Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
File:                     Psg0IE1rqvmRQMA712IRRcB7umI.mft (raw, json)
Hash identifier:          oGExmthwi2O0zgdhsJuTEg+zZKoVoRNJMW752gTm5wU=
Subject key identifier:   1C:3E:68:BB:76:DB:50:81:01:26:37:67:95:C7:F9:DF:8A:62:DF:8E
Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
Certificate issuer:       /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Certificate serial:       34D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
Manifest number:          34C2
Signing time:             Mon 08 Sep 2025 15:07:42 +0000
Manifest this update:     Mon 08 Sep 2025 15:07:42 +0000
Manifest next update:     Mon 15 Sep 2025 15:07:42 +0000
Files and hashes:         1: Psg0IE1rqvmRQMA712IRRcB7umI.crl (hash: hXstqTgSJ0FfJelRr6G0EI+w1CONq/qhDP11AtA+Quw=)
                          2: E7DDE5B8682811EB8D635520C4F9AE02.roa (hash: JPpUiaz8as6ncagKgyuUXaP5ZRdmrTGzakjmAvPZHY0=)
                          3: E73006AA682811EB8D635520C4F9AE02.roa (hash: 3dh9yLLZm2+U6xobWuHKGIC0VGl5iGyZmQBPzOFbKDA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
                          rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 15:07:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13521 (0x34d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196D24, serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
        Validity
            Not Before: Sep  8 15:07:42 2025 GMT
            Not After : Sep 15 15:07:42 2025 GMT
        Subject: CN=68bef13e-230b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:67:1d:a3:68:0b:4d:83:78:a1:04:82:ee:80:
                    ec:6a:e6:70:8a:66:ff:02:27:66:d0:25:f9:ef:a2:
                    da:9b:83:24:2c:0b:8a:e5:b2:dd:1e:5e:69:61:3e:
                    0b:bd:dd:80:a2:2e:5c:fe:81:8e:7e:9d:a3:99:83:
                    14:e9:de:26:ff:be:cd:ee:10:17:f3:03:77:d2:ee:
                    dc:c3:e8:d1:96:35:cc:34:bf:d6:89:a4:c1:eb:f6:
                    f3:90:12:61:18:57:53:9b:1d:2a:f3:f1:cf:04:1d:
                    11:73:b8:77:f6:de:8c:2d:15:d4:ad:42:36:c0:e7:
                    01:f9:08:93:94:42:3f:31:a9:1b:c9:22:1d:2f:4c:
                    66:65:68:cc:14:8d:3f:72:6a:2f:70:8b:fe:9f:0e:
                    91:a3:c9:0c:01:d2:79:83:81:aa:8e:a7:b9:2a:d8:
                    5f:8b:c3:d3:6f:7c:8f:bc:1e:61:8e:13:5b:9b:c6:
                    3f:19:37:f0:26:9a:b4:33:3f:4f:f4:79:09:64:b5:
                    ab:f3:3e:2f:f9:16:16:66:1a:08:cc:26:49:18:f2:
                    08:48:71:5f:ee:31:68:51:4d:92:49:78:ac:b4:15:
                    f7:f8:8d:1a:1d:02:2c:32:d9:b6:72:ab:bf:af:3f:
                    08:05:a5:36:b4:14:dc:b9:b6:63:dd:52:1e:ec:4c:
                    15:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:3E:68:BB:76:DB:50:81:01:26:37:67:95:C7:F9:DF:8A:62:DF:8E
            X509v3 Authority Key Identifier:
                keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:eb:f3:31:5a:4a:3f:44:01:c7:08:f7:6a:47:93:b0:36:06:
         db:fd:9e:ae:2f:c5:92:8a:60:94:2e:44:63:79:77:d4:4a:2f:
         df:13:9e:b4:69:da:5d:c5:3c:7b:98:a4:89:fd:7d:80:8f:50:
         6c:c9:94:16:99:e2:39:ed:ad:ea:75:04:47:ab:21:ce:1d:8b:
         24:ea:51:ff:13:58:2f:d7:88:ad:a4:2a:0f:e0:80:e7:43:a2:
         bb:be:bb:a1:18:d3:30:1c:f8:53:7d:36:d0:9e:a4:22:d1:b5:
         1f:71:37:61:c9:c9:50:80:ba:00:b3:9c:cc:f2:ff:81:22:ab:
         6a:e9:70:28:eb:4e:8c:7a:2d:44:5e:17:0e:b1:86:47:0e:1a:
         16:b7:42:2b:6a:93:0c:e4:f7:29:2e:b8:55:a7:eb:1a:35:60:
         39:ed:aa:37:2b:e0:0e:21:a5:f6:af:ba:8b:d0:c1:ce:40:c6:
         61:73:1a:02:20:a1:f6:23:6d:0e:c7:fd:f0:59:6f:8e:a7:dc:
         aa:31:f9:ce:65:41:8e:f7:8c:8f:05:36:99:9f:12:d1:bc:90:
         8e:3c:e7:0a:33:32:8d:7e:b2:e6:2f:01:f6:0f:d2:72:2a:22:
         2a:bb:0f:bf:2c:8d:94:49:16:07:0e:cb:a1:8d:dc:36:b1:ba:
         02:19:7d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 15:22:31 2025 by rpki-client