWK7vfRjsjVG/uza74=
Subject key identifier:   13:E8:EB:EB:BF:82:D6:68:CC:1C:3D:F2:57:F3:2E:23:D9:F6:9E:77
Authority key identifier: 49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
Certificate issuer:       /CN=A9135FB6/serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Certificate serial:       99
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
Manifest number:          93
Signing time:             Fri 05 Sep 2025 06:56:40 +0000
Manifest this update:     Fri 05 Sep 2025 06:56:40 +0000
Manifest next update:     Fri 12 Sep 2025 06:56:40 +0000
Files and hashes:         1: STl-M7McCo9o_NIHK9qazLZdAuw.crl (hash: yfixhsFlFeLamrIMStuKiSASBj2dVUbNIyDWD76H+FQ=)
                          2: F63554A0AC6411EF85E4707CC4F9AE02.roa (hash: nkmyG+cerv7WGoEtCDY5qePml4WahDx59uvEgKxWEOI=)
                          3: F6BDBBE2AC6411EF85E4707CC4F9AE02.roa (hash: 4buNpsqjVzrT4b5mx2ji/Z/fJ9vNVzZvP9Ey1iD/FnI=)
                          4: F5B752E4AC6411EF85E4707CC4F9AE02.roa (hash: BIhYQXo+ynpaauxBVASHvuQCNYPCsIa0qxYybQkkt8g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl
                          rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135FB6, serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
        Validity
            Not Before: Sep  5 06:56:40 2025 GMT
            Not After : Sep 12 06:56:40 2025 GMT
        Subject: CN=68ba89a8-7b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4a:f3:ea:47:af:ea:7d:fb:f7:8b:1d:66:99:
                    be:37:ba:ce:63:bd:36:3f:ad:b3:0a:a7:ca:81:58:
                    a4:09:20:09:fa:4d:80:4f:be:e0:77:b6:07:49:5c:
                    1e:73:39:e4:a7:a7:80:d2:13:dc:44:11:0f:9a:05:
                    2f:56:0b:92:98:fe:61:76:82:07:8c:6b:fe:bf:51:
                    f6:dc:5c:5f:06:b9:2f:c0:29:ab:67:d9:f6:83:37:
                    8c:32:5b:d3:b7:73:b3:82:73:d0:8b:1d:8c:ef:ab:
                    3a:98:24:46:a2:e8:71:1d:77:01:64:0a:ca:f9:b3:
                    11:ad:8b:31:6f:15:20:3f:cb:9c:d4:b0:c4:c4:48:
                    ed:80:aa:f4:2a:0a:aa:05:6c:bb:3c:34:c6:cb:0b:
                    2b:f0:9f:c9:2e:b1:c9:fd:4e:78:59:0e:eb:e1:90:
                    6b:2c:9c:43:ce:5a:de:08:bd:27:9e:f0:74:b6:dd:
                    c1:ad:6a:b8:87:a5:cd:71:dc:c8:79:34:32:8a:24:
                    cd:33:51:36:b9:8e:59:6b:45:4d:50:1e:53:46:b0:
                    91:23:c8:95:96:b7:d2:e1:84:52:ad:95:a8:61:26:
                    c7:6c:48:9b:20:12:69:c7:98:8e:ac:6e:bf:58:35:
                    85:57:78:f9:9e:d3:45:02:9b:72:f5:60:db:b2:d5:
                    77:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E8:EB:EB:BF:82:D6:68:CC:1C:3D:F2:57:F3:2E:23:D9:F6:9E:77
            X509v3 Authority Key Identifier:
                keyid:49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:78:dc:82:68:cc:b2:bc:22:7e:f7:6d:dc:2e:06:40:aa:84:
         ed:4d:01:93:54:63:93:64:ed:d7:a5:85:29:86:5a:a6:ca:03:
         a2:f7:d0:69:19:6e:ad:04:02:83:84:78:bf:53:a6:3d:0f:c3:
         8d:4e:7e:35:21:7a:10:4f:86:c9:78:9f:0d:2c:31:67:7c:2f:
         c5:a8:7e:f9:8e:28:0a:0d:3a:7b:a8:f3:24:bb:99:38:fa:14:
         6c:77:56:c8:50:91:7d:41:e3:93:02:1e:b2:b3:95:da:c9:4b:
         2e:8e:3a:68:e2:45:65:19:ce:8f:92:49:f5:fe:28:1a:b2:bc:
         19:4b:ad:85:b0:cc:9f:29:12:5e:6f:3f:95:b4:f4:01:1f:e1:
         f6:b7:db:8b:3f:1d:7e:2c:34:67:37:09:d5:c1:e0:31:d5:7e:
         68:7e:f8:9c:20:8e:93:02:f9:47:69:c5:7f:61:52:eb:0a:5b:
         5a:c1:59:9e:b8:4b:58:4b:8c:94:09:ba:b6:2e:7d:15:22:b4:
         e0:51:fe:a0:a7:bc:be:74:44:6a:cc:5c:a4:f1:35:c7:50:5a:
         6c:ea:63:08:fb:f3:26:76:28:3b:d2:12:5a:e4:e5:fa:77:ed:
         c9:96:50:78:18:d4:60:8a:31:a5:8d:68:52:c5:a1:f8:b3:75:
         e2:bc:92:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 11:31:45 2025 by rpki-client