Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
File:                     STl-M7McCo9o_NIHK9qazLZdAuw.mft (raw, json)
Hash identifier:          AHIVaXooAKyA4YTgru213jnLOAibikHwI2A1z4xVIu8=
Subject key identifier:   D1:D6:21:40:01:10:35:E8:B4:B3:E5:6A:20:33:03:9B:1E:A8:9C:E9
Authority key identifier: 49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
Certificate issuer:       /CN=A9135FB6/serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
Manifest number:          85
Signing time:             Sat 09 Aug 2025 07:06:44 +0000
Manifest this update:     Sat 09 Aug 2025 07:06:44 +0000
Manifest next update:     Sat 16 Aug 2025 07:06:44 +0000
Files and hashes:         1: STl-M7McCo9o_NIHK9qazLZdAuw.crl (hash: 2lzD2I37DicxR1UohiizWyti9ezHo9KlHUccmwpoKkc=)
                          2: F63554A0AC6411EF85E4707CC4F9AE02.roa (hash: nkmyG+cerv7WGoEtCDY5qePml4WahDx59uvEgKxWEOI=)
                          3: F6BDBBE2AC6411EF85E4707CC4F9AE02.roa (hash: 4buNpsqjVzrT4b5mx2ji/Z/fJ9vNVzZvP9Ey1iD/FnI=)
                          4: F5B752E4AC6411EF85E4707CC4F9AE02.roa (hash: BIhYQXo+ynpaauxBVASHvuQCNYPCsIa0qxYybQkkt8g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl
                          rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135FB6, serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
        Validity
            Not Before: Aug  9 07:06:44 2025 GMT
            Not After : Aug 16 07:06:44 2025 GMT
        Subject: CN=6896f384-4ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0c:c9:f9:2a:fe:d5:64:ee:2f:3a:c9:9f:64:
                    70:43:eb:98:ee:63:d2:79:31:dd:5e:7b:53:20:3e:
                    22:58:28:6b:dd:dd:6b:0c:a7:ba:1a:ed:d3:cf:e5:
                    17:86:74:e0:8b:ac:fb:77:eb:ab:a0:74:21:f7:9f:
                    8c:ab:94:bf:f6:19:0a:1c:82:94:14:39:b5:2b:24:
                    bb:38:07:78:e6:c4:ca:9c:f2:65:1a:27:63:7f:ef:
                    f2:68:d2:00:23:4f:d5:32:3d:27:a4:43:a7:60:ed:
                    7b:f0:08:cf:f7:2a:cf:25:be:9a:00:bb:0f:fa:26:
                    e9:bb:db:88:17:70:ae:98:ec:58:b9:2d:b3:7f:19:
                    24:4c:9f:6e:ce:f4:a2:a2:2e:37:16:e2:f6:d1:a2:
                    a5:f5:a5:50:87:fc:22:a7:45:df:67:3b:52:b5:a5:
                    05:39:01:f6:fb:97:6c:cc:18:8a:97:96:88:ca:d5:
                    7d:09:d3:74:d2:84:fe:fc:67:57:28:55:20:19:29:
                    17:e8:36:43:a5:50:25:f8:7f:71:f8:69:25:41:5b:
                    2d:71:c5:66:37:9f:94:69:29:21:18:32:89:10:58:
                    61:e8:4c:7a:1b:67:29:80:f4:6c:61:d0:45:50:91:
                    8b:70:de:6c:d7:05:07:ba:19:d0:a0:10:61:db:2d:
                    3d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D6:21:40:01:10:35:E8:B4:B3:E5:6A:20:33:03:9B:1E:A8:9C:E9
            X509v3 Authority Key Identifier:
                keyid:49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:e3:09:56:b3:9d:48:79:3f:74:97:4a:65:4c:17:64:15:cc:
         f9:b0:4c:a1:d9:46:b3:db:43:09:80:14:65:89:89:f2:64:93:
         e7:f3:98:4d:c7:32:78:a0:3e:a8:aa:0f:0a:cd:26:99:bb:15:
         9d:10:ad:41:18:3c:13:72:a1:e4:d9:8c:30:d4:e3:02:6b:1c:
         1a:d1:b9:f2:1d:df:b0:38:81:68:7f:3a:b6:21:a3:a5:20:72:
         44:91:40:0f:a6:00:66:86:52:71:3f:1f:61:0d:f6:c1:eb:9b:
         c2:8d:97:5a:ea:fe:f7:1c:88:24:28:34:a8:f7:91:6e:89:4b:
         8b:79:bd:cc:24:c6:4e:f3:4f:00:87:90:27:44:18:e1:4f:4c:
         c6:17:3b:8c:d3:db:12:8a:61:4e:c2:d5:39:74:43:4c:b1:fd:
         8f:12:b0:8b:19:aa:c2:9b:8d:db:23:ae:b8:a2:f8:27:6e:3b:
         e8:d4:4a:b6:fa:43:e1:e3:19:93:2d:15:43:55:fe:ef:10:5e:
         53:1a:74:6d:46:3c:9e:ea:f0:ab:fa:8c:1d:c6:aa:10:31:16:
         17:20:6c:87:97:3a:d2:96:a3:3a:ff:0e:78:c8:64:30:6e:78:
         91:74:56:cc:d3:f1:5a:01:7b:c0:21:10:23:da:ca:f3:95:f3:
         9c:fd:fb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:16:32 2025 by rpki-client