Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
File:                     aRgc9FH4s_7GT8gpi1ItSIylyeY.mft (raw, json)
Hash identifier:          a51kqpCu8LnY7nFELRZUK+s2fcmCORSp58044Nt/cGQ=
Subject key identifier:   77:42:8D:74:CA:A7:2C:D9:8C:8D:18:5F:C7:E4:55:3D:AA:11:65:65
Authority key identifier: 69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
Certificate issuer:       /CN=A916DE3D/serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
Certificate serial:       86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
Manifest number:          7F
Signing time:             Wed 17 Sep 2025 07:30:39 +0000
Manifest this update:     Wed 17 Sep 2025 07:30:38 +0000
Manifest next update:     Wed 24 Sep 2025 07:30:38 +0000
Files and hashes:         1: aRgc9FH4s_7GT8gpi1ItSIylyeY.crl (hash: cZ257BTbGEsUDUFPJ5jLexCuTDMziq0lwFZCyWO2UrQ=)
                          2: 3AA17754FD8211EFB5BB677AC4F9AE02.roa (hash: imHJlERFiYSGRBFLnXEmas2EVRVLv/9+zOxRclw7D8g=)
                          3: B3266880FD8511EFA4783083C4F9AE02.roa (hash: W6yWEruXPIDPoCs6QL8pnWnNjj8hPqXcENkKFmbbFhk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl
                          rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 07:30:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DE3D, serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
        Validity
            Not Before: Sep 17 07:30:38 2025 GMT
            Not After : Sep 24 07:30:38 2025 GMT
        Subject: CN=68ca639e-7abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d1:b6:e4:3c:fe:69:b4:15:f3:bd:a8:fc:df:
                    32:e2:68:d0:a2:e1:b8:e7:da:29:1d:90:98:71:6c:
                    8a:8d:35:32:53:60:7c:3c:b6:1d:9d:2c:47:67:7a:
                    a3:4e:e3:5a:04:86:6e:55:e1:c2:7e:3b:d1:76:35:
                    f5:85:fb:a6:38:ec:22:06:39:61:a2:e5:28:5f:45:
                    76:77:c0:c0:3d:04:21:9e:30:89:e2:66:fa:47:fa:
                    22:9b:3a:7b:f7:94:a5:3b:ae:8b:6e:87:fd:21:f6:
                    f3:c1:63:a5:37:fb:26:38:1f:47:bf:10:a4:38:f8:
                    6d:45:da:af:d3:a3:71:8c:42:74:dd:30:11:4a:fd:
                    ae:89:77:d9:4e:b4:a6:bb:ae:38:6c:c1:5f:96:5d:
                    b2:e4:d4:db:10:46:4d:59:f1:6d:f5:4c:61:fc:5d:
                    70:11:f1:27:6d:3e:85:03:3b:c0:a1:b4:eb:ea:a8:
                    e5:6c:1c:d1:4b:a8:ee:84:0f:b2:61:44:fc:b7:d9:
                    52:7f:63:d6:9e:b0:b5:f5:89:3c:cb:f3:c4:8f:32:
                    25:79:96:90:b2:b5:45:73:90:e2:a5:66:dd:2d:ec:
                    bd:0e:59:e1:2b:f9:3f:e3:fd:ac:7f:08:68:4f:71:
                    2d:8e:a8:56:d8:de:d7:07:54:11:93:12:d7:26:8b:
                    58:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:42:8D:74:CA:A7:2C:D9:8C:8D:18:5F:C7:E4:55:3D:AA:11:65:65
            X509v3 Authority Key Identifier:
                keyid:69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:51:12:cb:19:04:47:8c:74:d9:d4:85:e8:0c:76:01:33:21:
         7e:79:6a:76:71:67:70:81:37:ba:49:90:39:04:e7:b6:da:4e:
         81:b5:03:d0:25:02:b2:09:66:75:c6:24:ee:77:e6:7f:a9:b0:
         75:c8:ff:d7:da:61:6c:27:72:3e:e8:f2:39:a0:cb:89:5c:bb:
         b0:ff:b8:c5:6d:c9:87:18:c6:bc:c0:7f:4d:5a:f3:80:60:cf:
         d2:c5:98:26:1b:1c:de:c9:46:f5:cd:52:92:44:dd:c4:31:a8:
         71:ae:7f:c7:e7:3a:bd:ad:93:5d:aa:0b:37:4e:b1:b8:31:87:
         f7:43:e3:97:fe:0d:77:dd:52:83:42:43:d0:48:99:49:08:d7:
         97:02:9c:73:4f:80:db:27:89:e9:c3:f7:9b:77:0e:fb:dd:d8:
         86:56:1e:ac:06:d5:f5:f7:7d:98:37:93:17:45:44:7d:e4:20:
         03:e1:a9:f4:7c:c6:d6:f8:cd:3b:b1:28:ee:9b:32:53:9d:6b:
         7f:66:58:07:86:98:bc:ca:8f:f6:70:ed:83:e0:1f:22:93:12:
         58:2a:37:ea:79:22:6d:16:95:25:34:fd:a7:4a:5f:ba:8e:e6:
         84:45:f3:7e:5f:f7:9a:48:c4:6f:24:b0:44:52:54:1f:2f:16:
         73:d3:c5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 01:09:06 2025 by rpki-client