Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
File:                     T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft (raw, json)
Hash identifier:          sJnYQs4oTymE9Jte+SC86FK46LMfwvFLzD83JwXvoz0=
Subject key identifier:   9C:24:86:DD:83:97:50:DF:46:C6:81:98:23:65:DB:BE:8A:39:BD:05
Authority key identifier: 4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C
Certificate issuer:       /CN=A9190818/serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C
Certificate serial:       A7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
Manifest number:          A5
Signing time:             Fri 05 Sep 2025 06:40:35 +0000
Manifest this update:     Fri 05 Sep 2025 06:40:35 +0000
Manifest next update:     Fri 12 Sep 2025 06:40:35 +0000
Files and hashes:         1: T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl (hash: G4zv8q/HL5WUvC9aQBrlidHd6hN10FhiFIgbY05G8PE=)
                          2: DE3EC424979411EF875EE369C4F9AE02.roa (hash: 5QE8zDybdgUA94Tpp6+guNsFhK7KXTxJ0yxg/2zsqZo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl
                          rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 06:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190818, serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C
        Validity
            Not Before: Sep  5 06:40:35 2025 GMT
            Not After : Sep 12 06:40:35 2025 GMT
        Subject: CN=68ba85e3-97f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c7:56:f9:2a:d2:66:a7:59:35:6e:8e:41:46:
                    76:ed:eb:ef:ca:c7:75:8b:ec:5d:35:37:67:8d:09:
                    ad:63:bf:47:4f:1a:b8:7e:ec:ba:ca:d5:28:94:78:
                    62:25:bf:f6:f8:a7:8c:a0:d3:d7:2e:a1:8c:8c:ad:
                    bc:8a:89:8a:00:0b:23:40:08:e0:f6:5f:93:11:54:
                    d5:0c:de:87:bb:d6:a3:ec:4c:af:ea:a9:91:9a:f5:
                    99:3c:6c:46:33:0a:da:ed:4a:b5:74:d5:00:bd:c8:
                    e5:89:21:9c:95:7d:72:0a:4e:94:db:3f:20:e4:11:
                    33:ff:67:3a:46:cc:e0:81:c1:1f:94:d9:a0:49:bd:
                    12:55:c0:51:8f:09:df:91:fb:b9:48:b3:5c:f8:da:
                    9a:af:9a:22:5a:66:07:5b:99:9c:2e:93:e8:98:e0:
                    3d:5a:b3:79:63:3e:3f:3d:79:a4:b6:a8:1f:4e:e7:
                    9a:a3:db:a3:64:98:65:61:eb:fb:ce:32:75:43:a3:
                    02:53:05:57:5b:12:9d:da:51:70:65:76:4a:d8:b4:
                    61:1b:81:71:54:54:7f:c0:f0:4f:a9:e5:96:a5:78:
                    55:61:2c:61:5a:b3:70:77:1e:59:64:3f:a2:d3:b4:
                    54:6a:f0:63:ec:4f:e0:bd:53:8a:99:6a:75:12:b6:
                    8a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:24:86:DD:83:97:50:DF:46:C6:81:98:23:65:DB:BE:8A:39:BD:05
            X509v3 Authority Key Identifier:
                keyid:4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:5d:46:ed:2f:bf:7b:e2:28:4a:4c:0f:bd:32:21:a8:d0:5b:
         55:ff:60:46:59:19:eb:32:ea:2b:d1:81:b6:bb:ba:19:b7:57:
         0f:4f:de:f2:37:1c:ec:a6:da:c0:ef:51:56:99:fd:82:59:b8:
         98:85:9a:13:14:7e:de:a3:c6:ef:a5:73:f0:c8:f1:b1:20:44:
         75:17:1a:03:fc:00:ff:86:b2:8b:ab:c7:4f:cc:54:ea:ec:2d:
         de:06:1b:65:62:b2:f8:23:60:c5:46:00:43:5d:7c:0d:6a:dc:
         2c:e8:8f:66:48:b0:9c:12:ac:93:61:ea:05:ca:22:7a:2f:5c:
         69:08:41:f7:3d:97:89:06:81:73:8e:ca:86:53:98:1d:e9:0b:
         d1:c9:3f:ec:4b:c9:28:ef:fb:ee:ae:21:5a:cf:3b:32:32:31:
         34:e2:8d:c7:55:25:86:6f:f4:b3:70:2e:a6:38:c5:62:3c:c7:
         57:f8:c1:24:9a:35:52:08:75:4a:80:68:26:8d:74:15:9b:26:
         39:32:13:ce:8a:10:ec:10:e7:b9:f2:73:d8:52:3d:06:07:12:
         b2:d5:90:b4:a9:84:1a:06:ca:26:69:85:61:19:00:86:3b:15:
         b1:22:4e:e0:5e:ee:b2:c7:41:97:f1:d7:33:2a:3c:f1:b2:8e:
         24:1f:7f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 20:59:09 2025 by rpki-client