Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft
File:                     rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft (raw, json)
Hash identifier:          uZXVI+Y5dQ/fu/iC44R2l9AmjjdhMUe5GmyRrhmMoxs=
Subject key identifier:   81:2D:03:62:04:1E:87:45:B6:76:83:8F:17:89:10:AE:F6:0D:37:27
Authority key identifier: AD:3F:A6:AF:80:E3:73:11:D0:B3:AE:C9:4A:75:7E:54:46:3C:49:B7
Certificate issuer:       /CN=A9171155/serialNumber=AD3FA6AF80E37311D0B3AEC94A757E54463C49B7
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT-mr4DjcxHQs67JSnV-VEY8Sbc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft
Manifest number:          05
Signing time:             Fri 19 Sep 2025 08:55:21 +0000
Manifest this update:     Fri 19 Sep 2025 08:55:20 +0000
Manifest next update:     Fri 26 Sep 2025 08:55:20 +0000
Files and hashes:         1: rT-mr4DjcxHQs67JSnV-VEY8Sbc.crl (hash: PsW20ptoYxkD+8NlXepcIRMCv0jO1gRfjtt7OORpwPg=)
                          2: 134623AC931511F092E28818C4F9AE02.roa (hash: aMUy59hNbr8+YBtJurePtSacPohs2Z5uSjasvrJSL2s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.crl
                          rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT-mr4DjcxHQs67JSnV-VEY8Sbc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 07:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171155, serialNumber=AD3FA6AF80E37311D0B3AEC94A757E54463C49B7
        Validity
            Not Before: Sep 19 08:55:20 2025 GMT
            Not After : Sep 26 08:55:20 2025 GMT
        Subject: CN=68cd1a78-5b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b8:f3:11:52:56:03:2a:2a:b6:d1:b2:e0:5d:
                    45:b8:c5:2d:58:f3:5c:51:9c:88:13:c8:fe:22:98:
                    b8:0e:b7:c7:5f:85:3d:d5:7a:76:b1:63:68:8f:ac:
                    4d:3c:e4:7d:6a:11:c3:31:14:da:72:4e:58:75:f6:
                    e8:0d:b2:46:b5:ee:f9:02:68:ce:65:7c:c5:8f:94:
                    c3:77:ed:2a:57:8c:08:f0:aa:32:2d:ad:85:cc:ee:
                    67:21:5d:18:22:00:f8:38:6a:78:f5:a6:31:99:bf:
                    c4:b0:de:ed:e3:53:9f:f2:77:9c:3f:ab:5a:17:84:
                    42:50:51:6c:3c:d8:96:40:04:d9:98:61:ab:65:0a:
                    ce:a0:ea:c0:28:5e:48:d9:0b:ac:ec:56:16:1b:65:
                    b2:39:11:bf:2c:3d:64:8b:db:08:78:a0:e8:aa:e3:
                    be:f0:2b:e9:e8:e6:c1:67:67:4b:6c:8c:c0:f4:75:
                    cf:6c:38:5d:6e:5f:30:05:18:b7:fc:dc:03:16:68:
                    5b:68:c2:ba:3d:6b:55:df:e3:77:1b:01:6b:45:fb:
                    77:14:cd:16:0c:0b:a6:2a:0c:8d:7a:18:0f:13:84:
                    78:09:76:14:54:a6:45:72:04:e4:00:d7:60:96:35:
                    17:6b:a5:cf:d7:65:ac:94:9c:6d:5a:a0:12:50:c8:
                    69:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2D:03:62:04:1E:87:45:B6:76:83:8F:17:89:10:AE:F6:0D:37:27
            X509v3 Authority Key Identifier:
                keyid:AD:3F:A6:AF:80:E3:73:11:D0:B3:AE:C9:4A:75:7E:54:46:3C:49:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT-mr4DjcxHQs67JSnV-VEY8Sbc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171155/09D36C90930511F0BEEAC611C4F9AE02/rT-mr4DjcxHQs67JSnV-VEY8Sbc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a2:6b:81:32:c5:b6:94:7a:c8:02:f6:13:0c:0e:7b:03:73:
         10:e2:61:fa:e5:8d:d5:77:9b:7e:a4:dd:0d:ae:81:55:43:91:
         17:d6:26:11:de:c4:5a:0d:7c:21:9a:73:e3:92:ef:b1:f0:d9:
         e9:d4:c9:2a:9a:69:16:f5:f3:82:70:34:20:89:e6:b7:b3:72:
         57:52:fa:43:7b:e5:e6:c7:4c:5a:13:51:a5:8e:4a:a3:b9:26:
         47:5a:e9:c0:7d:69:ba:6e:0c:49:d9:65:09:f1:14:ee:8c:8f:
         79:19:98:69:5e:0c:9a:73:00:c8:9f:16:d8:11:52:3f:8f:66:
         6c:89:26:c2:8d:1f:9b:76:40:b8:0c:38:21:f2:b2:1c:5b:26:
         10:d1:d6:94:cb:8c:99:db:8d:7c:d7:88:07:66:fa:66:6a:85:
         68:8e:7e:41:44:62:ed:8d:70:0e:47:84:9b:62:b8:34:67:84:
         b6:94:6c:db:61:50:30:a6:3d:26:ba:b6:48:17:9c:f1:c2:04:
         cf:ee:66:60:27:0e:5b:14:a0:ca:11:a6:36:67:bd:1b:78:f6:
         45:88:43:4e:f0:23:2d:2b:ed:94:95:d8:bb:57:eb:e8:3c:8a:
         8b:5f:49:98:d1:50:2e:3f:5b:44:1a:b3:4d:51:fd:65:5b:76:
         92:aa:cb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 12:58:37 2025 by rpki-client