Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
File:                     AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft (raw, json)
Hash identifier:          j/HmtNWtizhALUiitsc6CqfWW/kQJBvUNbm+NyakPtA=
Subject key identifier:   16:50:FA:53:73:C1:AC:5B:B5:12:CD:D8:AD:EE:AF:79:04:29:E6:F9
Authority key identifier: 00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91
Certificate issuer:       /CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
Certificate serial:       016D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
Manifest number:          0163
Signing time:             Tue 09 Sep 2025 04:08:20 +0000
Manifest this update:     Tue 09 Sep 2025 04:08:19 +0000
Manifest next update:     Tue 16 Sep 2025 04:08:19 +0000
Files and hashes:         1: AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl (hash: AbT9+W6h/9ESXj0yK3ktjc2FEwTcRh2T6XGYFGCt+VA=)
                          2: D39B04847C4B11EEB4EA3632C4F9AE02.roa (hash: jCjk18NlTAO280vVwUPsYgJU42p5ZyEQ+Q3/KbnN9I8=)
                          3: 5694D344791B11EEA64C016BC4F9AE02.roa (hash: ZHYQ3wHDGWknZGEZPQElBL1vATEt+W0eJbB64xYMxf8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl
                          rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 04:08:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E678, serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91
        Validity
            Not Before: Sep  9 04:08:19 2025 GMT
            Not After : Sep 16 04:08:19 2025 GMT
        Subject: CN=68bfa833-669f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:09:f9:af:38:1b:64:40:af:f6:9d:fc:a1:d6:
                    06:f5:1c:fe:a3:cb:a8:2a:a7:7d:d2:60:18:83:7c:
                    18:0f:a1:fa:76:a2:89:73:41:7f:b5:66:67:7b:a7:
                    ac:77:a6:39:3e:58:cd:97:03:1b:26:af:bc:6e:83:
                    63:82:71:d9:97:ae:a4:03:2d:6b:40:d4:18:80:36:
                    71:5b:c5:d5:b4:42:d5:85:ca:bc:34:6c:8f:3e:86:
                    a2:76:13:54:e9:4b:77:29:39:9f:29:5d:6c:1e:ed:
                    74:e4:32:3e:c3:eb:b0:ac:8a:19:c0:3e:92:2b:4b:
                    9a:71:ad:e8:f7:92:f5:d2:15:93:c2:bb:53:d1:d9:
                    2e:9f:7a:98:2a:4e:1d:6a:75:fe:50:50:57:6d:01:
                    02:0a:86:af:72:87:72:33:ee:ef:d2:07:c1:d8:37:
                    d1:e0:80:b9:33:06:cb:c4:ae:35:30:72:ef:05:d6:
                    72:da:f8:54:97:42:fc:cd:7a:9d:46:86:da:d7:93:
                    45:e5:dd:0d:b3:c6:d1:47:10:c3:ca:c1:f7:a9:b0:
                    8a:d2:47:15:70:bd:80:cf:dc:fe:2b:73:52:3d:bb:
                    28:3f:08:f4:2b:7c:4d:de:fe:cf:d5:b1:4a:8e:ae:
                    bd:06:87:14:73:68:55:bc:e1:a8:c3:cd:12:0b:2f:
                    05:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:50:FA:53:73:C1:AC:5B:B5:12:CD:D8:AD:EE:AF:79:04:29:E6:F9
            X509v3 Authority Key Identifier:
                keyid:00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:b9:34:22:1a:0c:cf:b7:51:aa:33:75:b7:de:93:25:2e:3b:
         7a:b5:fa:1b:80:a2:23:84:0a:84:93:ed:73:eb:f0:3a:d4:a2:
         b3:93:37:19:a1:d0:ca:8f:74:76:0c:4f:e9:ea:a8:d2:4c:4a:
         7d:57:ae:cb:da:ae:1c:ea:ad:39:96:8f:e2:41:28:bc:9f:ac:
         b2:33:e3:6a:ac:3b:df:cc:e3:ed:e0:94:79:36:68:4f:4b:3f:
         3b:13:b6:de:a9:58:50:42:41:7d:ac:64:a3:ed:f2:d6:09:fd:
         bc:3f:7c:07:60:ab:66:b4:d5:c4:f6:92:47:b0:0e:76:f4:0b:
         1b:ef:b2:e7:a0:81:80:6e:a0:46:32:d9:28:d4:37:11:37:c6:
         41:7f:2e:5b:11:78:fb:aa:91:d2:2f:53:72:29:31:94:08:f8:
         57:a8:a4:e0:82:83:ba:39:f3:2c:95:96:f5:c3:93:52:c7:72:
         30:4e:f8:d6:cb:79:e5:1e:fc:04:28:f4:38:ed:f8:25:14:48:
         75:09:2e:41:b3:5c:91:13:7d:33:cc:c3:45:85:c7:f5:5a:2d:
         1a:7b:e2:c3:3f:6f:91:67:d0:8e:65:5d:cd:88:e0:83:a7:67:
         58:a5:02:af:cb:54:f2:db:1c:ee:de:e3:f9:12:95:ff:d3:b4:
         6a:d5:60:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:50:05 2025 by rpki-client