Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.mft
File:                     n82PZ2ktvYIee95qb7vWfHgHV_k.mft (raw, json)
Hash identifier:          AgVjx+ISQq1q1jxq0FPi1y4vJwEzjprI469qF2Tt16w=
Subject key identifier:   E3:8D:F5:79:AC:41:63:67:42:25:B4:4B:6D:D6:9C:65:C5:C8:0A:86
Authority key identifier: 9F:CD:8F:67:69:2D:BD:82:1E:7B:DE:6A:6F:BB:D6:7C:78:07:57:F9
Certificate issuer:       /CN=A9196780/serialNumber=9FCD8F67692DBD821E7BDE6A6FBBD67C780757F9
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n82PZ2ktvYIee95qb7vWfHgHV_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.mft
Manifest number:          0F
Signing time:             Sat 19 Jul 2025 08:21:16 +0000
Manifest this update:     Sat 19 Jul 2025 08:21:15 +0000
Manifest next update:     Sat 26 Jul 2025 08:21:15 +0000
Files and hashes:         1: n82PZ2ktvYIee95qb7vWfHgHV_k.crl (hash: X2Ujf3NZdJD50Lvayw9pRWNWtSa+WWVvQlEaYgo9oWY=)
                          2: 8CB6031052AB11F0BFD3D952C4F9AE02.roa (hash: 7wTyCg/0wP3GL3JeAUaulyMMeddiOEV7adzs5N2hvf8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.crl
                          rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n82PZ2ktvYIee95qb7vWfHgHV_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 08:21:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196780, serialNumber=9FCD8F67692DBD821E7BDE6A6FBBD67C780757F9
        Validity
            Not Before: Jul 19 08:21:15 2025 GMT
            Not After : Jul 26 08:21:15 2025 GMT
        Subject: CN=687b557c-f716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ee:53:13:6a:45:d6:64:fc:28:19:32:d9:b7:
                    1c:c6:a3:2b:b3:00:ca:66:45:71:37:83:59:c6:f7:
                    35:a5:5c:61:43:2d:b0:57:53:24:e7:d5:52:03:ee:
                    f4:ba:06:7a:4c:de:c0:b8:ce:89:2e:58:33:c7:4d:
                    4b:f4:4c:72:a0:4e:67:f6:dc:b0:6d:59:cd:45:7e:
                    11:2f:04:74:19:7e:28:e2:dc:88:1d:7c:7e:03:f8:
                    a2:b1:73:92:f5:86:25:0c:f4:d9:5b:0f:79:8b:b2:
                    8e:05:24:29:1c:d7:ce:89:09:6e:95:8f:3c:f2:8d:
                    4a:24:05:6c:97:04:17:31:59:7b:9b:3f:02:4f:ae:
                    d4:df:81:72:40:c8:bc:53:79:4b:64:52:8d:98:96:
                    9c:b0:d1:7e:7f:c3:7c:24:45:f1:98:c4:96:12:06:
                    19:1e:e1:29:cd:06:95:a6:96:22:28:71:6f:6d:ed:
                    d5:25:8e:ee:0b:9d:d6:6c:25:23:49:5c:f3:f9:9c:
                    5c:92:a1:e7:23:10:11:7a:9f:d2:26:92:1c:f3:82:
                    69:4f:02:7c:e1:00:a5:7d:24:c7:f5:18:d8:af:61:
                    e5:8a:49:ec:f1:f2:c5:c4:a9:87:45:bf:96:ba:11:
                    4b:56:43:64:00:06:84:41:7d:26:f3:85:44:1e:9d:
                    13:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8D:F5:79:AC:41:63:67:42:25:B4:4B:6D:D6:9C:65:C5:C8:0A:86
            X509v3 Authority Key Identifier:
                keyid:9F:CD:8F:67:69:2D:BD:82:1E:7B:DE:6A:6F:BB:D6:7C:78:07:57:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n82PZ2ktvYIee95qb7vWfHgHV_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ff:db:65:88:d1:59:4f:5c:43:f6:cd:f7:1e:8d:a3:84:8d:
         7b:bf:44:d8:db:1a:32:d5:ae:87:ad:a4:fc:9e:93:de:35:3e:
         45:81:d7:0d:b7:eb:51:a0:45:e1:6f:d1:6c:0c:4c:94:20:5a:
         9d:fa:4a:04:a4:da:f2:7d:23:36:26:e7:b6:95:ba:cb:91:6a:
         03:77:bd:00:65:3f:94:bd:c0:c1:d0:3f:9c:f9:88:bc:ec:d8:
         64:dc:24:66:eb:0b:25:59:aa:18:f1:e4:72:52:cd:5e:a5:32:
         86:ce:b0:eb:fa:d1:55:17:82:91:11:e6:15:80:96:45:40:68:
         2d:12:12:fb:b6:86:1c:58:56:1a:57:0c:72:98:8a:13:4d:fe:
         5c:67:88:7e:25:d4:95:08:33:f0:54:08:3a:cf:93:7f:7c:c6:
         1c:1d:22:70:c6:eb:5e:2f:39:93:93:ec:67:20:eb:9e:68:51:
         40:94:01:6c:cd:cf:c8:b3:f4:6c:e3:b7:5b:51:fd:33:30:75:
         88:44:0b:5f:ef:a9:fa:55:0e:6c:8a:72:49:78:d6:44:50:6c:
         b1:f6:12:39:cf:a4:21:1d:33:ed:d5:f7:cf:87:2b:40:9d:d1:
         ad:76:16:03:f5:0a:ca:1b:af:47:39:fb:72:48:e4:19:30:7b:
         16:03:50:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 18:38:51 2025 by rpki-client