Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft
File:                     2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft (raw, json)
Hash identifier:          jL/71rCxSx7Y9tJ6GBeP/Hqpjdf6wBx1eXdG0qEXtCw=
Subject key identifier:   5F:8A:88:04:7F:68:B4:67:65:ED:3A:25:75:2D:41:E2:D6:99:40:21
Authority key identifier: D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93
Certificate issuer:       /CN=A9164F6C/serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493
Certificate serial:       F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft
Manifest number:          F1
Signing time:             Sat 09 Aug 2025 05:44:01 +0000
Manifest this update:     Sat 09 Aug 2025 05:44:01 +0000
Manifest next update:     Sat 16 Aug 2025 05:44:01 +0000
Files and hashes:         1: 2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl (hash: ByNUxRkUuNKX/8XtOV25MSEk5xyddE5kzGx1pUK0Gt4=)
                          2: EC1244C40C0A11EF86081F2FC4F9AE02.roa (hash: NJlTUu7/QW4EWdki02Krp+vIjKwpqnHJl+6zdGP8Tfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl
                          rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164F6C, serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493
        Validity
            Not Before: Aug  9 05:44:01 2025 GMT
            Not After : Aug 16 05:44:01 2025 GMT
        Subject: CN=6896e021-5aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9a:99:08:e3:49:79:33:0b:4b:d8:ce:80:64:
                    0d:5a:13:d2:50:fb:d6:04:1f:a2:95:7d:4f:b1:cc:
                    27:ff:be:4b:37:de:34:21:89:66:3b:31:65:b1:61:
                    e6:a5:51:a2:70:78:be:27:75:93:47:6e:b8:28:10:
                    69:b4:4b:a5:a5:48:2d:2c:9f:7f:9f:3d:32:f5:0c:
                    15:68:86:13:e7:2a:59:9c:92:ac:04:c2:0f:05:03:
                    39:6f:1b:5f:21:d7:aa:35:14:ac:eb:5c:a1:f9:ae:
                    64:b6:65:b0:12:17:3c:e1:38:14:e2:4f:75:2a:c3:
                    06:8d:4f:91:73:d8:69:93:22:ef:cc:d8:c2:85:a1:
                    a2:3f:8c:d5:5c:8d:26:72:a8:f0:b7:65:b3:03:4d:
                    79:5c:5c:64:3d:0c:38:86:c9:35:ee:68:27:5f:33:
                    c8:07:31:47:c0:92:92:21:d2:be:4b:8b:a8:f9:52:
                    02:95:04:d6:30:2e:2c:fe:45:44:03:4c:98:05:2b:
                    ac:c1:3f:5e:3f:80:70:45:27:b2:37:1c:d7:00:d0:
                    d9:96:11:af:bf:53:8a:ee:3f:b0:55:8f:8d:07:92:
                    33:db:c2:d5:20:9c:2b:0a:b7:90:4a:f0:c7:a9:38:
                    60:cc:2b:56:62:4b:32:25:86:65:0d:36:ef:49:dd:
                    7d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8A:88:04:7F:68:B4:67:65:ED:3A:25:75:2D:41:E2:D6:99:40:21
            X509v3 Authority Key Identifier:
                keyid:D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f3:54:4d:b1:46:f6:06:46:06:e3:60:b0:4e:be:08:18:c3:
         f5:e6:63:0d:6f:4b:b7:e2:89:0c:fe:1c:aa:53:a9:a7:26:9d:
         15:bf:07:c4:a6:70:5c:d4:29:6d:42:84:f3:e0:a3:45:44:5b:
         9d:10:b2:db:54:4d:85:ed:37:3a:31:fa:e8:a3:90:78:cc:23:
         40:19:31:0e:fb:8a:e9:75:a0:97:0d:6a:fe:41:52:c1:3e:4e:
         cc:b0:6c:9a:9a:07:db:f9:dd:2d:69:8e:38:8f:bd:21:68:84:
         ed:09:d6:64:dd:16:7c:52:d9:3d:7d:0d:b9:11:33:33:ee:ec:
         2a:fa:34:b6:f5:0b:8e:ff:46:84:4f:8e:16:84:54:e2:4c:e3:
         b6:a2:31:89:b3:bb:cb:96:7c:f6:ac:d8:f8:e5:0e:ea:44:a5:
         30:9d:7e:97:da:8e:e8:b1:07:07:64:4a:2f:46:d4:62:03:2c:
         4e:1b:44:a1:e7:87:60:01:8e:51:85:b5:3f:f6:03:fb:cb:39:
         e9:25:b4:36:05:a3:2f:30:39:70:c8:b8:ac:1d:94:d7:f7:24:
         33:c1:bb:e8:78:ec:3a:f4:ef:46:0a:ef:3d:3f:b9:36:ac:64:
         c2:44:79:f5:f2:13:cf:ec:f5:30:a2:f3:1c:17:0e:5d:24:19:
         35:cc:e7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:24:16 2025 by rpki-client