Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft
File:                     e9PkPRNOUjXpdgPOi6lIa2KpseY.mft (raw, json)
Hash identifier:          oOXeFNcp/ylM8hh6B/OTy/+MMG/QUgPwBOqD1gVXuk8=
Subject key identifier:   3B:3F:EA:15:EC:44:89:0B:D9:63:36:37:98:82:74:D7:BC:A6:00:FD
Authority key identifier: 7B:D3:E4:3D:13:4E:52:35:E9:76:03:CE:8B:A9:48:6B:62:A9:B1:E6
Certificate issuer:       /CN=A915C631/serialNumber=7BD3E43D134E5235E97603CE8BA9486B62A9B1E6
Certificate serial:       0368
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft
Manifest number:          0353
Signing time:             Fri 19 Sep 2025 01:31:33 +0000
Manifest this update:     Fri 19 Sep 2025 01:31:31 +0000
Manifest next update:     Fri 26 Sep 2025 01:31:31 +0000
Files and hashes:         1: e9PkPRNOUjXpdgPOi6lIa2KpseY.crl (hash: nljgPoPZ5lDEIUnzlHcUHHELFFHvSbNR8dsgWrcgN2o=)
                          2: 63F05DE02F1D11EDA3E29B09C4F9AE02.roa (hash: +EUJazeuo/s8rP6nB04WL2xZlEUaDRdd68emzn/S4/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.crl
                          rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 01:31:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 872 (0x368)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C631, serialNumber=7BD3E43D134E5235E97603CE8BA9486B62A9B1E6
        Validity
            Not Before: Sep 19 01:31:31 2025 GMT
            Not After : Sep 26 01:31:31 2025 GMT
        Subject: CN=68ccb274-0d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c0:69:a4:45:6c:02:db:a9:ff:6c:a6:c4:d4:
                    5c:a4:34:4a:9e:df:c9:26:fc:cc:ce:04:22:1a:0f:
                    84:4c:04:82:d6:a3:d7:ea:22:18:77:e7:02:08:98:
                    40:9b:76:03:ab:c0:a0:a4:e8:19:14:25:2b:3b:69:
                    26:24:a1:80:f1:78:86:9d:9b:11:5e:4f:c2:a2:37:
                    bf:22:e2:c7:69:bd:0a:49:35:78:d0:2e:53:42:68:
                    28:72:75:4f:5a:9a:88:ab:7d:bb:96:75:b2:c2:0f:
                    bf:bc:e7:6b:6e:a3:1b:56:8a:9c:0d:b6:66:87:46:
                    58:cf:dd:e7:39:02:79:32:91:ed:cc:12:cb:a8:60:
                    1d:01:b9:01:6c:88:f6:58:63:38:62:db:f3:81:5b:
                    34:80:9f:ad:a3:d2:c3:7a:0d:c4:d5:f9:d3:d8:b7:
                    24:c5:71:de:d3:ee:4b:96:80:f0:de:83:a2:a2:44:
                    ac:a5:c8:66:84:aa:32:7e:7d:6c:6a:70:3c:fa:d4:
                    07:8a:19:44:f9:e0:32:c8:41:78:e5:ef:cd:0f:43:
                    cd:5e:dd:e9:1b:70:dd:85:a1:81:82:db:bd:38:e2:
                    6a:d2:50:69:39:b3:5c:9b:59:9c:7b:9c:49:c6:34:
                    21:4d:44:0f:9a:09:74:28:35:9c:19:e0:3d:cb:af:
                    9b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3F:EA:15:EC:44:89:0B:D9:63:36:37:98:82:74:D7:BC:A6:00:FD
            X509v3 Authority Key Identifier:
                keyid:7B:D3:E4:3D:13:4E:52:35:E9:76:03:CE:8B:A9:48:6B:62:A9:B1:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:20:75:21:91:42:8e:40:5f:17:e8:c8:25:f5:37:c1:66:06:
         e9:45:87:bc:6b:fa:eb:7d:c2:fd:de:3f:a9:d1:8f:fa:83:e6:
         6d:af:eb:cd:e0:02:88:06:d8:d5:c4:a2:52:e8:9a:ef:5c:5e:
         79:9e:f4:d2:29:fd:fd:53:e9:c4:82:f0:84:84:19:45:cb:a2:
         7d:bd:0a:74:40:ab:4e:1a:15:fb:aa:6f:de:e5:8d:a7:56:63:
         cf:b7:94:de:a5:57:0c:9c:5d:6d:6c:ff:08:bd:a2:25:81:ec:
         2d:5d:2a:37:50:c7:32:4e:54:ee:74:28:e7:4e:c9:77:6b:14:
         2a:8e:07:e9:b5:6b:4c:c0:1e:0b:31:b8:7a:e1:0c:ae:e7:57:
         f6:8f:92:c4:9e:75:cc:69:76:82:1e:5b:02:87:e8:fa:d9:3d:
         58:1b:1a:be:f0:a4:c5:d4:cf:09:ae:ad:93:25:24:0f:25:3e:
         03:b7:ea:99:50:38:0c:82:80:9e:0a:4f:1d:9e:97:73:8b:03:
         e0:bc:f8:44:8e:4b:3a:54:e2:36:4c:22:ab:16:28:13:32:44:
         6f:a2:8c:3e:4e:d0:a0:72:8f:0a:e6:dd:bc:e5:6e:9f:00:1f:
         31:b3:0b:1d:1e:2a:41:10:e1:aa:8b:ef:e7:b5:27:a7:3c:87:
         ca:bf:0b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:50:15 2025 by rpki-client