Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
File:                     8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft (raw, json)
Hash identifier:          gA+STDer5xtJyfRV6tRKMWbXyKgctYeCi7oD2wM2Mhs=
Subject key identifier:   A7:86:A9:DD:00:55:0D:D6:46:93:0E:6B:52:42:2A:CA:D3:2E:C6:55
Authority key identifier: F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78
Certificate issuer:       /CN=A91955D9/serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78
Certificate serial:       9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
Manifest number:          9A
Signing time:             Tue 09 Sep 2025 06:29:44 +0000
Manifest this update:     Tue 09 Sep 2025 06:29:44 +0000
Manifest next update:     Tue 16 Sep 2025 06:29:44 +0000
Files and hashes:         1: 8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl (hash: Eekyql5HxaZyBktczT56mmBk4UZFgL2XRO+lKrLPwO4=)
                          2: 0D041790A28611EFBD5A8C11C4F9AE02.roa (hash: 97I65+Q066TDiRkq5FVajUp8ATxWSUAGmGMHS8ACfSY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl
                          rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 06:29:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91955D9, serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78
        Validity
            Not Before: Sep  9 06:29:44 2025 GMT
            Not After : Sep 16 06:29:44 2025 GMT
        Subject: CN=68bfc958-d255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3f:7c:8e:1f:86:04:0a:af:2f:04:cf:64:15:
                    71:06:e3:40:e0:fe:4f:4b:47:05:b3:11:2f:ec:75:
                    08:4a:25:86:cb:f4:4c:da:e4:00:85:88:0b:ee:5d:
                    02:6f:92:b9:71:5b:2d:2c:97:2d:30:52:ea:0c:50:
                    b2:e5:fc:78:33:31:4f:ca:aa:36:cd:c1:be:1c:b8:
                    72:8b:bc:4c:1c:7f:b5:ad:28:84:87:ff:0b:b7:c6:
                    70:af:0a:b3:ad:a2:12:0c:3c:4c:62:62:36:14:0f:
                    26:c4:aa:0a:27:1e:bd:3e:80:19:b8:9d:8d:63:3d:
                    4d:d1:dd:48:79:ed:5b:ce:86:26:6c:82:4a:93:c2:
                    3f:e1:c9:d7:49:17:b2:d4:0e:58:77:bd:58:d1:47:
                    7e:df:fe:cf:18:93:7a:cc:16:f5:69:7f:b2:07:8e:
                    e9:f5:dd:69:73:0d:81:af:b2:9c:69:49:9c:e7:38:
                    39:f6:ff:f0:01:c2:b1:e1:62:f9:82:af:71:9e:c8:
                    15:9b:30:ca:9a:95:f8:27:3e:c6:13:94:48:83:c8:
                    14:dd:ca:ca:09:89:60:58:1a:8f:cf:bd:37:4d:81:
                    0b:7a:25:c0:a2:9d:b9:13:84:b2:0b:13:00:84:05:
                    f8:22:74:8e:f8:11:6f:81:53:6e:b6:eb:66:76:3f:
                    fb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:86:A9:DD:00:55:0D:D6:46:93:0E:6B:52:42:2A:CA:D3:2E:C6:55
            X509v3 Authority Key Identifier:
                keyid:F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:52:41:84:d9:16:ee:06:7b:94:a2:f6:1b:59:2a:ca:cc:38:
         84:08:19:0a:ac:42:dc:f4:ed:6e:33:87:ce:5d:11:0b:3c:35:
         7e:b3:14:b7:c5:03:a9:74:4c:aa:73:b8:2d:16:f6:e8:40:1a:
         76:dd:e7:78:27:aa:3b:3f:70:e0:59:80:f4:75:41:08:d5:2e:
         3b:07:f5:9f:63:78:63:ea:14:56:ef:3f:8e:bb:7b:33:3d:ae:
         89:22:f3:96:29:f7:c0:c8:40:a1:3d:26:a2:ef:38:75:d1:4c:
         28:3b:2b:f3:37:b8:6a:fd:9d:57:7a:a5:2a:6d:48:cc:a5:0f:
         33:8b:b4:a1:be:c9:c8:82:11:d3:61:cb:c4:ec:8b:19:82:af:
         8d:a3:9b:f2:71:4c:5d:40:b0:18:d8:c0:23:6c:74:d4:ba:71:
         04:ba:7b:1e:13:11:88:83:9b:88:03:54:13:06:e1:ae:ef:f6:
         e0:6f:85:f6:2b:34:16:e3:34:d1:cc:59:52:41:bf:2e:57:87:
         15:dc:e1:6b:da:1c:3e:6c:e5:2a:07:24:f7:43:43:39:35:58:
         8d:cf:42:4a:79:05:73:f7:6f:34:a2:e5:27:88:c0:a4:8a:31:
         90:99:71:1d:f3:c1:df:80:3c:0a:b8:b2:17:b1:04:e2:ad:79:
         86:6e:9e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:21:26 2025 by rpki-client