Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
File:                     9DRcMU1uvt60X-B1X4_-rPNjy4o.mft (raw, json)
Hash identifier:          CPca5qfVDvQzf3UJZCBlzk2YnBmA4SHU6sxC/flHt1M=
Subject key identifier:   21:2A:C8:C8:6F:E3:36:D2:08:92:C8:BA:C1:D7:4C:74:76:AE:D2:78
Authority key identifier: F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A
Certificate issuer:       /CN=A9158D75/serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A
Certificate serial:       0CE5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
Manifest number:          0CC9
Signing time:             Sun 10 Aug 2025 18:07:29 +0000
Manifest this update:     Sun 10 Aug 2025 18:07:28 +0000
Manifest next update:     Sun 17 Aug 2025 18:07:28 +0000
Files and hashes:         1: 9DRcMU1uvt60X-B1X4_-rPNjy4o.crl (hash: KelN6xgiVPdKQ981WAnW9n86glvcWInZ/PKfoxeRdrA=)
                          2: B4B32D509EDD11EC85676D09C4F9AE02.roa (hash: HUKn8TCAiBNnvKqCcCok66Nsu0wRIivvDnUfIyEmyBw=)
                          3: 2477AFC6D56511EDB2407741C4F9AE02.roa (hash: +UszTokGWITuaKodHVqtXowS/kPpAyLOoDwxxniGhh8=)
                          4: B36E1C029EDD11EC85676D09C4F9AE02.roa (hash: va4jKyvaWBHSOXW9lhNLFk3dXPhiBg3Z1DqKqXpZves=)
                          5: B5EA3B509EDD11EC85676D09C4F9AE02.roa (hash: PI+4io6zs54SvjfIWW1YmDzNzGjU5q2yfd6LaVWJgGw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl
                          rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3301 (0xce5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158D75, serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A
        Validity
            Not Before: Aug 10 18:07:28 2025 GMT
            Not After : Aug 17 18:07:28 2025 GMT
        Subject: CN=6898dfe0-0945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7b:e2:65:e0:d5:45:e6:36:a3:b3:00:46:ba:
                    93:f3:5e:d7:76:e0:18:ca:08:97:ac:bf:c9:fc:15:
                    f1:95:81:64:86:6e:45:8b:fc:40:2e:39:2c:af:49:
                    f9:93:84:b5:d7:9e:cf:13:8a:1b:4b:1c:21:de:15:
                    a6:c0:99:ee:7f:8e:15:3f:36:da:38:e1:d6:0e:d0:
                    97:f6:81:d7:d7:a2:2b:a2:8c:7c:cd:9b:58:0a:63:
                    bd:d3:1f:70:df:c8:01:02:2a:36:c1:87:1d:1d:27:
                    44:6f:c3:90:7b:4f:b6:01:87:a2:d3:3a:a2:21:4a:
                    51:d9:8a:8a:e7:5f:c1:e7:40:31:40:47:be:0e:91:
                    15:f0:67:29:07:63:6d:67:a0:90:82:3a:e4:a7:d4:
                    30:d9:56:88:c5:4e:32:ea:6e:5f:1f:f0:fd:7e:20:
                    c6:19:b9:a7:fd:5c:ce:b5:a8:0d:d1:27:b8:56:14:
                    ce:5b:dc:d0:b8:2b:52:eb:b8:87:e9:8c:fe:1b:ae:
                    f4:d7:3b:2a:c0:38:dd:68:cd:96:f2:d7:8c:14:51:
                    92:97:0f:d1:72:32:ef:a1:92:4a:42:75:9d:01:c2:
                    10:12:c1:08:bf:53:74:44:65:85:b2:3e:db:0e:06:
                    2a:63:41:5f:5d:8d:8c:e2:31:ce:fb:7e:63:a5:5a:
                    ed:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2A:C8:C8:6F:E3:36:D2:08:92:C8:BA:C1:D7:4C:74:76:AE:D2:78
            X509v3 Authority Key Identifier:
                keyid:F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d4:91:ae:97:cf:72:00:0b:31:cd:51:ce:19:dc:9d:cf:1a:
         47:c1:41:f8:9a:96:cd:32:04:67:61:b2:66:93:19:df:e4:1a:
         da:7e:c1:c2:40:c7:ba:ed:f1:cb:51:6b:74:22:99:9a:22:af:
         1d:76:88:17:be:67:6c:c0:14:00:65:ac:32:49:41:26:d2:0b:
         2c:10:0e:51:2d:da:b3:25:df:f4:0d:58:a3:f3:6d:8f:69:e4:
         86:d9:2a:e5:1b:fa:dc:09:45:68:28:50:03:5e:76:2a:f9:9a:
         d9:96:12:72:cb:8a:0b:3b:2f:02:0c:34:90:3e:2a:40:81:13:
         b2:b6:4e:63:9d:02:f4:bf:5a:f1:73:5b:ec:88:07:05:f2:ca:
         1b:90:89:7c:bb:14:27:b9:b2:18:cb:83:88:c8:67:f1:fc:27:
         0e:8f:a8:e8:1a:9d:23:97:72:e9:c6:8a:de:f1:13:6e:e5:3f:
         54:53:04:e8:0f:21:30:97:4b:be:16:c1:8c:c6:d2:d9:ea:f5:
         00:d6:6b:02:8f:e5:be:89:de:25:7a:52:1d:1a:99:72:b8:67:
         13:fd:79:18:83:e2:37:0e:25:eb:25:40:ef:61:52:c8:f9:09:
         bc:09:c1:f3:8d:5c:65:35:46:4e:0c:14:91:14:29:93:3b:4d:
         ef:87:d7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:07:49 2025 by rpki-client