Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
File:                     Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft (raw, json)
Hash identifier:          o2j8v6y7m5El5gd0FAXGFyo7iVcHA1hIcglFEmvAfy8=
Subject key identifier:   D8:21:58:81:B4:E8:3A:17:57:64:B7:B7:52:3A:C7:2A:79:36:F5:3F
Authority key identifier: 4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21
Certificate issuer:       /CN=A9146514/serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
Certificate serial:       010A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
Manifest number:          0102
Signing time:             Sat 09 Aug 2025 05:31:20 +0000
Manifest this update:     Sat 09 Aug 2025 05:31:20 +0000
Manifest next update:     Sat 16 Aug 2025 05:31:20 +0000
Files and hashes:         1: Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl (hash: 92VekVNDmhzO2qYih4N4aKxA6Lg+dQhEJPfrJTppCmU=)
                          2: 111B4450EBC211EEB58D4343C4F9AE02.roa (hash: 00hi9oYWLhxiNt5qG52lfNVHtDojqLF3FRiNHRwXR2Q=)
                          3: 8C73DD2414F711F088D0424FC4F9AE02.roa (hash: ioOqYPYgjl0hBINpNmdRJRFRhysvj1VoKagrJNHAM6c=)
                          4: 1090CE74EBC211EEB58D4343C4F9AE02.roa (hash: jcaCq3HWImgQ/NDx2leALcjgxzkZ4FPifc2Ybb4pZFU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl
                          rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146514, serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
        Validity
            Not Before: Aug  9 05:31:20 2025 GMT
            Not After : Aug 16 05:31:20 2025 GMT
        Subject: CN=6896dd28-66f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:68:cb:25:e9:b6:42:71:95:70:e6:7b:5c:d7:
                    12:ac:c1:b2:b8:d6:9f:cb:64:12:16:92:96:5e:8d:
                    43:63:2d:be:79:93:62:2d:ab:2a:b4:15:cb:d2:94:
                    6b:bf:1e:59:87:8b:e5:4e:74:0c:04:a1:9c:4f:c0:
                    5d:1f:6b:11:00:66:b1:5e:b9:e1:b4:1a:77:5e:f6:
                    ca:3e:fb:5a:b7:c8:b1:5a:ac:8e:cb:c8:58:4e:a6:
                    56:45:94:06:49:fd:b1:63:57:0a:31:f1:5b:19:25:
                    2b:77:cb:1f:01:90:a9:0c:4b:c6:ce:7f:ce:7b:41:
                    b3:7a:fa:68:1f:ac:c5:d0:29:3d:8e:d7:0e:89:61:
                    d1:a9:da:f0:ef:f0:76:ba:4e:9e:14:e8:bb:9e:db:
                    26:7e:d5:2f:2d:7f:7e:49:e0:ab:8b:bd:66:1a:4c:
                    e1:e2:c9:2e:04:e3:99:b5:4f:2e:2a:0d:b4:ec:7a:
                    46:fb:fa:96:4a:66:25:fc:6f:c6:86:b4:3a:37:3a:
                    10:87:48:84:1f:e8:bd:d1:5e:91:f8:ac:ea:3f:1c:
                    a6:12:4d:6e:9e:74:c1:25:93:6d:89:31:73:8a:1c:
                    4c:55:18:c7:55:d4:96:7b:1f:79:d6:90:63:1f:af:
                    5b:d7:95:46:39:84:6e:c9:18:6e:6f:0f:e9:ea:3c:
                    06:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:21:58:81:B4:E8:3A:17:57:64:B7:B7:52:3A:C7:2A:79:36:F5:3F
            X509v3 Authority Key Identifier:
                keyid:4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:b4:79:63:00:78:85:40:f7:e5:c7:cf:bc:8c:d8:8c:d0:ad:
         86:d3:da:89:7d:a6:68:f6:23:2c:c6:54:b5:92:01:16:2d:cc:
         89:f3:09:8d:2e:1e:41:da:74:26:9a:07:a0:fd:3e:fe:f8:08:
         b3:09:e8:c4:70:4e:18:c5:e1:7d:55:e3:92:fe:69:e3:a6:2d:
         40:44:f4:7e:25:5d:97:90:4d:de:e8:fd:9e:7e:d0:36:c6:d3:
         fb:7a:84:f8:2e:b3:d5:01:79:ea:26:45:a6:fd:f1:4f:ff:95:
         44:57:f5:61:1d:1b:43:6a:26:89:c5:e1:31:a0:3c:25:54:9a:
         44:bf:08:4a:7e:8a:df:59:3c:91:9e:0a:a7:4a:d6:52:92:88:
         31:fb:e8:cf:cd:55:1d:f9:e4:16:3e:ec:5d:fa:13:2e:ec:f7:
         93:ca:53:96:20:be:24:f8:d3:bb:4c:f0:5a:42:7a:d7:ac:2a:
         67:af:23:33:2f:b2:7c:44:e8:ca:81:db:38:1b:76:0b:0f:15:
         98:1a:8e:0e:26:a0:7b:95:90:0e:98:ce:2b:aa:83:e6:e9:a6:
         e0:c7:6a:e5:0a:1d:b9:51:c0:db:01:5a:49:e2:21:e7:2c:98:
         90:a7:4c:10:1d:43:fc:7d:de:b0:f5:ae:e3:3b:85:68:62:ee:
         18:35:52:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:55:19 2025 by rpki-client