Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
File:                     lsYqB50ufY56mV0g9CKdgmk5jmk.mft (raw, json)
Hash identifier:          ZDkIvtg1wj0gdUTdobndXkOVtTZx3MUjzX8OJa16EJA=
Subject key identifier:   F7:12:9C:32:27:59:E1:47:78:4A:4A:32:29:1C:A2:AF:EE:95:0C:95
Authority key identifier: 96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69
Certificate issuer:       /CN=A9186F69/serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69
Certificate serial:       D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
Manifest number:          CE
Signing time:             Mon 09 Jun 2025 04:43:27 +0000
Manifest this update:     Mon 09 Jun 2025 04:43:26 +0000
Manifest next update:     Mon 16 Jun 2025 04:43:26 +0000
Files and hashes:         1: lsYqB50ufY56mV0g9CKdgmk5jmk.crl (hash: Q3Egu98x2ysSF9sciHLcDx0EzIdoQWRm88DsjSRtJm0=)
                          2: B5C7CDFC112911EFBDE1BF3BC4F9AE02.roa (hash: oY5WSp4sZ7toMUqPDRkXBJjJe0s8xpTFO+pZJ7qlj14=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl
                          rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Jun 2025 04:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186F69, serialNumber=96C62A079D2E7D8E7A995D20F4229D8269398E69
        Validity
            Not Before: Jun  9 04:43:26 2025 GMT
            Not After : Jun 16 04:43:26 2025 GMT
        Subject: CN=6846666e-4798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:27:29:b3:2f:0f:dc:0c:38:95:78:29:92:c8:
                    6d:dc:d5:60:c2:4a:e5:d8:68:2f:e0:3b:cf:a1:98:
                    42:ba:b0:2c:c4:b5:99:7d:3d:fc:53:2d:7f:79:65:
                    d6:ec:47:f3:ae:ab:d7:d2:ae:32:a7:40:7d:c5:0e:
                    64:82:48:c4:53:8c:20:30:64:21:9b:37:ac:02:ed:
                    dc:16:50:06:d3:29:30:7e:75:95:b5:11:bf:fe:a8:
                    29:02:c9:34:ee:57:9c:eb:a6:63:7e:c5:fe:68:8c:
                    b1:a1:6a:c3:68:46:da:2d:cc:a2:61:83:b4:99:49:
                    8d:f9:9e:df:0c:bd:5a:7e:58:98:93:8a:b4:7b:93:
                    7a:5b:b1:53:53:f7:1b:fc:52:22:21:d4:b4:5e:bb:
                    fa:bc:8d:d9:dd:fb:7e:49:79:d5:11:c9:dd:45:16:
                    25:ff:d7:41:1d:5d:c3:be:8b:be:8b:b6:16:da:32:
                    fa:7a:10:b6:a4:5b:89:91:da:8f:d4:9a:2e:ee:21:
                    99:fc:35:8f:25:e9:ee:cb:32:20:8e:30:25:51:f3:
                    f3:fe:6b:82:9c:45:8f:5b:a8:b9:a7:0e:e4:39:65:
                    b6:71:8e:5b:00:00:0b:a4:ff:cf:21:94:3a:d4:23:
                    c5:b6:3c:be:7d:50:45:8c:75:a2:b0:69:09:6a:47:
                    2b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:12:9C:32:27:59:E1:47:78:4A:4A:32:29:1C:A2:AF:EE:95:0C:95
            X509v3 Authority Key Identifier:
                keyid:96:C6:2A:07:9D:2E:7D:8E:7A:99:5D:20:F4:22:9D:82:69:39:8E:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lsYqB50ufY56mV0g9CKdgmk5jmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F69/66A0ADA2112911EF80635B27C4F9AE02/lsYqB50ufY56mV0g9CKdgmk5jmk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:09:26:4d:de:e1:ed:5f:ae:51:0c:bf:50:8e:e0:de:d3:b5:
         fc:75:2a:4c:90:ea:63:2a:74:26:61:4c:bd:a0:82:36:76:c6:
         31:7d:fc:25:f0:2a:63:e8:d6:1f:0b:b9:38:49:2e:41:16:c9:
         9c:e7:72:47:95:74:99:65:61:c4:94:fc:e0:a5:85:2f:be:44:
         a9:68:e6:80:35:55:d6:a6:de:cd:6d:1b:65:d7:4d:07:67:04:
         37:7d:e6:8c:85:cf:fe:17:47:2e:e1:98:b6:e4:a2:c9:99:5a:
         f9:26:a9:ec:d3:67:ab:89:6f:e3:f2:ca:e9:79:35:e4:f5:fd:
         39:07:da:fa:2c:f3:0d:14:49:b5:1e:b7:35:ae:ad:47:54:d1:
         6a:f5:9f:ab:00:1f:f5:04:76:21:13:cb:de:b4:34:c9:3d:b6:
         81:24:94:2c:e0:3e:c9:ec:bd:e3:9b:70:15:56:b3:7d:f7:e1:
         2f:e8:cd:de:4c:c7:f8:5d:e0:30:b9:38:6d:a2:4e:1d:cc:f4:
         62:24:a6:0b:03:24:2e:f2:51:9f:04:5e:c0:88:ca:a3:27:c6:
         87:4e:2b:16:9e:6a:51:f9:d8:22:26:27:b4:53:c0:99:b6:ec:
         d1:5b:b3:75:ba:6e:cf:1d:5e:2e:80:d3:9e:3f:3c:57:9f:35:
         d5:9d:da:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 06:50:16 2025 by rpki-client