Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
File:                     R9Br1-qN8hl_cScLdclkx5q58Mw.mft (raw, json)
Hash identifier:          oH2QwIouoDndXOMIYPJGEgAAdB/JqKt/9g9ie2++7hw=
Subject key identifier:   E8:24:C3:69:A5:E8:84:D0:C6:05:35:75:FE:9A:41:0C:EC:86:11:93
Authority key identifier: 47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC
Certificate issuer:       /CN=A9144354/serialNumber=47D06BD7EA8DF2197F71270B75C964C79AB9F0CC
Certificate serial:       1174
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
Manifest number:          1165
Signing time:             Wed 18 Jun 2025 17:12:49 +0000
Manifest this update:     Wed 18 Jun 2025 17:12:49 +0000
Manifest next update:     Wed 25 Jun 2025 17:12:49 +0000
Files and hashes:         1: R9Br1-qN8hl_cScLdclkx5q58Mw.crl (hash: qhxXNWo4/ecaYrunrHspgfnN05ej6QucZ6TcvenXtUI=)
                          2: 1C6ADB02525311EA939E4652C4F9AE02.roa (hash: VfqKvYxCI56t83Xe2xSnLTZ4YYU3+AYmEJ7FdSPfdWA=)
                          3: 1B3EC39C525311EA939E4652C4F9AE02.roa (hash: 31ZyQUCr1HmkiWyW7LxwjsOe8qq4XgICKJjGASD158Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl
                          rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 17:12:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4468 (0x1174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144354, serialNumber=47D06BD7EA8DF2197F71270B75C964C79AB9F0CC
        Validity
            Not Before: Jun 18 17:12:49 2025 GMT
            Not After : Jun 25 17:12:49 2025 GMT
        Subject: CN=6852f391-fd9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2c:70:42:3c:04:59:5f:34:dc:8e:4b:63:22:
                    8e:0f:5d:2c:9a:ad:9f:3a:17:6c:ab:dc:63:43:40:
                    68:ba:0c:e2:5b:af:5b:eb:e7:84:83:38:85:fc:35:
                    8c:f6:44:22:2e:b6:bd:93:4c:e9:ee:80:bf:20:3e:
                    34:3b:2e:23:4b:7a:2c:b4:b3:7a:86:b8:2e:35:6a:
                    15:23:87:29:b8:1b:83:56:9b:0d:75:10:39:0a:8e:
                    f5:3b:22:c4:68:b6:e3:57:36:c6:00:f7:47:05:17:
                    76:15:53:f4:99:45:56:d8:f5:de:62:64:04:7b:57:
                    12:98:a3:9f:41:b8:60:c9:dc:16:12:16:9c:e9:94:
                    dd:3b:b9:25:7a:d8:c8:0a:8c:78:ae:bc:57:fe:27:
                    9a:82:a3:7a:54:ca:9d:b3:50:48:87:9a:fc:d0:99:
                    6d:26:55:9b:52:7a:8b:e0:9a:76:7f:3d:cc:59:05:
                    94:a0:ea:56:8f:bf:65:e4:c8:52:33:49:58:20:71:
                    2e:0d:0f:ab:d7:7a:64:9b:a7:0a:d3:24:54:aa:98:
                    fa:64:85:01:59:15:47:57:48:83:2c:64:e9:2e:7b:
                    70:7a:78:6b:cc:82:62:69:10:a1:87:6a:f6:b4:34:
                    ed:d7:19:16:e9:62:4e:c8:4c:c1:09:1a:d6:b3:4b:
                    30:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:24:C3:69:A5:E8:84:D0:C6:05:35:75:FE:9A:41:0C:EC:86:11:93
            X509v3 Authority Key Identifier:
                keyid:47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d4:fd:5a:d2:d5:31:7d:89:44:a1:f0:81:df:dd:f8:b7:21:
         04:31:c3:e0:8c:d4:66:03:6e:14:5b:fe:40:96:d3:6c:f0:2a:
         ae:41:56:9b:aa:f8:97:2f:94:15:4e:71:a9:eb:db:96:1f:71:
         05:25:9b:b9:d8:37:8f:d9:a8:b9:52:09:ef:4e:5e:06:0c:f6:
         dc:2e:13:58:01:6a:7f:e2:02:cf:9c:13:71:b9:db:25:a1:5c:
         77:d9:65:41:31:6c:a1:16:73:79:05:11:72:1c:33:e3:5f:d1:
         4d:6f:ec:89:f3:e5:14:35:ca:93:2e:53:bc:38:52:f6:11:75:
         04:2c:7a:04:ef:0d:11:0c:9a:bf:fc:6c:24:23:a1:43:e7:68:
         f4:dc:e2:a4:f0:59:25:8c:ea:e1:11:5e:d3:09:13:97:24:6b:
         76:38:78:80:8a:22:75:37:65:0d:dc:ff:a9:dd:8c:ed:55:2b:
         9c:38:6b:ee:4e:66:c9:10:cf:c7:6b:85:da:48:1a:50:1b:ab:
         db:d8:30:25:e2:a0:44:0f:0c:0c:7b:ee:7b:c5:05:21:6d:bf:
         e0:3b:bd:7b:a3:e7:8d:48:19:6a:d9:b8:2b:02:67:7c:2e:5f:
         9c:ca:fc:f0:be:85:80:0c:38:96:b9:66:55:15:d9:29:b0:04:
         1e:7f:0a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 19:05:43 2025 by rpki-client