Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
File:                     9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft (raw, json)
Hash identifier:          b4u07a6/F3hYSWv8WJqjVrye8TtW+nwf6kHiuWC7BWM=
Subject key identifier:   9A:40:9D:6E:A7:70:27:39:3F:C8:BD:B8:0B:1B:D8:FC:7B:9F:CB:C1
Authority key identifier: F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C
Certificate issuer:       /CN=A91921AE/serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C
Certificate serial:       97
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
Manifest number:          95
Signing time:             Fri 05 Sep 2025 06:56:52 +0000
Manifest this update:     Fri 05 Sep 2025 06:56:51 +0000
Manifest next update:     Fri 12 Sep 2025 06:56:51 +0000
Files and hashes:         1: 9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl (hash: 66r3IcmplmAfp9/Bt06IAEJ/FMG8w34W/KClaD/wZag=)
                          2: 91D2F686B4BE11EFA41A5C26C4F9AE02.roa (hash: sKOTsNVX+CZUe222IvZsyt4goGILGlPT7qY6Zl0V7Cg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl
                          rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 06:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91921AE, serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C
        Validity
            Not Before: Sep  5 06:56:51 2025 GMT
            Not After : Sep 12 06:56:51 2025 GMT
        Subject: CN=68ba89b3-2c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:04:7b:8a:c2:00:7c:77:eb:d5:53:67:af:34:
                    42:24:0d:6a:7b:8c:5c:86:48:fd:30:1a:75:54:1a:
                    37:4e:6d:ee:4f:8b:10:8e:e5:69:6d:1c:59:96:37:
                    c0:20:90:5e:3e:08:2d:d9:5a:cd:cc:2b:6a:64:7b:
                    8b:20:60:33:4e:7f:a2:2b:22:08:5b:7d:9b:86:7f:
                    06:41:42:6a:e7:7b:2c:4e:03:47:61:a9:43:f2:6b:
                    6e:ba:7d:43:b1:e3:1b:3f:25:8d:be:0f:7e:cd:c1:
                    9e:f7:83:c2:bf:f5:f6:67:b4:2b:9d:f8:12:fd:7a:
                    10:eb:e3:21:64:e9:89:ff:02:97:01:d9:08:e0:e0:
                    a9:b9:e0:59:3e:dd:90:88:27:4a:fe:11:08:1e:ea:
                    b5:42:4d:f1:cc:c2:d5:c0:31:a2:64:6e:b7:0d:ed:
                    9b:3f:67:41:54:67:de:be:3b:35:b6:b3:f1:92:93:
                    2b:c5:f5:ea:26:18:6e:50:4d:02:7e:63:d8:94:90:
                    73:95:f1:ae:c1:e4:bb:48:f4:a4:31:fb:28:17:bd:
                    3e:02:5e:dc:a4:46:6e:8b:e7:61:f9:53:28:69:9d:
                    ca:9d:df:32:c5:1e:7f:6a:1d:a1:08:d0:45:2a:cc:
                    01:80:4c:d2:01:5d:60:f6:46:23:fb:52:0c:e7:04:
                    84:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:40:9D:6E:A7:70:27:39:3F:C8:BD:B8:0B:1B:D8:FC:7B:9F:CB:C1
            X509v3 Authority Key Identifier:
                keyid:F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:23:7e:52:07:03:92:20:b4:05:44:9d:9c:59:b1:40:60:d2:
         a1:c0:57:5d:a9:bb:0c:c7:a3:42:70:27:5b:8f:d6:93:b7:dd:
         26:d6:28:5a:9a:6a:5b:e1:43:28:c0:26:fd:e8:35:6c:2a:5a:
         ae:33:10:42:49:5d:79:7f:b3:a1:fb:72:82:7b:f4:e1:32:c6:
         a9:b9:b7:1c:f8:dd:74:5a:c5:95:25:d6:cb:56:f2:26:25:76:
         f2:05:48:c4:4d:49:d3:22:bf:2c:7c:e9:9f:7e:6c:9d:b2:04:
         f9:55:c1:19:3f:4b:6e:ef:bf:1e:72:b4:a5:4f:fb:89:df:c4:
         10:ca:1c:90:62:9b:b9:a2:d0:a3:1f:a8:ba:1d:36:44:ae:3b:
         7b:f1:5c:dc:ac:98:24:8a:b2:db:c3:12:99:92:86:ef:29:9e:
         9d:0b:14:a3:04:c3:00:24:6f:30:7b:27:a6:f1:26:09:72:65:
         16:ae:bb:47:5e:a5:50:9e:4d:40:da:48:84:c1:44:95:0e:eb:
         e1:94:a0:1c:f1:29:ae:3a:5b:2a:95:62:4f:03:24:c5:16:d9:
         1a:5c:b2:6d:eb:00:d6:4a:62:1b:86:b9:b7:14:c3:50:7a:9d:
         43:ec:26:c2:22:d4:e2:a2:0b:86:39:47:50:00:22:3d:ed:b5:
         d3:bb:88:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 15:21:33 2025 by rpki-client