Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft
File:                     H9I4pw6sem_8a5CrMM77dzkhb0o.mft (raw, json)
Hash identifier:          Tq36zng0N6fcvAGgbYUlJDicE/F8JqtPk9uvCGuT53M=
Subject key identifier:   67:24:A7:2F:B9:43:81:5F:84:B8:44:46:24:91:B6:86:F5:D0:E6:CC
Authority key identifier: 1F:D2:38:A7:0E:AC:7A:6F:FC:6B:90:AB:30:CE:FB:77:39:21:6F:4A
Certificate issuer:       /CN=A913DD09/serialNumber=1FD238A70EAC7A6FFC6B90AB30CEFB7739216F4A
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft
Manifest number:          0F
Signing time:             Sat 09 Aug 2025 08:37:27 +0000
Manifest this update:     Sat 09 Aug 2025 08:37:27 +0000
Manifest next update:     Sat 16 Aug 2025 08:37:27 +0000
Files and hashes:         1: H9I4pw6sem_8a5CrMM77dzkhb0o.crl (hash: Q0i83OY0fFk5p6NbaTFEn03m8ZAH3GjjsHV3ZEBL5h8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.crl
                          rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DD09, serialNumber=1FD238A70EAC7A6FFC6B90AB30CEFB7739216F4A
        Validity
            Not Before: Aug  9 08:37:27 2025 GMT
            Not After : Aug 16 08:37:27 2025 GMT
        Subject: CN=689708c7-1dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f9:f9:cd:39:dc:d8:1b:81:b1:5c:68:73:0d:
                    5a:2d:59:de:69:8c:52:a9:65:92:70:9d:0a:cb:8f:
                    9f:89:1b:81:36:ff:5e:06:ae:85:f8:75:3f:50:48:
                    32:bd:ef:5b:b5:86:fc:c0:e8:cc:48:0e:6b:45:04:
                    82:6c:34:d7:7e:60:6c:63:cb:da:4e:85:c6:27:09:
                    5f:67:8a:3f:14:98:66:63:b6:94:4e:ed:2a:17:ad:
                    9f:99:81:4a:d1:43:b0:c5:85:2a:57:71:12:18:b6:
                    42:2f:4f:56:82:c4:aa:de:0f:ff:25:ec:4a:e3:37:
                    bc:c8:dc:91:e0:87:b6:67:a6:89:66:f0:51:60:18:
                    71:d3:6d:62:fe:a5:8c:05:ed:11:99:fe:00:5a:2b:
                    0f:ae:be:47:c2:ce:a4:96:bb:96:84:60:d0:f3:92:
                    2f:3d:c9:f5:e1:42:e6:96:4c:92:1a:70:08:6e:62:
                    47:5e:13:ec:94:6a:94:69:94:d2:41:e1:9b:4a:69:
                    a5:2e:a2:df:7e:cd:b6:92:9f:46:e0:72:62:6f:38:
                    3b:c8:4d:5e:98:27:79:c8:05:7b:50:65:83:19:53:
                    0a:63:c3:65:21:f2:fa:f3:a0:c5:fa:b1:fb:4a:89:
                    db:dc:02:c8:91:d8:67:9e:d0:cd:03:2e:d3:db:f2:
                    86:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:24:A7:2F:B9:43:81:5F:84:B8:44:46:24:91:B6:86:F5:D0:E6:CC
            X509v3 Authority Key Identifier:
                keyid:1F:D2:38:A7:0E:AC:7A:6F:FC:6B:90:AB:30:CE:FB:77:39:21:6F:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:f3:10:6c:ed:19:8d:84:fa:11:37:07:70:eb:83:f6:4c:04:
         50:a8:93:9d:cd:a2:d4:b4:05:3c:52:fb:a9:8f:26:e1:01:40:
         80:03:48:67:96:7d:a2:81:1d:7a:94:24:96:00:f1:0d:33:d0:
         09:17:0c:49:2e:f9:62:19:c2:58:57:53:06:d8:d7:76:1b:1f:
         bd:ba:6f:52:73:10:82:f5:f6:9d:da:5f:43:31:2e:61:f8:98:
         9e:a9:7e:1c:83:dd:79:88:ab:b3:9a:46:b7:19:0d:31:a0:8b:
         84:78:50:af:fd:2b:ab:89:bd:d8:1a:67:96:29:b0:e1:e4:e2:
         82:26:28:8d:ea:a4:6e:8d:ae:43:bb:2b:ba:04:a0:7c:f2:5d:
         86:10:80:ce:c3:1d:dd:74:bf:c7:f6:94:ed:d4:22:36:8b:a0:
         18:32:91:3c:ff:9f:35:11:64:1e:12:36:dd:d9:03:db:50:27:
         b9:9c:6d:11:c2:f6:75:34:d6:5a:f3:76:f6:59:f8:65:2d:0f:
         a7:a6:63:c7:11:50:fd:75:74:e6:82:14:f2:77:c6:46:b7:f8:
         dc:10:b0:3b:b7:b9:be:23:8e:a7:3a:c6:0a:00:5f:70:e6:c4:
         24:a4:5f:7a:62:e7:83:ee:ea:49:00:09:d8:6e:15:9a:e6:b0:
         dc:25:f0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:58:52 2025 by rpki-client