Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft
File:                     9US5wrG96hw7N0NIuNFeNn5qD0I.mft (raw, json)
Hash identifier:          X+1zUlv+2yW79s2nLHdKF0B1/YBQXyj6rYmkhiLOKbM=
Subject key identifier:   B1:9D:B4:C8:22:EF:51:C5:05:12:EE:68:33:A7:C2:EC:90:B6:FA:25
Authority key identifier: F5:44:B9:C2:B1:BD:EA:1C:3B:37:43:48:B8:D1:5E:36:7E:6A:0F:42
Certificate issuer:       /CN=A91139AB/serialNumber=F544B9C2B1BDEA1C3B374348B8D15E367E6A0F42
Certificate serial:       0775
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft
Manifest number:          08BF
Signing time:             Sun 10 Aug 2025 21:35:24 +0000
Manifest this update:     Sun 10 Aug 2025 21:35:23 +0000
Manifest next update:     Sun 17 Aug 2025 21:35:23 +0000
Files and hashes:         1: 9US5wrG96hw7N0NIuNFeNn5qD0I.crl (hash: +ekzb5Wu68VGovTBMh6DOeSjeg/U/APBeW3VThzegH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.crl
                          rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1909 (0x775)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91139AB, serialNumber=F544B9C2B1BDEA1C3B374348B8D15E367E6A0F42
        Validity
            Not Before: Aug 10 21:35:23 2025 GMT
            Not After : Aug 17 21:35:23 2025 GMT
        Subject: CN=6899109c-779a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:89:fa:4b:f5:89:3e:5c:d1:3b:ff:a0:39:09:
                    e6:57:a2:de:c6:fd:e0:83:b8:cf:9c:f1:ad:4d:5f:
                    48:7f:41:e1:53:13:79:dd:74:42:06:9c:2e:3d:c3:
                    b9:8b:05:22:11:6a:67:87:7f:cb:bf:67:b1:51:46:
                    3d:11:01:ab:75:ba:07:aa:2f:ec:03:18:85:ed:80:
                    21:8c:2a:30:55:f5:5d:c4:bd:1c:bc:bf:83:f6:e5:
                    fd:3b:eb:07:3c:d3:ec:d2:96:2b:ec:ac:4b:f6:a3:
                    7e:69:1b:a4:af:f6:51:4e:d8:e5:49:7a:29:7e:e5:
                    7e:a9:fd:35:fd:9b:ec:20:1b:2d:f9:64:ad:bd:dc:
                    ca:e0:49:0a:ba:64:14:db:b8:00:00:15:98:de:02:
                    d1:e9:d6:94:59:ca:6b:dc:b8:e5:51:38:80:c8:0d:
                    a3:cb:aa:87:98:50:8e:00:08:06:a2:ee:f2:f2:29:
                    ba:be:bd:27:61:30:85:d7:c9:32:49:62:2b:0b:e1:
                    0e:d5:fa:22:db:b8:88:10:ee:fb:29:00:3a:7e:d3:
                    32:0e:f7:d1:7f:d1:22:a4:7d:7f:ee:43:2d:d4:6b:
                    a9:15:0a:ea:86:9e:f9:03:c0:a6:31:f1:9f:92:9d:
                    19:6f:9e:02:89:e2:04:71:b3:24:9c:97:59:45:5a:
                    6d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9D:B4:C8:22:EF:51:C5:05:12:EE:68:33:A7:C2:EC:90:B6:FA:25
            X509v3 Authority Key Identifier:
                keyid:F5:44:B9:C2:B1:BD:EA:1C:3B:37:43:48:B8:D1:5E:36:7E:6A:0F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a1:7b:c2:2d:ae:f0:01:4a:9e:aa:84:f0:7c:c0:c2:74:89:
         f3:7e:9a:1b:d5:47:2a:87:d2:3c:e8:43:7c:dd:36:2a:f5:52:
         dc:a3:e2:29:e0:d5:a8:9d:bd:be:07:fd:46:d9:7c:8d:68:6d:
         9a:9b:24:ee:ad:48:29:46:49:48:0a:36:c2:0a:c0:f4:0b:c1:
         69:fe:9c:89:f4:64:aa:21:dd:71:8c:79:99:d8:0d:f7:11:ec:
         48:60:13:90:e9:80:ea:41:1d:28:e2:a5:81:eb:dd:95:cf:22:
         4c:e1:69:60:a4:b3:02:df:30:9b:af:ae:9e:1a:10:5a:38:ba:
         19:7d:8f:bb:c6:8a:6a:fc:a9:bc:06:9b:4b:0f:2b:d7:1b:ae:
         94:68:77:fd:79:10:c1:9a:e7:68:0d:63:2c:43:3b:af:a7:ad:
         38:d6:76:f7:ed:cc:64:fa:c6:c5:b0:51:7e:7e:d5:3d:90:8a:
         88:1b:bc:4f:a5:0f:f8:0d:24:f8:ed:e4:0e:6c:5f:5e:7b:92:
         f9:d8:92:33:7b:c2:25:9f:b3:d1:a7:c4:f6:a6:d2:f9:1e:b5:
         26:34:1b:ea:95:ff:64:b4:40:e1:b9:ba:33:a8:1b:d1:e0:d1:
         dc:ec:f5:cc:f5:4b:c1:65:c8:75:c5:4d:2d:59:95:a2:32:4e:
         7b:f1:87:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:51:43 2025 by rpki-client