Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
File:                     n-iB2L0yrRWre-e07E91IhJUbHY.mft (raw, json)
Hash identifier:          qyxjeIngUEJ4CsvbJUqyfh+aaikG7IhEi0OweusyOgM=
Subject key identifier:   3A:E5:89:A2:32:4E:53:76:D1:7F:89:D8:B4:87:F7:88:1D:49:91:A4
Authority key identifier: 9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76
Certificate issuer:       /CN=A9118FFA/serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
Certificate serial:       DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
Manifest number:          DA
Signing time:             Sat 09 Aug 2025 05:57:27 +0000
Manifest this update:     Sat 09 Aug 2025 05:57:25 +0000
Manifest next update:     Sat 16 Aug 2025 05:57:25 +0000
Files and hashes:         1: n-iB2L0yrRWre-e07E91IhJUbHY.crl (hash: ROGczM0cjBmhJCVgT0vnu3zO5caWyvqK4wqBm+ZZ780=)
                          2: 2C6BA5E82EB511EFBCC65925C4F9AE02.roa (hash: 9SfUJfJUPtuZxpNRWiY6Pmy+Ome8ao9OIJR1s6GbHE8=)
                          3: E80A0D282B9D11EFB61F1148C4F9AE02.roa (hash: F0SsWsfme5DR54sccnOQA0ilylY47//E27uoZDHPm3k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl
                          rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118FFA, serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
        Validity
            Not Before: Aug  9 05:57:25 2025 GMT
            Not After : Aug 16 05:57:25 2025 GMT
        Subject: CN=6896e346-c6ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c8:83:47:86:e6:2d:2a:1c:ab:1e:a4:73:9a:
                    78:9f:55:cb:fe:36:b7:ee:fa:9e:c9:d1:21:e5:56:
                    be:91:d1:79:29:30:8a:4b:6b:1d:01:3a:e4:96:13:
                    d4:56:80:fc:60:98:17:31:01:08:26:66:52:dd:fa:
                    97:00:b0:f1:68:43:24:52:10:00:a6:ef:02:03:40:
                    71:6b:40:79:3b:70:50:22:9d:34:36:c9:dd:41:60:
                    4d:f6:92:0a:42:ab:93:eb:b7:77:7c:40:37:bc:fb:
                    af:fc:6f:0e:1a:83:26:90:30:c2:af:96:5b:48:e0:
                    89:e2:2e:04:f5:3b:e5:91:80:75:b3:d6:40:33:54:
                    3d:10:6e:98:e9:55:63:b6:e5:7a:7e:75:4f:8f:a5:
                    19:84:c6:a9:a9:25:df:21:ce:86:91:fd:2b:14:4c:
                    c0:bf:45:72:1c:9b:e1:b6:71:2a:a4:84:8b:49:99:
                    d8:df:21:8f:22:43:aa:a1:4e:88:c9:d7:03:70:bf:
                    c2:f9:df:fd:cc:5a:cd:a1:22:a9:86:7e:31:a8:a3:
                    f5:cc:ae:46:44:24:d5:f4:cc:39:e7:de:23:d6:0d:
                    1b:5c:ce:f7:d8:92:5d:23:d5:47:14:cd:70:31:20:
                    b9:f5:c5:f5:08:47:d9:15:16:99:d9:a1:9c:aa:02:
                    be:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E5:89:A2:32:4E:53:76:D1:7F:89:D8:B4:87:F7:88:1D:49:91:A4
            X509v3 Authority Key Identifier:
                keyid:9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:1b:9c:6a:ef:69:ae:3e:7a:8c:5b:d0:f9:72:12:32:14:08:
         42:4b:52:38:fe:fd:37:69:e3:9d:59:ba:57:2b:3f:d7:b8:f2:
         3d:91:e3:1d:8a:b4:9b:80:34:73:ed:d7:71:a7:a0:85:84:4d:
         b5:db:bf:50:5a:66:95:cf:09:d8:5f:12:c3:72:b8:b5:fb:3c:
         c6:19:de:6a:af:2b:df:82:c7:2c:6a:6e:b4:b4:cf:8e:65:f1:
         35:a2:b7:b1:d3:f4:b1:58:62:5b:5e:6b:21:3f:8a:e3:ce:d3:
         89:aa:56:ad:ea:ce:9f:67:d3:bc:6c:ea:e9:53:f2:b3:96:31:
         c1:70:fa:c6:86:20:13:b7:2d:8a:67:11:15:84:f8:3f:09:ad:
         b4:ab:9b:5f:8f:f7:a4:0d:ae:a0:38:91:aa:12:d8:c9:6e:32:
         77:e4:ed:12:f0:36:1b:53:57:d2:84:38:52:11:62:43:55:95:
         f6:01:0b:38:14:5d:df:f6:78:e3:34:4d:a5:1f:1d:bc:03:dd:
         51:29:b4:ed:fd:14:1b:53:7b:6f:54:be:d2:bf:3f:48:31:f3:
         f4:7a:51:37:93:8d:67:90:de:05:b7:cb:1f:c5:fc:98:86:65:
         54:e5:9f:74:ee:3a:28:6f:74:be:7f:8a:55:a5:bc:2c:f8:44:
         04:8b:b1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:17:09 2025 by rpki-client