Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
File:                     Im9yidTjf-ziJgxk07y6esAxWnU.mft (raw, json)
Hash identifier:          Zkl8GkSZ03g0VQ2zjuOtypTqyEa5HIZ7Rv5Q8jKCjF8=
Subject key identifier:   7A:B4:2D:6E:F3:09:9C:FB:06:B4:65:D9:1A:6B:C0:5E:36:9F:DC:76
Authority key identifier: 22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75
Certificate issuer:       /CN=A91BC269/serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75
Certificate serial:       0359
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
Manifest number:          0352
Signing time:             Fri 05 Sep 2025 01:21:13 +0000
Manifest this update:     Fri 05 Sep 2025 01:21:13 +0000
Manifest next update:     Fri 12 Sep 2025 01:21:13 +0000
Files and hashes:         1: Im9yidTjf-ziJgxk07y6esAxWnU.crl (hash: 7luujEGxwsX88ff4TBLbE/20V1fLz0gdiLolxXjb9Ws=)
                          2: 16DDC0F4CFE811ECA193B36BC4F9AE02.roa (hash: d8hKEngO/LeUHQoe5AIEcocjfTWcuilabUG2KLlGFLg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl
                          rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 01:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 857 (0x359)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC269, serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75
        Validity
            Not Before: Sep  5 01:21:13 2025 GMT
            Not After : Sep 12 01:21:13 2025 GMT
        Subject: CN=68ba3b09-6604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3a:d5:ce:f7:f1:35:f5:f1:dd:69:b2:d6:8e:
                    e8:cd:cf:7a:f5:6e:ec:d4:e0:88:9a:91:08:1d:50:
                    b4:88:0b:15:75:c5:42:0b:05:d0:cd:93:17:94:68:
                    ea:d2:9e:0e:e2:8c:9e:c4:45:09:a1:9c:40:f7:87:
                    51:d7:08:f9:c6:ec:46:15:87:92:ff:31:4b:09:28:
                    83:da:d1:7b:90:e3:4a:e7:3f:01:a1:6c:b3:af:7b:
                    e6:ac:36:df:eb:84:95:cc:a7:9b:f3:e1:a6:04:b6:
                    d4:eb:57:9f:f3:2b:63:5e:60:5a:7a:39:11:3c:92:
                    10:a5:25:09:c3:8d:57:75:f5:8f:25:f3:c0:1d:02:
                    89:4b:79:b7:f4:40:c0:91:5d:5a:ef:a3:ec:21:52:
                    b0:01:d5:4d:b9:7b:0b:9d:3a:2e:de:d6:4f:fa:24:
                    d6:b3:be:d7:cd:a5:5d:fc:24:ee:47:00:07:9a:74:
                    f3:ec:c0:47:e3:19:70:fd:26:79:7f:5d:0c:75:b7:
                    7c:6f:84:3c:f4:55:d5:fa:e2:94:79:a4:29:a6:42:
                    47:00:c8:08:f3:f1:73:39:b7:a1:27:a8:af:54:88:
                    56:36:f7:fe:da:ac:97:e3:1e:9b:0f:32:99:8d:0b:
                    20:7d:db:ee:4d:05:d2:9e:3f:ee:f7:54:74:90:c7:
                    be:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B4:2D:6E:F3:09:9C:FB:06:B4:65:D9:1A:6B:C0:5E:36:9F:DC:76
            X509v3 Authority Key Identifier:
                keyid:22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ff:ac:9c:62:7b:db:19:55:2e:0e:50:02:2b:89:1a:2a:50:
         88:a1:4a:8c:51:9f:3b:d1:fa:03:3f:1f:26:40:ee:dc:c9:cc:
         13:c3:13:6b:54:0a:cf:fc:24:82:6f:86:3d:a9:2b:b0:13:17:
         ef:c0:89:0a:88:8a:ac:63:62:d6:b7:3d:34:f4:80:91:e4:e6:
         b2:6c:1a:8d:9d:e7:12:be:bc:a2:48:78:41:87:50:9d:c4:23:
         67:a8:4e:08:ac:c5:8b:fd:67:62:64:99:13:2f:dd:4f:5e:28:
         59:95:92:5a:89:b2:66:94:98:82:51:64:33:fd:fc:4f:b0:84:
         92:62:fa:1b:dd:54:e2:f9:44:6b:cf:cb:93:48:c2:86:23:96:
         b9:e7:b8:06:d1:e2:0a:02:22:da:87:be:f5:86:a4:f8:98:25:
         67:82:e9:86:ec:fc:e6:6e:17:22:8e:96:b3:a6:b4:24:7e:25:
         df:8f:98:08:ac:49:95:25:6c:69:e1:91:26:5e:86:35:36:19:
         ad:b4:c3:c4:31:71:b1:cf:3e:66:05:d8:f9:d8:93:a0:e1:7a:
         a5:12:c2:91:17:72:34:e2:e5:5c:cd:12:84:4e:98:ff:b5:b4:
         ac:60:05:eb:c7:c1:b8:ff:c9:97:e8:ab:dc:bf:30:28:0a:00:
         d1:49:4c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 20:49:58 2025 by rpki-client