Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
File:                     -Fr9bnRbCjR8ppbujrwWfQikT1Y.mft (raw, json)
Hash identifier:          USTv+COspzVDH2cOkfTbatvpdZTw7ijqcuTzmPSPTBU=
Subject key identifier:   D6:BD:5B:82:3E:AF:12:B6:DD:9F:04:08:DD:02:D3:CA:20:41:25:B2
Authority key identifier: F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56
Certificate issuer:       /CN=A9192B84/serialNumber=F85AFD6E745B0A347CA696EE8EBC167D08A44F56
Certificate serial:       CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
Manifest number:          CC
Signing time:             Tue 09 Sep 2025 05:51:36 +0000
Manifest this update:     Tue 09 Sep 2025 05:51:36 +0000
Manifest next update:     Tue 16 Sep 2025 05:51:36 +0000
Files and hashes:         1: -Fr9bnRbCjR8ppbujrwWfQikT1Y.crl (hash: o9CbBIdvhDFSE84IHsZj+iJFXylBknUsgumtHCkHDs8=)
                          2: 4419BD7A5BA011EFB239695EC4F9AE02.roa (hash: Be3MfXK9oaDuuPFFGHJaXT+00MKLJ3B8SZwwm9Fc+UE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl
                          rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 05:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192B84, serialNumber=F85AFD6E745B0A347CA696EE8EBC167D08A44F56
        Validity
            Not Before: Sep  9 05:51:36 2025 GMT
            Not After : Sep 16 05:51:36 2025 GMT
        Subject: CN=68bfc068-41f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1b:a6:6e:0d:fb:ae:31:5d:fd:87:6a:6f:cf:
                    c4:53:6a:f7:19:65:9a:25:64:3c:e1:02:82:9b:dc:
                    5c:1d:82:ef:19:78:8b:9b:fe:4e:5b:f0:b1:6e:cf:
                    fb:97:ca:1e:8c:9f:80:33:8e:20:6b:d1:31:cb:69:
                    c0:71:ac:ae:a7:32:3c:89:2a:0b:fc:92:7a:f1:f0:
                    0f:11:0c:b8:b5:9b:d1:04:9b:f2:91:26:b3:e7:7c:
                    50:a9:31:df:3b:4f:fb:c0:92:33:30:13:c7:e9:1b:
                    c4:15:ef:e9:a8:30:37:16:a5:56:cf:da:7c:56:45:
                    95:1a:26:66:76:a4:e0:87:b8:82:fb:a3:96:18:12:
                    ff:4f:fc:17:5b:6e:ea:5f:36:09:b0:6c:07:c3:8c:
                    7e:e4:b4:91:be:32:40:13:18:ff:02:b1:99:97:64:
                    8d:82:c8:1c:86:cd:86:1f:08:f0:97:f0:23:a1:41:
                    e6:74:85:59:63:1f:2f:1a:6f:17:a9:8f:79:74:04:
                    c3:0f:bd:56:38:23:e9:12:ee:23:1a:17:51:38:49:
                    e1:02:79:f0:60:6f:af:9c:39:8b:67:45:e5:22:cd:
                    24:1d:cf:37:30:d9:3f:61:22:6e:ac:9c:cf:bf:1a:
                    cb:28:13:50:f9:12:06:f3:e0:86:fb:b6:0f:12:db:
                    14:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BD:5B:82:3E:AF:12:B6:DD:9F:04:08:DD:02:D3:CA:20:41:25:B2
            X509v3 Authority Key Identifier:
                keyid:F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:05:56:10:df:8e:98:e1:1e:1c:c3:78:dc:97:68:f7:a3:00:
         9f:4f:d2:6b:6b:2d:5e:03:05:0a:5b:07:a5:43:26:ce:a1:91:
         09:8f:10:3e:17:d9:e1:60:b8:04:f4:a4:bb:6b:a6:b3:1d:69:
         f0:2e:2a:00:f0:da:f7:da:72:76:de:d1:cb:08:21:01:77:da:
         e2:b0:1a:83:52:f9:a7:1a:12:b3:48:ca:a7:75:b5:07:e8:c0:
         03:51:41:4f:9d:7e:61:b4:55:18:97:e8:a2:0c:ff:38:31:b8:
         bd:34:9e:a6:7e:c4:e4:47:4d:e8:94:67:10:a5:2e:2f:ae:c4:
         79:dc:e3:81:24:77:c8:7f:d4:e5:99:6f:dc:31:d8:b4:44:38:
         58:95:f0:83:21:4f:78:73:6a:7f:11:13:e5:15:69:cc:e2:ce:
         a1:9a:3f:1d:3c:1f:28:b7:eb:d3:53:8c:62:b3:66:95:18:ff:
         a3:7d:a2:9c:2f:53:29:93:98:fe:21:3f:be:76:d6:7d:49:10:
         51:0f:07:09:90:30:45:60:4a:8e:c8:f6:22:eb:41:31:a9:a8:
         bf:e2:5c:e7:a5:ad:ab:99:fe:23:d1:30:7b:d5:63:de:5c:67:
         fe:54:5f:c9:55:0a:28:a6:3b:4b:ea:47:e9:21:9e:e1:3d:e5:
         12:99:f2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 14:07:25 2025 by rpki-client