Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
File:                     RIptgpdqVdxXC6WAN3Csat272IY.mft (raw, json)
Hash identifier:          x+GPYR2AoLbQ/6AK2Ic3mpt4K0wJ0XW7KRHQi5D39VA=
Subject key identifier:   62:77:70:B9:5A:E4:85:CC:3E:D6:3D:82:7B:3D:F9:27:62:47:A0:5A
Authority key identifier: 44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86
Certificate issuer:       /CN=A9194590/serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886
Certificate serial:       01F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
Manifest number:          01EF
Signing time:             Sun 07 Sep 2025 02:52:42 +0000
Manifest this update:     Sun 07 Sep 2025 02:52:42 +0000
Manifest next update:     Sun 14 Sep 2025 02:52:42 +0000
Files and hashes:         1: RIptgpdqVdxXC6WAN3Csat272IY.crl (hash: 1PEkH1sVRDa1uBT6kcaQoQDIuDBGQqHED3MyZ7V1uY0=)
                          2: B4914F2E91A211EDA6B67334C4F9AE02.roa (hash: Lgy8vm2n/ceKz+w+M1ZDWnunc26MQi1fRDcUPx4mLN8=)
                          3: B3F895D691A211EDA6B67334C4F9AE02.roa (hash: acIP9bNBSWQVEKBII6hnoV+cuy/+F66JRfGEFST3yH8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl
                          rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 02:52:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194590, serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886
        Validity
            Not Before: Sep  7 02:52:42 2025 GMT
            Not After : Sep 14 02:52:42 2025 GMT
        Subject: CN=68bcf37a-80a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8c:8b:97:e3:ca:62:dc:63:df:98:46:47:ce:
                    43:61:cc:8d:8f:4a:ed:ac:13:d4:30:90:1d:c8:20:
                    fc:cc:a7:73:9c:31:0c:fe:71:e4:47:eb:1f:60:ca:
                    9c:ae:a3:81:52:03:6b:25:f4:8f:8d:71:c4:e6:16:
                    67:01:f9:7c:31:6f:dd:3d:f0:5a:66:60:ba:c8:7d:
                    0a:a1:4f:f0:24:61:78:25:cc:33:82:0d:80:e1:16:
                    2e:d3:2d:2f:57:97:02:92:51:1d:fe:d8:fb:30:2f:
                    11:15:9d:35:fb:23:da:52:26:47:4a:9e:1b:57:4a:
                    81:27:61:a3:9e:57:1c:79:41:f8:b7:9d:f0:ea:c0:
                    d3:ce:32:95:6c:50:57:33:ff:a1:5f:28:38:b5:5f:
                    a5:fe:dc:ae:34:44:97:d9:db:4d:bd:7f:49:b5:99:
                    4c:13:d3:8d:d7:64:df:36:8d:a8:30:41:c0:4e:eb:
                    9d:f1:94:16:a9:5c:1f:6b:84:3e:42:34:29:c4:6a:
                    25:aa:3f:19:4f:99:de:1b:3e:6f:d8:aa:7b:6f:da:
                    a1:d6:03:e2:c7:49:57:b6:12:f4:f0:ca:42:5f:3e:
                    81:92:61:b3:fe:5f:01:b6:f8:5d:8f:e8:b2:22:ab:
                    ca:d0:a7:86:e9:93:26:84:f3:7f:5e:cf:9b:10:3c:
                    dc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:77:70:B9:5A:E4:85:CC:3E:D6:3D:82:7B:3D:F9:27:62:47:A0:5A
            X509v3 Authority Key Identifier:
                keyid:44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:d0:d7:d8:a9:59:4e:f5:76:76:b5:dd:b5:f9:03:2a:26:c2:
         38:d7:92:a5:e8:2e:02:3e:c1:1a:94:83:6f:38:e0:2c:0f:de:
         88:d0:f8:33:e0:e2:86:df:02:53:6e:bd:14:02:64:8c:c0:a5:
         e3:5c:1a:8e:fd:85:ab:9f:b9:c9:81:b2:32:ca:75:6e:bf:f6:
         36:3c:8c:2d:25:81:71:7c:92:e4:1d:03:9f:5f:af:28:5a:32:
         66:2f:8f:9f:77:14:9a:5c:30:7e:8d:fd:2b:04:aa:39:6e:88:
         87:20:c3:53:57:a4:fd:aa:56:7a:33:7f:30:c9:dc:dc:11:b4:
         c4:f9:d1:04:ba:f4:0b:fa:f6:f0:85:4a:73:bc:59:9f:9b:a5:
         2b:5c:6a:e6:b5:bb:27:dd:19:1e:36:c7:b0:bf:a1:ce:70:a9:
         8a:81:e8:ce:94:5c:35:68:24:59:3d:52:be:f9:ae:87:3b:c7:
         b8:3e:4b:6c:c8:22:05:81:68:7d:03:16:8b:b9:37:b9:4f:4f:
         54:9c:d3:a7:9f:81:41:06:e5:31:22:af:43:df:07:c6:d3:8a:
         88:5f:de:e7:02:c7:35:4e:35:f1:6d:c6:b0:ee:c6:d0:91:95:
         bb:39:3c:4c:cb:38:8e:50:ee:6f:4b:cc:98:44:da:62:0c:cd:
         15:29:c0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:25:40 2025 by rpki-client