Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft
File:                     8reSQiqNuXlUdjz-iRZuki5jGYQ.mft (raw, json)
Hash identifier:          lHlm0jglqHtXWJX2K1ydPcu/LDwuudOnjDOHUUAFM9w=
Subject key identifier:   DC:9F:BA:26:3D:01:0B:BA:E8:B7:47:E8:0F:B2:F3:EA:41:6F:BD:AC
Authority key identifier: F2:B7:92:42:2A:8D:B9:79:54:76:3C:FE:89:16:6E:92:2E:63:19:84
Certificate issuer:       /CN=A9131AB9/serialNumber=F2B792422A8DB97954763CFE89166E922E631984
Certificate serial:       013A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft
Manifest number:          0137
Signing time:             Mon 11 Aug 2025 04:40:06 +0000
Manifest this update:     Mon 11 Aug 2025 04:40:06 +0000
Manifest next update:     Mon 18 Aug 2025 04:40:06 +0000
Files and hashes:         1: 8reSQiqNuXlUdjz-iRZuki5jGYQ.crl (hash: 2RfZfxcM9Ocz7lNPnnI1vuHGzbiWag052ZS4/kxDZvo=)
                          2: F609B0309D5F11EE94076E6FC4F9AE02.roa (hash: uMIbIaAd2q/fAdMbL/3IffciHlHLKK1YHyqz9FvJ9Xw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.crl
                          rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131AB9, serialNumber=F2B792422A8DB97954763CFE89166E922E631984
        Validity
            Not Before: Aug 11 04:40:06 2025 GMT
            Not After : Aug 18 04:40:06 2025 GMT
        Subject: CN=68997426-3cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:56:ec:73:d1:55:ab:40:75:3a:b4:b6:1e:7f:
                    a3:92:9d:05:ee:43:90:2d:5c:6a:ca:f7:49:5d:30:
                    47:6f:f7:6c:98:98:6c:a6:36:e3:56:c8:83:e6:54:
                    e5:44:29:ab:8d:ac:51:68:a2:54:46:58:28:ba:1e:
                    18:63:b8:87:d7:ce:03:93:6b:1e:2c:06:d7:c3:5e:
                    a8:fd:56:43:90:5c:86:5e:cf:a9:f0:d6:6c:0b:b0:
                    07:a2:96:e1:b9:6f:d6:ba:8d:b0:95:98:c2:a6:db:
                    20:08:0b:38:cf:82:b9:96:99:ea:ec:3c:1a:af:ae:
                    88:12:d1:dc:55:11:af:22:28:dc:38:e6:6b:7c:94:
                    cb:40:e8:99:cb:78:9c:26:d5:b7:9a:43:ab:a4:52:
                    34:8b:8a:02:44:e4:86:8f:5f:2e:43:f1:bb:63:68:
                    c3:8c:fc:2b:9e:33:f2:83:46:68:f2:33:c0:70:f9:
                    61:c8:84:35:a1:35:d8:99:85:1c:61:38:81:1f:39:
                    4b:a5:11:81:c9:b6:7d:70:42:35:28:bd:b4:94:74:
                    e9:d1:ac:e2:54:1e:5c:ab:85:04:f8:49:91:cf:c9:
                    70:d6:c8:1b:86:7b:9b:eb:0a:79:56:aa:e3:8b:43:
                    1c:09:99:c0:96:14:20:da:bf:72:e6:1c:fd:2d:2d:
                    25:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9F:BA:26:3D:01:0B:BA:E8:B7:47:E8:0F:B2:F3:EA:41:6F:BD:AC
            X509v3 Authority Key Identifier:
                keyid:F2:B7:92:42:2A:8D:B9:79:54:76:3C:FE:89:16:6E:92:2E:63:19:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:c7:11:c2:47:3f:2d:9d:0f:fe:a3:c9:5c:0d:8e:08:2f:bd:
         43:1f:79:35:b9:15:5c:9e:27:90:6a:51:8f:41:e0:52:f2:81:
         d9:03:e7:e0:96:3f:65:6d:fc:4b:1e:e6:50:99:54:4c:b5:c7:
         28:55:f1:ed:89:de:98:ce:a9:1d:9b:01:fc:9d:70:62:b5:37:
         16:83:00:d1:cf:8f:c3:6e:4b:20:1f:2e:66:19:5c:dc:96:43:
         6e:96:28:14:8e:6c:e6:f2:af:ab:66:64:ba:6b:92:0b:b4:99:
         3d:5c:80:96:fc:e6:ce:e7:24:e9:b6:72:56:6e:c4:84:b6:ab:
         9b:42:86:62:3d:31:14:f1:bb:96:c3:59:c3:ab:fd:1c:aa:87:
         3a:1b:6b:f7:21:24:08:c8:53:74:1a:4b:25:25:94:b0:05:21:
         18:c2:f9:42:bf:d6:ec:38:05:68:e4:79:7f:b3:d2:c2:e6:2d:
         0f:6b:25:50:4f:7d:cf:13:55:fa:55:ce:e8:f3:b9:c0:53:25:
         ee:f5:ee:ab:6c:27:9f:48:97:db:9e:9c:6f:0f:95:df:52:0d:
         8d:8e:c9:0d:cf:c8:7a:0c:55:3e:76:ee:06:db:49:21:70:62:
         90:86:72:b0:81:49:65:1e:2a:4c:c5:de:0f:a4:7a:26:bd:77:
         5a:ea:a7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:36:42 2025 by rpki-client