Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
File:                     9HpCypKdg34XkyvKB9ZfgiyWRMs.mft (raw, json)
Hash identifier:          4fNsc8m/tF0ZbkeeWxzTcu/gQkCSGVqV3vebsu2tkcg=
Subject key identifier:   25:0D:0A:49:44:3F:C7:4F:A3:61:8E:07:C5:7A:67:6B:92:45:D6:46
Authority key identifier: F4:7A:42:CA:92:9D:83:7E:17:93:2B:CA:07:D6:5F:82:2C:96:44:CB
Certificate issuer:       /CN=A9169A9C/serialNumber=F47A42CA929D837E17932BCA07D65F822C9644CB
Certificate serial:       010B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
Manifest number:          0109
Signing time:             Sat 21 Jun 2025 03:15:37 +0000
Manifest this update:     Sat 21 Jun 2025 03:15:36 +0000
Manifest next update:     Sat 28 Jun 2025 03:15:36 +0000
Files and hashes:         1: 9HpCypKdg34XkyvKB9ZfgiyWRMs.crl (hash: sLl7vvLPEy76hK6HyBUWOww3odPJxFh5zSGdHoWjAkE=)
                          2: 79A50468BCA911EE8F42E684C4F9AE02.roa (hash: WCxfAGIVMH/a++ZJ4jx3iPBs/9NLSjs9q4Xkq6Czo34=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.crl
                          rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169A9C, serialNumber=F47A42CA929D837E17932BCA07D65F822C9644CB
        Validity
            Not Before: Jun 21 03:15:36 2025 GMT
            Not After : Jun 28 03:15:36 2025 GMT
        Subject: CN=685623d9-44ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9d:c2:84:3d:1f:43:fa:b8:cd:b0:a0:03:61:
                    d9:19:f6:81:af:25:f8:b8:93:f6:90:88:94:6f:5c:
                    c0:33:23:50:b1:7c:e8:d3:3a:65:ab:ab:ea:0d:ee:
                    8a:f7:07:5b:dc:23:3e:f8:6d:36:84:fa:10:99:b2:
                    1e:da:98:fb:3a:9c:d0:51:5b:d4:dc:6a:1d:aa:00:
                    08:88:fd:7b:06:f5:ba:49:ec:1b:63:64:cf:55:26:
                    ba:ac:45:df:07:df:1c:04:8d:a5:e4:5e:4e:8b:87:
                    91:8f:93:c5:ba:40:81:1d:9d:a3:2b:b7:2d:18:ff:
                    6b:12:16:29:7f:fa:26:17:68:ad:d0:d6:6f:03:f8:
                    55:b1:7e:d1:d7:9e:52:a3:68:c8:1d:d3:12:8c:1a:
                    9a:06:b9:1a:dc:ae:8a:94:55:a2:97:84:78:60:d8:
                    b8:14:fb:4e:e7:69:c6:41:ec:ec:76:3b:d1:a9:ae:
                    e7:59:34:ae:de:47:95:29:4b:f8:97:c4:50:2e:34:
                    87:b6:19:ef:91:fb:e5:ac:32:4e:bc:9c:45:b0:99:
                    6a:69:9e:4b:ea:1f:18:2b:ab:68:1d:a3:d8:8d:d8:
                    01:50:65:ed:1d:ea:99:ae:42:36:17:fa:c2:14:e9:
                    f0:eb:b0:08:54:76:24:14:5e:89:8e:ea:33:62:91:
                    2e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0D:0A:49:44:3F:C7:4F:A3:61:8E:07:C5:7A:67:6B:92:45:D6:46
            X509v3 Authority Key Identifier:
                keyid:F4:7A:42:CA:92:9D:83:7E:17:93:2B:CA:07:D6:5F:82:2C:96:44:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:dc:10:2d:23:5b:72:af:22:ce:8a:20:9e:51:ab:e8:34:0b:
         5c:b0:96:1f:48:3e:22:6c:9d:91:98:e4:8e:02:5b:98:d3:67:
         29:95:be:5d:98:ef:46:91:ba:9d:f8:de:36:aa:b8:4a:56:98:
         93:67:ae:cf:70:d8:df:44:1a:b9:f6:82:b1:c4:e8:30:ae:01:
         1d:bf:92:50:69:98:11:63:25:7b:86:db:84:c2:32:00:2b:e1:
         69:a9:e7:05:65:a6:54:fc:9e:87:a8:61:9c:68:89:f2:aa:83:
         7a:94:fd:20:e8:3c:45:53:30:6a:9f:8d:9b:62:06:1c:20:f7:
         1d:35:63:1b:39:23:b8:af:b0:22:af:78:1e:c9:2d:76:39:91:
         20:cb:d2:b7:a6:63:ac:42:83:bf:9f:f0:fe:8c:d4:7a:c6:40:
         fb:92:fe:80:d3:cd:43:47:99:ce:59:0d:03:a6:14:1d:ce:56:
         62:2c:8d:27:19:ba:6d:91:c9:85:ba:85:c7:54:56:62:59:b1:
         d4:71:ba:30:71:55:2d:e8:84:ac:3d:f6:63:39:0e:7b:77:8f:
         f3:9c:21:0c:44:0e:a2:6e:2b:eb:c9:da:39:1f:92:e6:66:97:
         9b:ec:4a:2b:1b:4c:8e:fb:25:d4:ce:a7:2b:ff:fd:6b:21:89:
         58:eb:8c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 08:01:58 2025 by rpki-client