Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
File:                     PMd5DiA3Zl70liuB2tL9B-1G-LI.mft (raw, json)
Hash identifier:          CtBrZ1QseJP0CCy6JsYSpoZ22pForkC19uOZ/MwEWEY=
Subject key identifier:   81:5B:A4:3C:F9:88:70:2D:7F:E2:7B:6F:38:74:0B:62:C1:74:2D:D0
Authority key identifier: 3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2
Certificate issuer:       /CN=A9163EB9/serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2
Certificate serial:       C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
Manifest number:          BE
Signing time:             Sat 09 Aug 2025 06:16:35 +0000
Manifest this update:     Sat 09 Aug 2025 06:16:34 +0000
Manifest next update:     Sat 16 Aug 2025 06:16:34 +0000
Files and hashes:         1: PMd5DiA3Zl70liuB2tL9B-1G-LI.crl (hash: cO32PCkigw9U6JwMsXe9RtEVpE2+bbAqyZEIbydFORg=)
                          2: A6449CBA54A011EFB35AED26C4F9AE02.roa (hash: TlHlbn6q/SJJmLaIdFeAVpNRm4YQAAsTE8XrQ+CUo9Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl
                          rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163EB9, serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2
        Validity
            Not Before: Aug  9 06:16:34 2025 GMT
            Not After : Aug 16 06:16:34 2025 GMT
        Subject: CN=6896e7c2-2b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ee:15:af:b6:1e:98:95:f4:bf:61:41:af:1f:
                    6f:f1:9d:8d:24:e6:f6:e5:19:86:bf:10:0b:7c:48:
                    7e:4f:55:73:2d:ba:92:fc:11:f9:28:b9:8c:04:99:
                    ff:d5:4f:4a:b4:c2:92:84:05:26:47:d1:f5:a9:86:
                    45:61:a7:3a:73:23:5c:7d:d8:39:65:3d:9f:fd:ca:
                    99:da:f1:c3:ec:94:17:97:d1:6a:40:48:26:2b:61:
                    f2:a3:66:9f:c9:23:43:c3:f7:91:8b:67:6d:e1:ea:
                    65:e6:4e:6b:6d:b4:d2:c4:ce:8a:b5:e0:db:3e:94:
                    3b:94:04:6c:bc:b3:2a:de:72:13:f3:1a:0e:e0:f6:
                    db:48:12:05:7a:db:04:78:be:d6:d4:4f:7c:c9:b1:
                    19:25:7c:20:12:e0:45:71:dd:3a:0f:45:8a:9e:7d:
                    f5:9c:8c:53:44:61:0a:de:52:b3:26:1c:4e:24:b7:
                    f4:26:5f:d1:3f:e1:19:00:23:9b:35:77:fa:b1:9f:
                    21:0a:0b:fd:20:2f:fe:65:79:43:94:29:19:5d:97:
                    29:c0:b6:0c:4b:0f:81:b4:c9:fb:92:d7:7b:c8:f5:
                    98:11:70:2d:fc:41:e2:0c:db:99:3a:52:79:e4:53:
                    12:41:5b:27:60:01:3e:45:3b:eb:36:cf:89:28:aa:
                    84:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:5B:A4:3C:F9:88:70:2D:7F:E2:7B:6F:38:74:0B:62:C1:74:2D:D0
            X509v3 Authority Key Identifier:
                keyid:3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:82:2d:67:69:ae:35:34:ca:0f:aa:55:74:c2:27:ef:e8:fb:
         c4:72:52:45:1c:3a:d2:20:17:52:93:d9:48:a6:b9:b8:d9:55:
         34:f7:b1:a1:55:af:24:b7:7f:b8:79:4d:be:3e:f3:7d:4c:da:
         98:34:eb:32:de:24:be:c5:b0:88:67:75:11:99:02:8f:93:82:
         25:59:43:58:c9:4b:84:f4:2f:b6:18:8c:72:d1:50:e6:9c:8f:
         71:00:9c:c9:be:43:25:06:0f:86:4b:11:a1:ea:1f:ed:2a:48:
         40:a5:c6:91:fe:57:5d:b9:56:0d:9f:25:e1:00:34:a5:7c:dc:
         03:98:ce:59:cc:b4:eb:3d:b3:09:da:8e:58:be:07:e3:e6:84:
         74:94:3e:51:64:b3:1f:6f:26:a0:12:49:67:2e:f7:e9:01:90:
         52:96:fc:df:fe:a4:24:3c:68:83:8f:21:49:9d:8a:64:a0:bb:
         2a:5e:e7:e0:51:e1:db:ce:9e:e9:4c:95:a7:52:71:bf:49:0e:
         e7:98:88:a2:c3:b9:21:74:40:dc:26:74:36:ed:3c:ad:a2:a7:
         fb:7a:16:a8:5a:cb:2f:7a:b1:62:8c:26:33:1e:e9:26:f1:e2:
         91:5d:79:c0:f1:be:09:9b:36:2b:54:44:8c:e5:57:92:92:3e:
         a4:29:fb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:18:25 2025 by rpki-client