Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
File:                     9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft (raw, json)
Hash identifier:          8d3fgKKx+98BBog/06A224g6S5Et2zrye+tLNF5fxBQ=
Subject key identifier:   2A:1D:AB:08:C9:EA:DE:AC:D0:51:3B:70:D3:F0:32:21:AC:07:88:F6
Authority key identifier: F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0
Certificate issuer:       /CN=A91D536E/serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0
Certificate serial:       074C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
Manifest number:          0747
Signing time:             Tue 10 Jun 2025 21:34:23 +0000
Manifest this update:     Tue 10 Jun 2025 21:34:22 +0000
Manifest next update:     Tue 17 Jun 2025 21:34:22 +0000
Files and hashes:         1: 9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl (hash: m8KYGgefViu0/4cJduip5qtB7SuYCX3eBTXDwHFemOA=)
                          2: 6091D05229FC11EB861CCA7FC4F9AE02.roa (hash: oXfgRMCkFYhKUKORBUUeo77MRVn7Mx2xxFkJ1oK4WsM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl
                          rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 21:34:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1868 (0x74c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D536E, serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0
        Validity
            Not Before: Jun 10 21:34:22 2025 GMT
            Not After : Jun 17 21:34:22 2025 GMT
        Subject: CN=6848a4de-d8b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a5:b6:24:f3:cf:96:c3:a4:07:0f:5e:0b:67:
                    af:37:6c:ea:cf:09:52:db:ff:9d:b3:13:8d:18:08:
                    fa:c4:49:86:67:d2:6c:b0:c8:e0:e7:46:13:9e:28:
                    69:bb:44:5e:39:1b:42:16:47:d8:0e:f8:12:e0:0d:
                    24:7b:05:53:0c:93:a8:c4:2c:71:d3:f6:2e:69:e9:
                    22:c9:4c:f7:8d:db:6b:0a:bf:e2:5f:61:66:4f:00:
                    de:a8:a2:70:c0:67:c5:56:7a:75:37:84:e3:f4:20:
                    80:90:dc:9b:63:b3:fb:fa:f0:94:e6:ac:d9:4b:f5:
                    fb:5d:bf:58:61:67:c5:84:c0:ed:cf:f7:5f:39:f0:
                    f9:01:96:fd:e1:4b:39:d8:7e:19:b5:35:ba:1b:05:
                    4f:a4:52:e7:f7:71:b9:4a:88:ff:10:09:5b:92:4f:
                    27:46:39:72:0e:60:a7:af:4d:f4:00:15:9f:da:c6:
                    8d:06:3d:39:c4:2a:85:d0:2a:2f:34:27:4d:53:f1:
                    25:f5:a7:79:83:01:0c:f2:e4:54:4b:5e:83:02:7a:
                    24:2c:14:75:5a:51:a7:75:5e:fa:f4:ed:9d:e2:bd:
                    d4:ae:b6:e5:c2:76:f1:6d:10:7c:ff:f4:67:3e:1e:
                    94:b1:83:17:3c:a9:8b:31:68:5e:87:e2:b9:42:5a:
                    ae:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:1D:AB:08:C9:EA:DE:AC:D0:51:3B:70:D3:F0:32:21:AC:07:88:F6
            X509v3 Authority Key Identifier:
                keyid:F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d9:a0:2b:50:dd:a2:f8:bf:b3:87:29:18:cd:73:7c:e6:b8:
         72:b4:61:e3:86:df:4b:13:f9:9f:00:58:fb:b5:7f:b1:dc:9c:
         8d:cf:31:71:6d:af:98:df:f3:22:10:46:23:43:a5:cc:7d:81:
         02:e7:e9:69:bb:49:99:49:1c:5f:63:3e:36:45:da:d8:f6:68:
         bc:18:d3:0f:22:5d:09:2e:86:be:49:d2:16:1d:3c:12:2a:af:
         f5:54:a0:aa:28:fc:73:fc:ba:b0:15:19:20:da:ee:27:88:5c:
         76:25:a7:c7:0b:40:ba:81:6b:64:cf:e4:72:98:1e:c3:a3:d5:
         92:82:80:fc:ec:69:a0:93:44:a4:7a:c7:ab:20:cc:b9:2c:4c:
         a8:95:c9:fa:a4:63:a3:23:05:4a:b5:12:09:e5:4a:4a:fd:2e:
         83:b9:c9:e7:a5:a0:bb:e0:64:16:44:a3:a4:ae:4a:0d:57:a2:
         ed:6b:e7:94:35:e1:03:dc:ee:cb:99:cb:42:8b:87:c3:66:79:
         cd:06:0e:7f:03:4d:2b:0a:1c:2f:c4:cf:a6:b5:83:5f:8d:ee:
         3c:b6:81:28:2b:14:3f:ef:41:c0:c2:01:76:b8:d5:2a:6e:7d:
         2e:78:36:84:e7:5c:28:63:0b:31:fb:e1:76:f8:09:dd:0a:cc:
         10:4f:a2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:52:21 2025 by rpki-client