Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft
File:                     u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft (raw, json)
Hash identifier:          RHB0C1GLfTuVJMQnFmy69v5rDe//CTYf0vNJinSBicA=
Subject key identifier:   30:7C:50:DA:B3:E0:51:A3:83:FF:68:B6:F8:AC:BE:B8:68:AA:7B:9B
Authority key identifier: BB:57:55:5F:82:AA:20:A5:1C:1B:48:F7:B2:6C:35:67:F5:A1:E7:BB
Certificate issuer:       /CN=A9152D28/serialNumber=BB57555F82AA20A51C1B48F7B26C3567F5A1E7BB
Certificate serial:       01A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft
Manifest number:          01A2
Signing time:             Wed 17 Sep 2025 03:54:30 +0000
Manifest this update:     Wed 17 Sep 2025 03:54:30 +0000
Manifest next update:     Wed 24 Sep 2025 03:54:30 +0000
Files and hashes:         1: u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl (hash: S1Slhw/5IVeKJwt7oZHieVcZeKhQcmrOT9neBQlPZQE=)
                          2: E94B9DBC34EC11EE94A16565C4F9AE02.roa (hash: zmGvDkLZWGz3q65KV7fFcAzSPYGn5RW36x5tc4+EFL0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl
                          rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 03:54:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423 (0x1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152D28, serialNumber=BB57555F82AA20A51C1B48F7B26C3567F5A1E7BB
        Validity
            Not Before: Sep 17 03:54:30 2025 GMT
            Not After : Sep 24 03:54:30 2025 GMT
        Subject: CN=68ca30f6-268a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:37:98:c9:fc:35:62:6a:4e:19:b6:9b:e7:15:
                    b7:9b:32:94:60:fc:c1:d7:c0:ac:39:71:bb:37:d8:
                    f8:88:be:6c:5d:1c:d1:45:d1:99:b5:9f:11:f3:ea:
                    2f:fc:c2:1b:b6:f3:49:05:53:f7:eb:39:23:fc:cd:
                    f1:bd:ee:c9:09:6e:38:e5:01:c1:3c:68:af:20:79:
                    b2:21:31:6c:70:f3:8c:00:75:fd:16:0b:57:54:6f:
                    5a:52:d8:36:1f:f8:36:11:62:d1:20:b6:68:25:7c:
                    87:e1:d4:9a:84:b9:67:65:2c:f0:9f:fe:25:72:3b:
                    c6:d1:2a:18:fc:ce:fd:7f:cf:79:67:89:3b:d9:5a:
                    f7:94:ef:47:30:34:6d:bc:5d:86:7d:b1:6e:19:07:
                    94:cd:e7:e1:9f:7f:9a:48:61:8a:28:fa:1c:13:65:
                    68:fb:34:9d:bf:a2:5e:56:55:ba:7a:b2:63:76:4d:
                    78:52:7e:27:43:4b:97:d8:75:4f:18:e3:f5:69:55:
                    38:6e:2d:45:35:5a:3c:c4:02:48:16:a9:a4:39:8d:
                    a5:da:47:c3:ce:38:8b:15:2a:6a:48:e8:38:19:d8:
                    08:8b:20:39:31:9f:1d:f3:87:4f:1c:1d:b9:37:05:
                    3d:33:6b:8b:3c:0a:f6:1b:87:0a:a6:dc:4e:1c:04:
                    25:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7C:50:DA:B3:E0:51:A3:83:FF:68:B6:F8:AC:BE:B8:68:AA:7B:9B
            X509v3 Authority Key Identifier:
                keyid:BB:57:55:5F:82:AA:20:A5:1C:1B:48:F7:B2:6C:35:67:F5:A1:E7:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:7e:c6:c9:ac:22:03:2d:74:dc:cf:cf:a1:5b:06:fc:17:0c:
         a7:1c:08:75:bb:d8:db:0a:91:bb:cf:20:fa:f3:09:63:84:27:
         79:8a:bd:59:4f:f1:61:84:08:2f:27:e2:5a:4b:76:f5:7b:f1:
         da:f0:af:32:34:59:42:56:4d:82:f1:ea:47:18:99:05:4a:04:
         1f:3a:ab:18:a0:7b:13:1a:f6:79:7e:de:b8:c5:4b:52:b7:b5:
         20:80:ef:b6:02:61:2b:b0:0d:fa:45:dd:17:b8:11:36:46:a6:
         21:67:ff:3f:b3:d8:6c:0c:1e:80:71:d6:b7:33:3a:fd:f8:b7:
         85:45:76:63:af:33:1f:b2:f6:bd:1e:29:6e:70:de:a8:4c:43:
         79:bc:af:2a:22:66:f4:0f:31:7b:81:d5:7e:be:b4:7b:ec:f8:
         54:4d:74:22:48:78:b7:ae:d7:a1:a6:54:a4:34:ff:cc:ad:8c:
         3d:79:8f:45:f8:d7:57:b1:9f:f1:29:03:04:04:40:fe:7e:b4:
         59:d4:16:6e:95:dd:bc:66:41:0f:89:96:58:88:dc:a8:18:dd:
         84:b7:c4:33:2e:72:b1:58:d2:e0:14:a8:2e:27:f2:af:e0:0e:
         14:38:34:22:e1:ad:fb:43:7e:2f:f7:f9:76:31:08:d3:0c:e3:
         c6:70:2e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:37:00 2025 by rpki-client