Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
File:                     10dAEUy69PWZqn5dw0EuEi-ocUw.mft (raw, json)
Hash identifier:          YU8J0fSznw/nF7vOSgj93pVfTXWFGOgIOfsywT8VgrY=
Subject key identifier:   73:D7:D0:38:F3:1E:D9:F5:63:62:58:8D:08:66:B8:48:D6:ED:09:2A
Authority key identifier: D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C
Certificate issuer:       /CN=A9169BAF/serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C
Certificate serial:       011D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
Manifest number:          0119
Signing time:             Mon 11 Aug 2025 05:05:56 +0000
Manifest this update:     Mon 11 Aug 2025 05:05:56 +0000
Manifest next update:     Mon 18 Aug 2025 05:05:56 +0000
Files and hashes:         1: 10dAEUy69PWZqn5dw0EuEi-ocUw.crl (hash: zeC4nFqRnAZCkuMmJz9jJYuYPNg60YooI9wYrNrNX94=)
                          2: 1416035CD22C11EE891B4A44C4F9AE02.roa (hash: LAsIeNhYt5BHF0IaKn+G+8QXRLdvDCA/uEEEFG9I+DM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.crl
                          rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169BAF, serialNumber=D74740114CBAF4F599AA7E5DC3412E122FA8714C
        Validity
            Not Before: Aug 11 05:05:56 2025 GMT
            Not After : Aug 18 05:05:56 2025 GMT
        Subject: CN=68997a34-0537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f9:c6:04:c1:e6:ed:bf:c5:17:2d:85:c6:d9:
                    2c:a9:42:8b:18:31:0b:15:29:bf:55:12:9f:c0:80:
                    7d:4c:be:66:5a:99:a4:79:f0:fc:87:11:5c:33:00:
                    8b:e7:eb:b2:7f:73:b7:f3:47:a6:12:4f:fa:99:45:
                    d3:e0:f7:2c:37:d9:44:78:70:2f:29:d8:c4:dc:38:
                    66:5a:97:3d:36:38:f0:89:4a:c5:43:7f:3d:6e:ea:
                    35:91:51:8c:3e:69:0f:8f:e0:61:7a:ae:49:68:72:
                    32:a5:96:e3:b4:ac:d6:c0:55:8e:41:ad:df:fb:a3:
                    88:63:4a:91:6b:83:1a:e1:10:98:b3:e9:fc:be:0b:
                    b4:5d:48:94:b2:d9:be:39:31:45:53:78:54:2d:37:
                    0e:07:0c:79:15:0d:37:1f:61:b2:7f:3d:96:15:56:
                    7b:9b:ce:df:76:f1:02:63:96:b8:7f:ff:db:68:4d:
                    51:d2:cf:6d:ff:ac:b9:78:66:e8:71:fb:25:f6:55:
                    03:f8:b8:df:60:11:a9:42:8e:31:a3:7f:10:2b:0a:
                    44:6b:10:a7:7e:97:7a:99:b8:b1:67:46:97:70:59:
                    a5:d9:93:04:d1:c8:04:c2:1a:8e:f9:a9:96:7a:40:
                    e6:8f:a1:4d:32:61:bb:fa:a7:f1:04:7b:1e:ba:07:
                    2c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D7:D0:38:F3:1E:D9:F5:63:62:58:8D:08:66:B8:48:D6:ED:09:2A
            X509v3 Authority Key Identifier:
                keyid:D7:47:40:11:4C:BA:F4:F5:99:AA:7E:5D:C3:41:2E:12:2F:A8:71:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10dAEUy69PWZqn5dw0EuEi-ocUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/CDF3DA16D22B11EE98ACDB43C4F9AE02/10dAEUy69PWZqn5dw0EuEi-ocUw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:da:3a:f6:57:9d:a5:e9:44:8f:68:d0:6b:75:ab:ef:e8:28:
         16:28:70:a6:73:55:c1:67:2a:bd:d2:95:c6:c5:8d:f7:9d:00:
         09:6a:c2:3e:3d:25:a6:56:fa:97:87:85:3b:49:63:1f:9a:68:
         36:e0:42:48:ae:5c:1c:42:28:b3:e2:71:38:6a:78:90:d4:a5:
         bc:06:f8:62:18:f3:cb:0d:62:6d:9e:21:3e:10:40:6c:64:eb:
         7a:63:61:db:fc:5c:af:0c:48:ec:63:e8:86:19:fa:b5:d4:b9:
         fb:8f:c8:e3:b0:d1:96:f4:26:b3:70:4b:b2:38:60:5b:e8:72:
         8a:83:05:1a:54:16:ac:1f:86:65:62:a3:dc:aa:a2:69:79:6b:
         d9:85:11:42:73:d7:3e:7f:0f:1c:7a:3c:f6:80:ee:55:3e:ae:
         bf:1e:cf:04:c4:b1:f0:b1:4d:a2:53:56:0d:23:82:17:be:ab:
         9d:02:62:44:e3:f9:33:dd:01:4b:ab:b2:57:aa:e1:cf:29:dd:
         ca:3b:cc:06:ad:cf:9b:22:61:5b:d4:5b:6b:1d:eb:8b:ca:61:
         4c:1e:23:a4:09:7b:d8:9e:d2:ed:dd:60:a4:bf:f7:2f:ee:4f:
         01:3c:20:92:44:d1:5a:58:08:f7:4f:16:40:0d:5f:d6:02:12:
         89:b2:5d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:15:51 2025 by rpki-client