Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft
File:                     ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft (raw, json)
Hash identifier:          JpchzCfkKyNvyL41m6kY04Z4Q0Thv8PYjSemd9NxVzY=
Subject key identifier:   F6:B1:B8:A5:C4:A0:14:FB:94:F0:92:60:70:98:EC:5F:6B:C0:B5:A9
Authority key identifier: 6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A
Certificate issuer:       /CN=A9199BDF/serialNumber=6A4F43110050F0681964D858F9144E052BB8899A
Certificate serial:       0F52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft
Manifest number:          0F44
Signing time:             Sun 08 Jun 2025 17:28:50 +0000
Manifest this update:     Sun 08 Jun 2025 17:28:49 +0000
Manifest next update:     Sun 15 Jun 2025 17:28:49 +0000
Files and hashes:         1: ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl (hash: 2hdbwdwt3WJiGhZqvH81Z53a8nUIdZif7bBGdIGhucE=)
                          2: D193920E709411E99F95933EC4F9AE02.roa (hash: Rwnl5e54mLk+LHSVaZTg2cOR8P1YS+fQ04gmO2RO2+Q=)
                          3: 76E5D6AE727411EFAD2ACD27C4F9AE02.roa (hash: Z1ub1x4sdAUbVhPgJBxhv86znPBuyk7/OiOYt681rm0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl
                          rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 17:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3922 (0xf52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199BDF, serialNumber=6A4F43110050F0681964D858F9144E052BB8899A
        Validity
            Not Before: Jun  8 17:28:49 2025 GMT
            Not After : Jun 15 17:28:49 2025 GMT
        Subject: CN=6845c852-6e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e8:9c:df:b8:ec:2f:f2:ec:c5:f9:d4:28:55:
                    1b:25:e7:8b:93:0b:97:0c:b0:fa:06:73:96:0a:b2:
                    5e:a4:bd:15:c0:8c:09:de:d1:87:3c:8c:35:6a:36:
                    ee:18:ab:4c:ee:31:a0:b0:64:84:31:88:0d:b4:f5:
                    ea:95:51:d2:24:e8:68:7b:19:c2:43:01:7a:96:ec:
                    51:fa:48:49:d8:71:a4:ef:dd:bc:d9:a2:ff:7a:56:
                    92:a8:92:c6:ce:ae:5b:88:a1:00:89:55:1f:4d:6e:
                    f8:c6:63:ef:95:07:79:6c:0b:c6:11:41:b3:d3:99:
                    26:b6:fd:e5:c1:1a:85:28:83:d6:99:29:f5:a6:63:
                    06:7c:27:b7:f2:75:c4:ff:c8:1f:2d:ef:e4:9f:f9:
                    5c:25:d2:21:58:50:fe:a6:4f:b3:68:b8:31:c4:61:
                    48:41:cd:4a:fb:05:1c:46:a1:ee:3b:62:49:45:b2:
                    9b:66:47:80:3f:c8:0c:9c:34:2a:57:e7:cc:80:e4:
                    43:9f:9d:ee:90:60:ae:70:aa:6b:99:99:b3:12:c6:
                    ba:dd:24:20:db:11:51:4c:e7:bb:85:c9:49:f6:fb:
                    e5:ae:05:4d:69:84:6c:82:f0:4d:80:b7:42:25:31:
                    02:db:12:3e:1e:3c:b2:25:b7:d9:af:33:d7:65:72:
                    a3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B1:B8:A5:C4:A0:14:FB:94:F0:92:60:70:98:EC:5F:6B:C0:B5:A9
            X509v3 Authority Key Identifier:
                keyid:6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:b6:d0:14:d8:c7:cf:fe:08:16:c6:a5:53:aa:be:d0:83:04:
         a3:5e:b8:02:8b:f7:a3:1c:85:74:aa:cf:71:75:e8:f3:10:d2:
         7d:36:32:07:7d:40:a6:03:c7:55:0a:6b:56:20:f3:91:40:3f:
         14:5e:d8:fb:f7:34:4b:04:a3:9a:3f:a4:fe:44:18:58:88:84:
         f4:6b:40:fd:bd:c0:fd:61:32:dc:4d:b3:a4:7c:d9:d6:85:da:
         96:92:ca:65:10:e4:f9:71:42:33:0f:ad:28:a5:13:7f:fc:eb:
         dc:0d:03:14:3e:be:72:39:2d:00:58:ef:79:a0:9e:13:41:77:
         91:58:03:7e:73:79:4a:80:64:1e:51:3c:7b:44:97:3a:8d:0a:
         fd:88:dd:5f:c5:78:75:59:84:8f:1a:1e:9f:4a:f3:b8:02:63:
         0c:58:9a:5b:e1:d0:3a:e1:6f:e6:79:97:31:dd:db:1a:fe:9c:
         71:3d:0a:38:6f:bb:1e:77:ab:14:d3:26:b0:f4:0a:7e:a6:1d:
         28:7a:0e:a9:10:40:6a:e0:0e:30:57:47:ca:1f:07:fe:32:52:
         99:19:ed:ac:12:31:8a:64:59:e3:c7:bf:d5:46:ac:c7:44:2c:
         81:ec:00:89:75:fb:31:0d:3e:6d:c1:b2:e5:e9:74:fb:9b:2b:
         97:90:db:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 04:49:25 2025 by rpki-client