Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
File:                     t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft (raw, json)
Hash identifier:          +NCUFki7ictSRXXalH3tAtS7aZmw5fNSI+qtOTbT+Uo=
Subject key identifier:   E4:EA:28:01:6E:B6:71:62:B5:81:92:A4:3D:14:66:70:08:86:7E:01
Authority key identifier: B7:59:09:2A:69:18:F4:5E:AC:D0:DC:FD:F9:71:D0:D3:FA:50:21:AA
Certificate issuer:       /CN=A9149680/serialNumber=B759092A6918F45EACD0DCFDF971D0D3FA5021AA
Certificate serial:       07D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
Manifest number:          07CB
Signing time:             Tue 16 Sep 2025 21:27:06 +0000
Manifest this update:     Tue 16 Sep 2025 21:27:06 +0000
Manifest next update:     Tue 23 Sep 2025 21:27:06 +0000
Files and hashes:         1: t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl (hash: wCJwAk4oG7vkBLZqUOIYbBHTq8rcv6W5QxEsnbf0/Zg=)
                          2: 4EF261AE0BA211EB99DE471BC4F9AE02.roa (hash: elCspCf7kpxqe/1sy2Dq4/SmTn/Yog4Qi7W5Fjs7BFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl
                          rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Sep 2025 21:27:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2002 (0x7d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149680, serialNumber=B759092A6918F45EACD0DCFDF971D0D3FA5021AA
        Validity
            Not Before: Sep 16 21:27:06 2025 GMT
            Not After : Sep 23 21:27:06 2025 GMT
        Subject: CN=68c9d62a-f97b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6b:cb:4c:71:35:5b:89:c9:11:d6:28:dd:99:
                    14:65:07:84:2e:e9:1d:21:59:ed:38:e1:e5:f3:f0:
                    8c:f7:09:8b:f7:8f:0a:9e:ca:20:7e:42:8e:f0:dd:
                    c2:04:6a:08:e9:05:c5:6b:7f:cb:9c:72:0c:ca:f9:
                    2c:2c:3a:34:6b:52:2f:db:2a:a5:aa:d6:6c:d9:df:
                    e5:fa:59:9e:fd:e9:00:30:30:78:85:1d:da:d5:de:
                    9a:12:51:9f:2e:65:9d:cf:9d:cc:5c:c3:31:e7:9d:
                    d7:6d:64:61:42:62:18:7e:89:87:67:63:59:78:a9:
                    c0:88:c7:e7:97:e7:27:f1:82:04:fe:65:1d:51:c7:
                    41:55:4f:dd:6b:8d:8b:b7:d1:bb:9f:6a:06:a0:7e:
                    13:97:d0:97:b5:9f:a0:7f:2b:86:b5:32:fb:fb:f4:
                    d5:52:7d:40:51:ff:3f:f6:3a:b9:ad:74:93:8f:34:
                    e5:4a:8a:47:f5:fe:0a:93:9e:c3:07:82:da:99:91:
                    b1:72:2e:73:9b:86:66:8f:f4:73:79:e6:fd:78:ec:
                    c7:61:60:91:1f:65:19:95:28:9b:6a:2a:a4:ab:fa:
                    3a:24:c7:84:f3:5f:30:b4:7b:b7:04:cb:e6:5a:ec:
                    10:f6:81:e3:27:6b:40:9f:d4:95:b9:3d:64:3a:3b:
                    ee:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EA:28:01:6E:B6:71:62:B5:81:92:A4:3D:14:66:70:08:86:7E:01
            X509v3 Authority Key Identifier:
                keyid:B7:59:09:2A:69:18:F4:5E:AC:D0:DC:FD:F9:71:D0:D3:FA:50:21:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149680/74F7BBFC0BA111EBB932121BC4F9AE02/t1kJKmkY9F6s0Nz9-XHQ0_pQIao.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:db:50:09:6d:91:5a:77:50:89:9e:5f:bc:36:06:6d:d0:f2:
         37:32:a3:68:d1:72:5b:42:ef:ad:15:c5:aa:7e:5d:0e:c1:b8:
         58:e5:f5:8c:67:b7:8c:01:ce:ab:b8:71:40:fa:21:16:a5:1f:
         d1:7f:3c:e0:a1:e7:5b:70:bf:23:2a:23:f6:75:be:1e:74:3a:
         a2:22:90:29:2b:b5:06:8d:12:0f:90:14:87:59:3a:f0:8c:39:
         4c:be:5b:b1:70:27:d6:e0:2b:bf:d7:fc:bb:75:82:87:b6:9a:
         74:41:ec:c5:49:78:d7:4e:b0:eb:ef:98:4e:68:1c:0e:f9:c1:
         e4:97:0e:a8:80:d1:a9:fc:81:6b:ae:19:16:6a:18:ee:f3:c6:
         54:74:ed:52:9e:57:77:52:7a:7d:aa:3c:1a:79:fe:ab:0a:c1:
         ef:ed:a6:f4:34:f0:d1:de:4f:be:4d:07:ca:03:b8:5e:9a:0c:
         23:64:0a:04:79:e1:f7:c1:d2:cb:6c:e6:42:76:e8:59:84:46:
         5b:3e:1d:a9:e9:dc:cc:3f:46:b9:5a:3b:6f:ad:f2:1c:9b:c4:
         eb:ab:26:2c:ed:d2:a4:d7:ba:cb:1a:80:e2:93:6b:8f:34:31:
         b4:e3:24:81:04:99:b4:69:c8:3e:e3:76:65:31:9d:a4:8e:91:
         8b:da:96:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:53:20 2025 by rpki-client