Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.mft
File:                     m1FsBRZinvsTjrDmhbBboA6_Tn8.mft (raw, json)
Hash identifier:          mBCA+lp6DCrgyi+tmp0AWKzwvAcc6lbnGTSIxLsDu4s=
Subject key identifier:   92:2F:8E:3B:B8:C8:9C:69:17:18:37:20:E9:5F:0C:FC:1C:25:F6:2E
Authority key identifier: 9B:51:6C:05:16:62:9E:FB:13:8E:B0:E6:85:B0:5B:A0:0E:BF:4E:7F
Certificate issuer:       /CN=A9193552/serialNumber=9B516C0516629EFB138EB0E685B05BA00EBF4E7F
Certificate serial:       A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1FsBRZinvsTjrDmhbBboA6_Tn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.mft
Manifest number:          A8
Signing time:             Sat 31 May 2025 05:41:24 +0000
Manifest this update:     Sat 31 May 2025 05:41:23 +0000
Manifest next update:     Sat 07 Jun 2025 05:41:23 +0000
Files and hashes:         1: m1FsBRZinvsTjrDmhbBboA6_Tn8.crl (hash: e2zjFwoK9/8lsu88vAEut6Bb0/A/Wy1xyP6MMMaMByg=)
                          2: 8426E9543A8211EF9F1ED16FC4F9AE02.roa (hash: mvI32UqgcXrq4Dic68miAY5GJVO3OvbFSa1SeVN9nus=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.crl
                          rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1FsBRZinvsTjrDmhbBboA6_Tn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 05:41:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193552, serialNumber=9B516C0516629EFB138EB0E685B05BA00EBF4E7F
        Validity
            Not Before: May 31 05:41:23 2025 GMT
            Not After : Jun  7 05:41:23 2025 GMT
        Subject: CN=683a9684-bfa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2e:a7:c1:b7:0a:13:6e:17:eb:f5:4f:a5:f9:
                    b3:20:e1:4a:aa:8f:b7:08:d6:6f:00:6f:d7:b7:68:
                    42:22:17:8d:19:c7:06:95:bb:b5:aa:ce:88:b6:72:
                    2a:e3:27:ea:6c:74:ab:7b:02:22:a5:13:7c:ef:be:
                    96:9f:2b:b5:d2:4e:ce:d1:44:86:d3:2f:36:9d:0c:
                    fa:d8:d6:39:d9:14:5f:30:23:ad:eb:3e:09:5e:77:
                    66:e2:9f:ff:b8:72:51:46:23:0d:48:eb:88:12:89:
                    bd:ae:c7:65:39:78:e6:05:c8:36:6c:3b:45:db:cc:
                    d4:14:28:a8:32:02:13:3f:69:cf:4d:bd:f2:78:34:
                    ae:95:21:09:4a:dc:4c:8f:be:92:a7:28:76:83:21:
                    b8:c0:15:66:e8:09:7a:56:8f:7d:ae:6d:33:28:a3:
                    a2:67:a9:c0:15:94:83:d5:63:11:f3:96:91:fd:b7:
                    85:ba:8e:15:d7:45:8a:03:a5:18:ff:8d:d3:d4:71:
                    8c:71:45:03:a7:c3:e6:64:ed:fc:b9:fc:6d:ef:16:
                    f6:0a:15:1d:7f:25:39:19:a3:20:32:ef:16:f2:1a:
                    f8:62:e3:9b:6e:21:a0:31:2a:b3:21:f4:f3:55:6c:
                    cc:7a:0c:88:df:4b:32:cf:dc:37:07:ee:a3:e5:35:
                    17:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2F:8E:3B:B8:C8:9C:69:17:18:37:20:E9:5F:0C:FC:1C:25:F6:2E
            X509v3 Authority Key Identifier:
                keyid:9B:51:6C:05:16:62:9E:FB:13:8E:B0:E6:85:B0:5B:A0:0E:BF:4E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1FsBRZinvsTjrDmhbBboA6_Tn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193552/421215843A8211EFA2951C6FC4F9AE02/m1FsBRZinvsTjrDmhbBboA6_Tn8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:b3:4d:3e:bd:a3:e1:30:14:d0:2d:83:7d:1c:16:4c:4e:ee:
         85:7d:03:fc:3b:d4:3e:29:a5:f2:14:51:30:32:6d:39:99:8f:
         91:6e:9b:5e:47:92:c3:ce:3d:93:b1:67:0d:c7:fe:bc:2f:a3:
         75:e7:f6:db:9f:1b:72:76:4b:b7:81:15:57:22:f7:3f:f2:12:
         95:de:99:74:a7:1f:69:62:21:92:4b:b3:2f:49:e7:71:c1:4a:
         37:c1:24:c7:ad:3b:78:03:b6:8e:5c:a9:82:90:9a:60:04:f9:
         8e:5d:a7:43:e4:62:bd:ae:40:fa:9d:21:ba:38:d9:f6:9f:b8:
         d4:6a:94:6c:dd:11:87:b9:8e:f9:e7:43:3d:db:d3:c8:a6:41:
         c0:2e:be:e6:6f:d0:97:72:22:31:07:52:46:e8:0a:72:23:de:
         59:52:08:bf:34:aa:6b:01:06:36:29:84:a2:7c:5d:82:35:a9:
         eb:e2:95:23:a0:88:87:70:74:a2:ae:77:ae:95:bd:c6:ef:e7:
         61:14:81:90:a9:d1:9b:bd:08:d6:49:4e:19:a7:38:1f:bc:ac:
         f8:1a:25:f0:e1:57:87:25:9d:c8:84:ec:25:53:e4:63:37:1a:
         b5:44:57:1d:ce:46:84:9a:b4:3f:d1:4c:63:30:e5:55:21:64:
         fc:a1:ca:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:51:40 2025 by rpki-client