Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
File:                     cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft (raw, json)
Hash identifier:          QS2M/XqXRJAsgiAIgwJWgQKeKXp+c1uG12FtpWLKShQ=
Subject key identifier:   BB:6F:A7:72:D0:B1:DF:92:07:C0:32:BE:6C:D6:73:95:28:42:6E:C8
Authority key identifier: 70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F
Certificate issuer:       /CN=A9186980/serialNumber=70D16D7737989B15C6C8DF1DCA2A980E0BBFBA0F
Certificate serial:       079A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
Manifest number:          0797
Signing time:             Thu 18 Sep 2025 21:40:36 +0000
Manifest this update:     Thu 18 Sep 2025 21:40:35 +0000
Manifest next update:     Thu 25 Sep 2025 21:40:35 +0000
Files and hashes:         1: cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl (hash: zjgloSW5sh6SHlhYzhPvzDz12WB8hBcHOttbEUgIBEg=)
                          2: FFA6AD56DF7211EDB0D24244C4F9AE02.roa (hash: q05bnDBuCJsrUlvlSely8w0jnLrUU3dVN/rTyJ4umLg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl
                          rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 21:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1946 (0x79a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186980, serialNumber=70D16D7737989B15C6C8DF1DCA2A980E0BBFBA0F
        Validity
            Not Before: Sep 18 21:40:35 2025 GMT
            Not After : Sep 25 21:40:35 2025 GMT
        Subject: CN=68cc7c53-c86a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:82:46:66:e8:40:2f:5e:21:e7:cc:bf:14:b6:
                    f5:d9:0a:e0:bd:03:9d:09:46:97:b0:c7:7a:17:64:
                    57:f0:9a:c4:ae:c3:9e:e2:39:e9:ff:2f:13:75:7f:
                    d7:b1:63:56:a3:06:7a:36:ee:6c:6c:8f:fb:29:61:
                    a5:b1:e6:e1:cf:cc:24:33:8d:96:20:92:c5:cf:d7:
                    a9:1d:33:40:1d:3c:a4:ce:2a:5e:dc:7e:fb:9b:7b:
                    54:78:80:e9:9b:05:1f:1f:ec:67:b7:06:28:cd:18:
                    84:59:3a:3b:6c:41:66:a6:21:70:9b:d7:38:11:70:
                    53:10:43:f1:52:95:c6:73:c3:04:fa:90:b1:90:cd:
                    b8:af:b5:72:f1:d5:05:2c:83:fe:fa:88:e6:38:bd:
                    a3:84:3f:e0:59:ed:57:4e:7b:b3:bd:02:9a:85:eb:
                    d0:78:59:9f:3e:f2:b4:2f:54:ab:28:cf:e1:84:6c:
                    81:22:b9:2f:30:7a:df:d1:a9:aa:e6:34:4c:c8:b2:
                    f6:2c:3e:cf:d0:06:a0:34:c6:35:a2:b0:cb:8d:b0:
                    c3:74:23:44:ee:e8:10:4e:e9:e6:f9:c6:0d:0f:7a:
                    4d:77:9e:74:8c:4a:a1:39:c6:9d:6a:63:f3:e0:e0:
                    f4:43:4c:e9:5a:e2:56:78:b9:20:91:b1:bd:86:62:
                    50:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6F:A7:72:D0:B1:DF:92:07:C0:32:BE:6C:D6:73:95:28:42:6E:C8
            X509v3 Authority Key Identifier:
                keyid:70:D1:6D:77:37:98:9B:15:C6:C8:DF:1D:CA:2A:98:0E:0B:BF:BA:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNFtdzeYmxXGyN8dyiqYDgu_ug8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186980/CB006D621CD811EB96C7945AC4F9AE02/cNFtdzeYmxXGyN8dyiqYDgu_ug8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:81:c2:1e:ec:de:8c:74:ab:1d:8d:ba:94:ae:a7:93:71:e4:
         0d:ef:8f:01:24:18:8f:38:ab:15:66:64:01:bd:92:db:6a:e4:
         d3:62:ef:9a:8b:f4:29:48:82:9f:d1:cf:0d:56:79:74:9f:56:
         2c:71:7a:fb:c3:86:a1:e9:32:da:90:8d:a0:a1:5b:11:0c:06:
         3f:61:0d:a6:a2:c1:18:1f:3d:5a:fb:1f:4d:47:ed:35:bd:bd:
         d3:fb:af:d2:32:d7:6f:7c:f8:60:b8:e4:f3:d0:08:01:da:60:
         db:db:ad:b2:e2:ce:0f:b8:f7:ee:3b:72:b1:bf:9b:5a:46:8b:
         d1:60:07:19:99:78:f8:09:08:72:c8:c4:42:5e:77:64:ca:d4:
         d2:9b:9c:53:0c:4d:e1:fc:4a:03:df:07:24:ab:c2:9e:18:06:
         20:bb:7b:99:61:81:34:65:14:76:df:c2:ee:1b:b0:8e:7f:62:
         2e:51:24:46:1c:02:ff:02:88:0a:88:d7:d7:cf:8e:53:1d:f6:
         7e:84:c1:29:dc:00:1c:7f:e5:2f:95:db:09:23:22:e0:56:33:
         26:c3:aa:a7:9d:dc:a3:c3:e6:8c:f7:6c:39:6f:39:82:1f:8b:
         ad:0c:58:64:42:17:ad:da:07:4f:06:72:d3:bf:e7:89:d1:b5:
         47:c7:da:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:33:25 2025 by rpki-client