Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.mft
File:                     jMU6mSl_HMCgv73r8k4TKw2EHHY.mft (raw, json)
Hash identifier:          NgTODBl9MUJXbI9O5FQHRv5gCZODw93LLuGeIw1lKyQ=
Subject key identifier:   E6:F0:6B:36:A7:AD:19:09:14:94:AC:2C:AA:2E:4C:D9:74:22:9F:F6
Authority key identifier: 8C:C5:3A:99:29:7F:1C:C0:A0:BF:BD:EB:F2:4E:13:2B:0D:84:1C:76
Certificate issuer:       /CN=A9139D93/serialNumber=8CC53A99297F1CC0A0BFBDEBF24E132B0D841C76
Certificate serial:       0112
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMU6mSl_HMCgv73r8k4TKw2EHHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.mft
Manifest number:          010F
Signing time:             Sat 09 Aug 2025 05:21:59 +0000
Manifest this update:     Sat 09 Aug 2025 05:21:58 +0000
Manifest next update:     Sat 16 Aug 2025 05:21:58 +0000
Files and hashes:         1: jMU6mSl_HMCgv73r8k4TKw2EHHY.crl (hash: J60ETQDi0QvIJOwZdzp1Wo+j4+wBxDSR2kPGV2pz0cA=)
                          2: E614FEEED6AF11EEAB03B528C4F9AE02.roa (hash: G17ALsZLxeT9rUtyM+i2zf7iC28VSeb9B4i0ScAYOoo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.crl
                          rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMU6mSl_HMCgv73r8k4TKw2EHHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139D93, serialNumber=8CC53A99297F1CC0A0BFBDEBF24E132B0D841C76
        Validity
            Not Before: Aug  9 05:21:58 2025 GMT
            Not After : Aug 16 05:21:58 2025 GMT
        Subject: CN=6896daf7-55b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8b:25:02:8b:f3:98:3e:2c:43:ad:29:b4:31:
                    77:ef:a0:12:d2:1d:7e:d7:3f:4f:9a:3c:32:42:ef:
                    4f:3e:a0:be:bd:aa:66:f4:7e:c8:ef:0e:1b:ce:98:
                    5e:80:ee:99:c6:cd:34:5d:66:fc:f8:54:a9:2d:3d:
                    54:3f:ab:ef:98:bc:52:4a:73:0b:6d:d4:a4:a3:c7:
                    95:47:85:36:44:d2:7b:d7:51:6a:cf:84:cd:dd:84:
                    eb:c2:07:5b:dc:75:4c:a9:45:cf:c3:12:19:10:aa:
                    08:8d:06:9e:ab:3c:1b:5e:8e:66:f4:00:ad:82:98:
                    86:ed:93:c0:00:6e:0e:dc:b4:2a:ac:ea:84:ab:dc:
                    2b:4c:a6:ad:a6:c8:c6:3b:26:0e:51:f5:40:71:36:
                    9b:10:60:04:16:d0:d8:bc:26:04:39:b2:f6:d9:7d:
                    46:40:f3:38:d9:a4:38:c1:db:81:e6:c8:cc:53:86:
                    e7:d6:0b:bd:ef:46:82:0b:4b:3b:12:49:b4:db:7b:
                    c6:ef:28:80:e6:71:db:4f:80:cc:7d:08:82:be:96:
                    27:a0:cf:6e:85:02:9c:ac:09:3c:27:bd:ae:49:e7:
                    21:6b:43:b1:1c:90:46:85:82:47:40:b9:b1:61:db:
                    95:f8:a8:da:ed:bd:eb:2f:13:c9:ba:e2:87:0a:92:
                    c8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F0:6B:36:A7:AD:19:09:14:94:AC:2C:AA:2E:4C:D9:74:22:9F:F6
            X509v3 Authority Key Identifier:
                keyid:8C:C5:3A:99:29:7F:1C:C0:A0:BF:BD:EB:F2:4E:13:2B:0D:84:1C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMU6mSl_HMCgv73r8k4TKw2EHHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139D93/CCBAAADAD6A911EEACD31668C4F9AE02/jMU6mSl_HMCgv73r8k4TKw2EHHY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:f2:97:5a:e4:b7:46:b4:31:2a:0f:74:23:6c:3c:26:45:d9:
         79:5a:75:d2:07:6f:2d:5e:35:90:d6:19:02:47:97:f1:cb:75:
         46:d9:44:44:06:b3:a9:10:84:6a:c7:0d:3b:3f:23:d4:a6:8f:
         07:b5:7f:05:7b:07:88:0e:60:3b:ae:1c:a2:5a:b9:37:77:6a:
         94:c2:b7:3c:14:0f:f9:00:70:63:46:4b:c5:ad:43:b6:97:e9:
         69:85:fb:0d:00:03:87:27:9d:0f:ef:7d:98:fb:48:02:df:18:
         ca:1c:0f:4b:18:2e:3b:4a:bd:27:f6:8b:f3:c8:b6:4c:68:7e:
         e8:a8:a5:b4:0b:a3:d5:15:58:92:98:22:b1:27:02:03:6d:98:
         29:d1:a8:08:44:84:f8:e7:70:be:3b:88:45:96:84:e3:b5:3d:
         17:13:88:ec:05:7f:ce:f6:4d:2a:34:f7:1e:68:94:64:cb:3d:
         6b:ac:65:71:ce:76:7a:39:05:c2:d2:da:1a:46:95:64:66:0a:
         8d:20:ad:c4:3c:b2:33:fc:8b:08:31:9f:dc:3d:07:b4:f7:62:
         3f:b1:e0:6b:ec:f0:87:72:8e:90:9c:99:ab:0f:0e:29:2d:af:
         51:86:05:74:43:ff:2b:42:83:79:99:68:d2:18:a6:c6:b9:15:
         97:b1:68:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:07:47 2025 by rpki-client