Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft
File:                     DprNgHEUtY9xipwrhZUmJebbK9E.mft (raw, json)
Hash identifier:          eRhU52chZ3sDbTA3tDrJtRCfp8HYvV+DocGKxD2C+sE=
Subject key identifier:   82:55:5A:B0:63:F4:46:93:0B:2F:A9:64:86:33:CA:86:4D:EA:0E:13
Authority key identifier: 0E:9A:CD:80:71:14:B5:8F:71:8A:9C:2B:85:95:26:25:E6:DB:2B:D1
Certificate issuer:       /CN=A9146D7A/serialNumber=0E9ACD807114B58F718A9C2B85952625E6DB2BD1
Certificate serial:       012B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft
Manifest number:          0128
Signing time:             Sat 09 Aug 2025 05:05:08 +0000
Manifest this update:     Sat 09 Aug 2025 05:05:08 +0000
Manifest next update:     Sat 16 Aug 2025 05:05:08 +0000
Files and hashes:         1: DprNgHEUtY9xipwrhZUmJebbK9E.crl (hash: YeL5lN1Ernd0H63WQOY9jEF7K8uTE4Z4f+vEZkqt0oU=)
                          2: E3AB124AB5C811EE8795EB6FC4F9AE02.roa (hash: aM0ebxOeAp/0tw2kKItKBwN7ixtJh2EMTHdvNuXJzzw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.crl
                          rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146D7A, serialNumber=0E9ACD807114B58F718A9C2B85952625E6DB2BD1
        Validity
            Not Before: Aug  9 05:05:08 2025 GMT
            Not After : Aug 16 05:05:08 2025 GMT
        Subject: CN=6896d704-0673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:20:39:2a:ab:b0:fc:ba:3a:ae:fd:05:5b:12:
                    7f:b5:fc:0c:29:69:71:46:b8:68:e3:7a:9c:33:d2:
                    26:ca:1b:8c:84:57:32:1c:35:ff:83:45:e6:a1:d5:
                    2f:39:0f:f6:da:ba:11:1d:24:ef:69:e5:95:eb:7c:
                    42:88:ed:75:31:f8:c9:9a:62:ae:5c:2b:c7:bd:cc:
                    5b:76:f1:20:b7:e8:29:db:7a:a8:7f:86:12:85:e1:
                    8d:fc:31:03:f3:e2:e5:b8:d2:db:a6:97:ff:d1:e0:
                    e8:3a:31:2d:a5:66:11:2c:82:5b:14:8e:30:f0:4d:
                    0b:26:d4:53:41:da:06:af:9b:01:14:a9:2e:b7:8d:
                    ab:3b:d6:a0:33:33:92:55:7f:80:cd:7a:ad:dc:e1:
                    c1:6d:6c:38:6d:a2:74:d0:eb:d3:3f:a7:32:65:3f:
                    58:c2:39:34:e2:96:64:2a:15:9f:cd:a2:5e:71:aa:
                    1d:b3:2f:cd:70:df:2b:78:c6:f2:50:c6:b8:ba:52:
                    f9:81:18:b4:2e:e4:00:21:5c:7d:3c:c1:f8:6e:18:
                    b7:c4:22:14:ce:e0:4d:bb:f6:7c:44:87:e5:c3:e1:
                    96:01:76:83:bd:7a:dc:a1:6c:b3:df:2d:fb:eb:be:
                    c9:6a:d1:52:3f:12:c2:1d:67:87:99:8b:55:33:eb:
                    96:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:55:5A:B0:63:F4:46:93:0B:2F:A9:64:86:33:CA:86:4D:EA:0E:13
            X509v3 Authority Key Identifier:
                keyid:0E:9A:CD:80:71:14:B5:8F:71:8A:9C:2B:85:95:26:25:E6:DB:2B:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:6b:f2:f9:3b:37:93:f5:ba:05:8f:46:ed:33:bb:cb:46:ce:
         f8:37:dc:de:55:45:29:20:1f:99:6d:d7:d1:37:b4:04:e2:1b:
         88:66:5b:90:b6:38:d9:c4:33:9b:dc:25:3a:41:dd:a6:d8:cf:
         38:32:89:07:cf:6a:34:5a:28:84:1f:5b:d2:b2:76:16:8d:a0:
         d2:70:7e:66:11:15:0a:98:16:ac:95:90:2d:94:cc:5b:55:94:
         42:c4:59:b0:d7:1d:8e:ab:10:24:e2:df:d6:98:6a:1f:87:d3:
         6a:24:9f:9c:68:6b:01:30:98:42:45:0e:b3:86:22:93:86:8a:
         ce:0c:46:39:ca:93:65:60:74:65:02:fe:a2:16:3a:6c:4b:90:
         4c:a4:e3:d1:78:87:68:c2:25:de:e3:d2:21:61:35:86:c8:15:
         72:5c:ba:3e:42:f0:5d:cd:34:3d:ba:79:63:8e:e4:bb:5b:7f:
         88:a5:b2:30:15:25:f2:34:6d:bb:76:da:08:35:3e:8e:e9:22:
         e5:90:3d:5f:00:d3:7d:96:7d:4f:6b:c3:48:03:84:cf:19:73:
         17:fc:4f:b5:a7:b9:98:03:7d:ef:14:18:b8:90:5d:1f:3e:93:
         7c:ea:01:bc:90:5e:84:18:38:9e:ad:4a:5e:1f:b6:ed:cb:f0:
         00:be:95:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:57:36 2025 by rpki-client