Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
File:                     _80g3KaN5DLyGRt7YzKGvJh-Quw.mft (raw, json)
Hash identifier:          7fAeoxmU2axf9yacfKKDlMVXIPN3XZGKdOt5jhDC2OM=
Subject key identifier:   FF:E6:1D:4F:4E:6D:EA:35:89:78:00:F5:3C:38:BB:C5:C9:89:17:BE
Authority key identifier: FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC
Certificate issuer:       /CN=A9150D27/serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
Certificate serial:       1D2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
Manifest number:          1CE7
Signing time:             Sat 06 Sep 2025 16:13:23 +0000
Manifest this update:     Sat 06 Sep 2025 16:13:22 +0000
Manifest next update:     Sat 13 Sep 2025 16:13:22 +0000
Files and hashes:         1: _80g3KaN5DLyGRt7YzKGvJh-Quw.crl (hash: TCYvk+6xu+RLKIXR4ZcSJm/Nexa4lj1woFAmrv4Pw84=)
                          2: 335B84084C9611E7B9D8512DC4F9AE02.roa (hash: lfXXFKA1BewBY10R96banzWyiiHGZ5/wupAGz1DuT5w=)
                          3: 186E151AD35C11E69A0BDB79C4F9AE02.roa (hash: qeTmmubtmqrY2/e8m/Tsiuz4+UZv7NeRmzZbrXj/lVI=)
                          4: 178177F0D35C11E69A0BDB79C4F9AE02.roa (hash: RFFbNib+EOfTMtyfuUsNL0crZ/n9uw59zoxUUo7ALbc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl
                          rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 16:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7470 (0x1d2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150D27, serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
        Validity
            Not Before: Sep  6 16:13:22 2025 GMT
            Not After : Sep 13 16:13:22 2025 GMT
        Subject: CN=68bc5da3-0828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cc:1e:20:35:b5:d3:10:ee:c9:ba:de:a3:1b:
                    88:6d:b0:2f:14:12:8e:2d:82:5d:9f:18:c5:f0:2a:
                    aa:dc:10:dc:7a:d9:b7:55:86:15:c3:cf:95:7e:0b:
                    7f:2c:3d:30:cc:01:88:64:26:eb:68:36:5e:6b:bb:
                    63:e6:58:25:57:f0:fb:b2:22:5a:7d:48:e5:7c:f4:
                    9d:09:92:b2:27:31:3f:92:65:2f:86:15:bf:13:b3:
                    1f:41:ec:92:b3:29:5a:49:27:eb:f8:ed:cf:6d:88:
                    48:ea:4f:26:0c:43:70:dc:d1:ca:21:44:51:ed:64:
                    d8:fe:46:07:ff:11:44:78:44:71:13:48:71:de:ed:
                    c9:47:16:1c:8f:66:5d:d3:53:2e:c6:76:5e:0d:12:
                    58:d4:3b:d1:43:6e:88:f3:b5:4d:98:95:89:7b:c8:
                    8e:59:38:b2:6e:87:55:c2:38:2a:62:23:ac:9a:6f:
                    fa:44:4c:27:d5:aa:49:18:80:aa:39:9a:ae:d1:35:
                    d9:f0:ca:41:9a:c4:3b:ce:a8:a0:39:e2:19:53:b1:
                    53:62:5a:24:74:a6:24:1d:04:d5:9b:03:73:33:3b:
                    c7:f7:ce:29:aa:f3:78:7d:9b:a3:c0:46:d9:b9:ee:
                    b7:eb:68:1b:a7:ef:11:54:73:65:6b:90:9d:8b:02:
                    9d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E6:1D:4F:4E:6D:EA:35:89:78:00:F5:3C:38:BB:C5:C9:89:17:BE
            X509v3 Authority Key Identifier:
                keyid:FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:dd:40:18:c1:74:05:72:13:93:44:2d:bd:da:1f:19:b3:0b:
         b2:c7:d7:b9:69:34:30:55:04:77:a7:48:03:c6:8f:41:42:10:
         db:07:46:5e:d3:3f:40:97:d6:f2:31:02:f3:9c:4f:02:e6:6e:
         f8:7a:7c:62:6a:3e:ba:25:d3:c4:1e:28:95:c8:78:0c:92:5b:
         93:88:1a:a4:3c:12:c4:2f:98:69:40:a2:6f:67:2e:c9:2e:82:
         06:99:23:a1:46:ec:91:ac:5b:8e:51:44:4b:e4:e6:6e:b5:c4:
         bb:d2:97:fe:d0:e1:0e:6c:ce:33:40:9a:51:2e:0b:6c:df:2b:
         46:36:ca:50:38:a9:76:04:be:d1:36:63:0c:67:5e:59:a6:53:
         6e:18:2d:30:35:e3:01:e9:6b:67:70:95:a8:81:1b:18:29:08:
         a9:ad:da:b8:91:19:cb:4c:61:1a:83:61:c6:bf:62:04:01:e9:
         f4:11:2d:53:7d:54:71:e5:eb:18:08:7a:04:1c:8d:0e:eb:4e:
         fa:5e:90:5d:06:bf:c4:ae:de:a7:63:d2:1a:bd:ad:a9:07:be:
         2d:03:52:f3:be:45:83:4e:ed:4a:d6:1a:25:d2:70:e6:63:cd:
         c1:d6:40:39:f5:39:cf:72:f9:4a:78:56:e1:f6:81:69:8a:32:
         01:12:71:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 02:24:48 2025 by rpki-client