Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
File:                     aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft (raw, json)
Hash identifier:          /Vo0ud83dd7pbue219p+rPr1Nm3j2XH4l8caDYW6SEI=
Subject key identifier:   D5:8A:57:D3:CC:15:41:B8:A8:30:D6:47:FF:24:37:FD:22:FC:2F:97
Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
Certificate issuer:       /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Certificate serial:       08DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
Manifest number:          0879
Signing time:             Thu 04 Sep 2025 21:10:45 +0000
Manifest this update:     Thu 04 Sep 2025 21:10:45 +0000
Manifest next update:     Thu 11 Sep 2025 21:10:45 +0000
Files and hashes:         1: aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl (hash: yggfvZ/Hf8NXFK1I+RhHrrZ9ZLnSwcBhO7LOv5tZab0=)
                          2: 70F51BEE4B0D11EF94975151C4F9AE02.roa (hash: 5OJq3TQL6UcD1e0FTm6+f4tFRojNv3dxN2hOmwh/XMU=)
                          3: 18F343922A5711EBB59D6526C4F9AE02.roa (hash: 67FA0fogoOEO8ZhRY0Z7X/jNdUDR2kpHHHAZ7zc0DNU=)
                          4: 14C388C2114311F0B3944E67C4F9AE02.roa (hash: mTf8cQmCDCOr2IAAbGwT5DT/HAjoFjlHGakTn87Xya0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
                          rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 21:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2266 (0x8da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199197, serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
        Validity
            Not Before: Sep  4 21:10:45 2025 GMT
            Not After : Sep 11 21:10:45 2025 GMT
        Subject: CN=68ba0055-eaee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1e:9a:d8:b5:69:4b:61:d6:3f:38:bd:b9:4d:
                    39:4a:39:15:8a:52:60:2c:4d:eb:8e:ce:c2:de:c7:
                    54:37:e7:30:9b:c6:a5:70:c4:60:27:14:ec:38:6e:
                    5e:bc:54:ab:43:32:30:8d:2c:70:3d:4a:14:48:8e:
                    1d:fb:f5:d4:0b:6e:e6:f7:04:91:a3:21:e6:15:f5:
                    26:e1:58:a1:8f:e2:44:e6:5d:86:6c:2b:97:df:24:
                    f8:fe:14:df:85:82:aa:0a:cf:c8:d1:9f:4d:93:49:
                    49:d8:38:fe:72:06:a8:83:29:f5:aa:8a:f3:d8:ae:
                    51:72:84:55:fa:7f:b2:82:04:c7:19:52:f5:bc:17:
                    13:6f:d4:cf:7a:18:2e:ce:37:2a:c2:e6:21:28:44:
                    df:d8:01:2d:48:a8:c2:84:5d:e8:2c:be:2a:08:ce:
                    ea:b2:7e:9c:75:67:70:ac:b0:54:3c:c3:c2:aa:98:
                    c1:8d:f3:c5:15:20:33:f9:52:cc:e4:47:73:b9:51:
                    4b:15:5f:72:30:24:8e:ca:11:6c:99:0c:54:c4:0e:
                    b3:3f:cc:ff:52:09:d0:d0:68:23:c0:84:2a:c9:1e:
                    fe:c3:f6:88:3a:c4:59:cf:ce:8b:be:27:36:24:ff:
                    d3:95:68:74:1c:b6:09:cc:fa:69:f0:43:0e:3b:b9:
                    f3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:8A:57:D3:CC:15:41:B8:A8:30:D6:47:FF:24:37:FD:22:FC:2F:97
            X509v3 Authority Key Identifier:
                keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:e6:20:df:d2:01:07:ed:73:83:46:66:97:c1:70:05:f1:08:
         7b:8c:73:38:d2:7b:90:12:d5:6b:27:9c:9b:c8:a3:db:38:35:
         d8:05:09:e7:87:af:a9:6a:4e:a4:84:4d:bf:11:07:94:ca:76:
         7b:74:32:b5:5f:4e:c0:ca:56:c3:93:66:80:f0:1f:86:ae:63:
         79:d5:f7:63:0e:5e:b3:d3:e3:da:2c:a5:fc:53:bf:99:9d:7f:
         b5:76:2a:39:d3:3e:08:d7:1c:c8:be:6f:d3:1d:00:b5:89:b0:
         ad:2f:a5:c4:43:f4:a4:4e:26:bf:7d:54:d8:8c:39:46:77:79:
         c4:a8:5e:60:95:83:cb:6f:cd:8a:73:61:4b:ac:c4:37:1f:b2:
         25:89:c4:f7:3c:a3:a5:36:4b:17:2a:ca:eb:53:4d:7a:58:2b:
         b5:b8:8c:4f:f5:7b:f4:20:8f:2e:7e:18:32:67:7a:2f:2c:4f:
         5c:e7:38:6c:ca:0b:ba:78:62:e6:cd:c8:b1:19:d5:33:48:5a:
         e9:89:50:90:10:49:4d:4f:2a:3b:29:08:a7:b4:64:13:84:28:
         a0:18:2e:e1:e2:6e:81:8c:dd:89:ec:77:d6:4b:f5:61:53:bb:
         cf:bf:77:69:b4:31:21:61:57:63:32:37:85:69:fd:66:ae:be:
         ca:b2:32:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 11:49:58 2025 by rpki-client