Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
File:                     mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft (raw, json)
Hash identifier:          DQN3Siph+rb2WkV9ieBSYRSGWHJcx3EtN1HRCKncg+Q=
Subject key identifier:   F9:79:08:B4:71:31:96:79:B1:FE:FC:6B:2C:78:F6:D9:52:DC:20:23
Authority key identifier: 99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A
Certificate issuer:       /CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
Certificate serial:       353C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
Manifest number:          34FE
Signing time:             Mon 08 Sep 2025 14:39:32 +0000
Manifest this update:     Mon 08 Sep 2025 14:39:32 +0000
Manifest next update:     Mon 15 Sep 2025 14:39:32 +0000
Files and hashes:         1: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl (hash: 1+WnP0M3BEdRSQhOM2rdN5lx8CSnKdHYxdTPiTtVytU=)
                          2: 925D8646772A11EBAE8A8181C4F9AE02.roa (hash: 96XsaHGbBlvdPveuzctBmWEVFay9353tTmIoY6pIwfU=)
                          3: 31745126CD1811EC917CB819C4F9AE02.roa (hash: 7VoWeqZEfm/uzTTHWTd+5tooaNNEQjkz4m3jweXJHQc=)
                          4: B35C646A52E211EAAF44AE23C4F9AE02.roa (hash: mks3mjRf8YuTD15vdWrOVacIzdvtGICAN5+kmOADW4o=)
                          5: 9322B46CAEB111EA8EFC2878C4F9AE02.roa (hash: eAspH5Rn5OnmP5MIJe3K5vWuZy/bcDzHIj224BW01Bw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl
                          rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 14:39:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13628 (0x353c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167B50, serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
        Validity
            Not Before: Sep  8 14:39:32 2025 GMT
            Not After : Sep 15 14:39:32 2025 GMT
        Subject: CN=68beeaa4-0a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:53:f4:ad:e1:93:ef:b8:df:f3:b3:da:31:86:
                    64:10:bc:48:84:86:7b:0a:35:50:aa:f2:b4:a9:87:
                    17:fb:67:ba:cd:84:26:5d:9d:7e:7f:92:63:08:5b:
                    cc:63:2c:6c:b0:54:bd:02:cd:a0:e5:51:2d:e8:86:
                    e3:50:da:7a:b4:c8:8e:2d:4e:76:0f:4d:5e:1b:f3:
                    00:bd:e4:55:85:2f:f6:79:8f:6f:a0:bb:0c:e4:1d:
                    ed:40:0b:70:e8:9a:9a:cf:32:a5:8f:8e:f6:6b:b3:
                    5c:09:fd:f4:54:26:23:f1:b2:b6:8b:61:2f:3e:3d:
                    d4:3d:e2:cf:9c:a4:d9:2f:f3:81:67:0a:00:ae:b3:
                    b5:22:95:92:3e:26:e1:92:40:ce:3a:30:24:5a:a8:
                    06:5b:8d:94:5f:fa:7c:42:2f:4f:7d:2a:39:bc:49:
                    2a:a4:74:4a:d9:b6:fc:13:5f:ed:7d:ff:6c:8c:95:
                    21:8d:7b:a6:5b:e8:d7:04:49:a7:d8:34:54:f5:e7:
                    2f:8f:8d:bf:93:6f:ba:13:5a:38:59:71:01:e4:e3:
                    d4:b7:61:d2:9d:c7:59:fa:ca:28:c5:67:39:18:b4:
                    b0:94:fb:8d:06:c5:8b:f3:6c:fa:40:83:af:c7:71:
                    30:72:f4:9c:5a:dd:4b:39:44:0d:84:39:c9:8f:69:
                    48:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:79:08:B4:71:31:96:79:B1:FE:FC:6B:2C:78:F6:D9:52:DC:20:23
            X509v3 Authority Key Identifier:
                keyid:99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ed:5a:31:07:b9:18:8e:1d:f0:28:0d:f9:2e:fa:17:d8:0e:
         6b:57:6c:fb:11:89:98:0a:07:68:42:75:67:b4:ae:0e:4a:ae:
         9e:5c:bf:9b:00:4f:6e:f0:21:0f:05:73:5d:cb:86:49:5b:63:
         ad:94:44:5d:0c:03:c6:54:24:75:cf:0c:53:80:d8:4b:6f:a1:
         82:ee:0d:3d:cb:41:31:e2:a6:ff:64:da:70:f8:fe:e3:96:eb:
         71:60:78:5c:7f:c0:b1:50:6a:68:b8:fd:7c:31:5f:e1:d6:4e:
         25:22:a6:2b:96:77:c6:74:c3:e3:61:39:91:76:e4:0c:8e:59:
         70:c5:2f:c9:83:b3:72:57:24:30:44:15:e6:4f:bf:96:2e:67:
         77:38:78:3e:c8:af:81:a5:6f:ef:5a:d5:14:22:cd:d6:76:35:
         3f:21:e3:9e:73:f6:85:ac:0f:bd:5f:bf:e7:83:bc:0a:f7:04:
         ff:17:92:04:36:8b:ac:02:c3:41:36:d3:45:df:74:e7:67:7c:
         ed:d9:4c:f2:6d:c1:31:36:ea:cd:55:61:8d:1a:1c:57:26:7a:
         43:15:6c:6d:e5:ec:8a:ef:f9:2d:2d:a2:f1:a2:89:46:67:77:
         82:81:ab:69:1f:17:54:71:01:ba:c1:e0:98:5a:a8:ec:ab:88:
         21:56:7e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:52:24 2025 by rpki-client