Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft
File:                     8Cl9DkUxodYqla9dLyLvJAja0pw.mft (raw, json)
Hash identifier:          w/gBZw/RCHo5ayE6YfwcuBGcpoLwC6t7Dn42qKlDSKo=
Subject key identifier:   CF:1E:40:B6:84:95:8F:82:32:FC:45:25:42:80:50:A9:13:34:3B:E2
Authority key identifier: F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C
Certificate issuer:       /CN=A91BF312/serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C
Certificate serial:       07DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft
Manifest number:          07C9
Signing time:             Sat 06 Sep 2025 21:27:37 +0000
Manifest this update:     Sat 06 Sep 2025 21:27:36 +0000
Manifest next update:     Sat 13 Sep 2025 21:27:36 +0000
Files and hashes:         1: 8Cl9DkUxodYqla9dLyLvJAja0pw.crl (hash: w6/I5d8k20aA7Cxi62elcOv6U4JEdIdeL8Tp5Kgp4OE=)
                          2: DF3CAFC44D9E11F0B1307858C4F9AE02.roa (hash: nNMfwVwGreVHShqHhiSA1wDrVojq2wBr5IqezlVe7oA=)
                          3: 23AF26C40C2B11EBAD607865C4F9AE02.roa (hash: lqzj6YduHCJKV8dYpz5WAfuKsZiHyQ1FWQ0JXN7wCvU=)
                          4: 5ECF5AFE37CC11F0AE950A5FC4F9AE02.roa (hash: npjQiEYYdVjWG8dKeFVFQ6M5ppQB2z0yEbCwP4ngirc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl
                          rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 21:27:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2011 (0x7db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF312, serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C
        Validity
            Not Before: Sep  6 21:27:36 2025 GMT
            Not After : Sep 13 21:27:36 2025 GMT
        Subject: CN=68bca749-a67c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:26:55:7d:02:3b:cc:93:65:07:ba:5d:fa:1d:
                    93:45:f4:4b:2b:3b:24:a9:ee:30:40:77:6b:36:95:
                    c8:53:05:bf:b9:38:03:09:34:86:76:de:40:b1:27:
                    5e:9c:50:94:0c:b5:0e:82:35:06:82:d1:49:fe:64:
                    2e:b8:b2:60:12:ec:d2:6f:bd:f8:a7:ee:2f:9e:c4:
                    fc:2a:e4:df:b7:97:d1:60:7d:1c:ee:10:31:01:b7:
                    ac:5c:a3:1e:a7:9a:f1:36:f7:8a:07:78:df:bf:20:
                    b6:93:cf:6d:f7:4c:30:e9:89:dd:fe:4c:25:74:d4:
                    38:d1:93:cc:33:5c:5f:98:05:c1:94:87:6a:30:c5:
                    19:83:8d:92:db:95:75:3e:1b:a6:3b:cf:68:d4:16:
                    27:d4:70:cc:9c:71:2b:3f:3d:0e:d0:e4:0f:29:a4:
                    23:4b:10:08:2e:ef:ae:81:a6:bc:55:0c:0f:ff:39:
                    1a:25:1e:ae:53:1d:a0:28:32:fb:c8:b9:53:9f:e7:
                    aa:a9:7c:45:0f:c8:4d:b7:0a:d1:2d:df:05:14:df:
                    14:6e:58:97:b8:3c:f8:93:ee:8e:3e:25:b4:1f:b8:
                    f4:b8:2b:f2:9f:43:ea:fe:be:f9:42:3a:54:63:bf:
                    92:c7:36:9b:22:ae:31:f6:78:7a:df:79:a0:58:27:
                    66:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1E:40:B6:84:95:8F:82:32:FC:45:25:42:80:50:A9:13:34:3B:E2
            X509v3 Authority Key Identifier:
                keyid:F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:84:42:11:2b:8b:26:8a:e4:27:cd:89:bd:e7:f2:97:45:17:
         a5:09:d0:d4:ce:6f:e9:c9:ae:72:2f:29:f2:a6:66:0f:92:69:
         24:16:d8:b0:cb:25:5a:75:56:b8:73:a1:f2:68:bb:2c:8b:6c:
         0e:72:b5:69:ea:5a:61:86:e3:d5:23:e1:92:1f:2d:67:94:a1:
         22:61:90:8a:1e:da:2a:ee:d9:a7:28:8e:2a:5f:90:2d:85:ac:
         26:4a:9d:42:68:2b:98:30:7b:f4:e8:4b:5d:1d:56:99:8e:a5:
         b3:54:21:13:4a:dd:df:d2:78:e9:6c:5d:92:84:d7:45:62:9b:
         af:0a:83:c4:7a:f6:39:4a:da:4a:72:6f:68:bc:d3:17:cd:6a:
         83:90:bc:62:e3:0f:8d:d4:dd:8d:c8:42:50:7a:5f:10:6e:01:
         c6:69:7c:63:d5:72:8e:fd:88:d5:29:1c:04:13:9d:57:1a:cd:
         6e:f4:ec:27:01:6d:5c:32:17:0f:41:dc:f0:8d:ce:1e:61:2b:
         44:d9:16:05:25:5d:a7:9c:62:35:d4:47:3f:35:1b:1e:85:8f:
         93:c1:18:85:41:83:b6:a4:d1:08:b2:e3:c2:ce:80:5a:00:c5:
         d0:3f:cf:c9:bb:de:fd:72:9d:c2:ed:98:d7:24:33:b0:31:d9:
         ba:5c:e4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 06:28:10 2025 by rpki-client