Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft
File:                     V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft (raw, json)
Hash identifier:          mOBDBzpukgl4zuzDmg+WWnjG2g3Bk9QyY4lykkgbrq4=
Subject key identifier:   8C:E6:04:95:28:0B:26:1A:63:EE:3F:27:1F:DC:9A:E3:31:63:0D:37
Authority key identifier: 57:B5:83:2B:49:00:18:19:CA:E1:CC:B9:2C:DB:1C:B4:68:87:E0:9C
Certificate issuer:       /CN=A91955D9/serialNumber=57B5832B49001819CAE1CCB92CDB1CB46887E09C
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V7WDK0kAGBnK4cy5LNsctGiH4Jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft
Manifest number:          9E
Signing time:             Fri 05 Sep 2025 06:51:54 +0000
Manifest this update:     Fri 05 Sep 2025 06:51:53 +0000
Manifest next update:     Fri 12 Sep 2025 06:51:53 +0000
Files and hashes:         1: V7WDK0kAGBnK4cy5LNsctGiH4Jw.crl (hash: 3HE9KyVxxBPDIN3baf6wYBUzSZwm7qiVMhX8UCHeFF8=)
                          2: EC509DE4501211F0BE5D2025C4F9AE02.roa (hash: 59709TYd4BYZbsPTssB//DoW2gqjEPI/Hf7sdt1S0uw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.crl
                          rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V7WDK0kAGBnK4cy5LNsctGiH4Jw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 06:51:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91955D9, serialNumber=57B5832B49001819CAE1CCB92CDB1CB46887E09C
        Validity
            Not Before: Sep  5 06:51:53 2025 GMT
            Not After : Sep 12 06:51:53 2025 GMT
        Subject: CN=68ba888a-1c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d3:b3:2b:e6:c9:d7:b6:c9:de:47:1e:b1:0e:
                    d0:f6:e0:a6:62:e4:90:fa:99:97:cc:15:b8:c0:bd:
                    79:ca:cc:4b:6d:74:7f:cd:7d:b6:79:33:8b:02:04:
                    95:42:cc:13:f3:1b:72:35:80:b0:4b:68:bf:fa:28:
                    ce:ab:29:f0:07:45:66:3e:79:0d:7b:df:09:d2:05:
                    56:6b:cf:bc:92:26:80:45:dd:2a:e5:88:b8:0a:4b:
                    1c:40:87:b5:0c:29:48:b6:9f:33:bd:5b:41:d3:1a:
                    10:28:72:96:20:0b:8a:1d:c1:88:ee:b5:86:93:98:
                    8d:91:e4:a9:90:72:4a:53:29:92:c6:09:02:59:f3:
                    87:60:47:f7:04:93:44:09:cc:8c:c9:bd:f3:15:67:
                    4d:70:5c:b0:0a:79:c8:4d:31:c4:59:b4:da:b6:0d:
                    2e:5a:a9:25:90:36:19:dc:d2:7e:a4:84:ba:02:fb:
                    bf:6b:e0:14:f1:65:b2:fb:10:06:92:ef:73:c7:23:
                    38:06:a2:25:78:65:69:da:e4:51:26:b9:20:c3:16:
                    82:44:bd:32:47:50:f2:b9:1b:35:07:aa:95:c0:9d:
                    03:35:bc:a5:81:84:89:3e:e7:d7:be:05:5d:20:17:
                    81:97:e5:cc:b8:f6:1a:77:84:17:13:3c:4c:54:88:
                    c0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E6:04:95:28:0B:26:1A:63:EE:3F:27:1F:DC:9A:E3:31:63:0D:37
            X509v3 Authority Key Identifier:
                keyid:57:B5:83:2B:49:00:18:19:CA:E1:CC:B9:2C:DB:1C:B4:68:87:E0:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V7WDK0kAGBnK4cy5LNsctGiH4Jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:00:a8:e8:bd:0e:36:60:e4:98:d2:6e:ee:24:db:be:c9:cf:
         c1:2b:45:9a:16:35:0d:90:71:e2:c4:dc:95:cc:c6:bf:4a:cd:
         2e:42:cd:24:bb:30:db:8a:34:de:88:c0:3a:63:70:df:b1:55:
         13:84:ef:9b:8f:fd:ca:4f:c2:ef:7f:45:23:fb:69:20:22:63:
         8f:a7:22:4a:6c:32:bf:dd:ee:36:ad:47:fa:20:d0:5a:95:93:
         e8:6c:0b:ee:2b:c9:af:7d:c7:54:c7:f5:63:d2:4f:ef:b2:05:
         4e:25:37:9b:e5:57:9e:b9:3f:a5:87:1a:b4:6e:ca:18:b1:53:
         63:ba:73:6d:93:65:ae:0a:22:2a:72:57:8f:db:47:5d:fb:0b:
         6e:9e:8d:5b:6c:43:6f:c1:df:38:9d:8b:9d:59:72:77:bb:b2:
         d3:6a:11:be:89:14:58:78:be:03:af:83:be:0c:c5:56:e0:5c:
         de:e8:99:91:6b:fd:f5:c8:2d:de:67:20:33:dd:f5:be:c3:aa:
         f0:20:75:c7:c2:b9:58:9a:89:b7:63:b5:8b:0c:86:a2:48:c5:
         73:fb:ca:65:40:4b:b6:ca:a5:11:8d:2b:f7:c3:97:b6:44:58:
         cf:0f:5e:bf:a7:1e:48:03:16:3a:e9:62:1e:84:e4:0a:51:6e:
         2f:4f:eb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 21:30:33 2025 by rpki-client