Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft
File:                     9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft (raw, json)
Hash identifier:          Sgtf/+u0ixwnEyOKL5e8FhN3XGCJkESdBbaaTLczi+U=
Subject key identifier:   9A:9E:E7:A0:79:DC:C4:C8:30:75:96:FF:1D:2B:34:22:35:7D:19:19
Authority key identifier: F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89
Certificate issuer:       /CN=A916FA51/serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989
Certificate serial:       0B7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft
Manifest number:          0B71
Signing time:             Sun 10 Aug 2025 19:04:34 +0000
Manifest this update:     Sun 10 Aug 2025 19:04:33 +0000
Manifest next update:     Sun 17 Aug 2025 19:04:33 +0000
Files and hashes:         1: 9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl (hash: mEb8Cvd81okc5eKxrnKbmC0zDDAYwUz0MFH2ntHWGNg=)
                          2: A79D17F2361111EA95391375C4F9AE02.roa (hash: tDsZ4GzDIlAFVIQZZ0Fw0ct73AL//Nys5aPjeishX2s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl
                          rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2940 (0xb7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916FA51, serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989
        Validity
            Not Before: Aug 10 19:04:33 2025 GMT
            Not After : Aug 17 19:04:33 2025 GMT
        Subject: CN=6898ed41-b6a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:45:fe:13:20:57:9f:cf:94:97:f0:39:23:ed:
                    fc:8a:67:a7:d0:fb:c3:81:7b:4e:95:11:ef:09:85:
                    36:84:f5:33:d9:73:20:01:fe:35:5c:c9:20:36:73:
                    70:5c:ce:c6:4a:87:75:d1:34:56:cf:ec:7f:52:f0:
                    bd:94:a3:17:ce:d7:e4:3b:a4:06:5b:eb:cd:58:11:
                    be:cf:e6:d2:0f:63:7f:d2:2f:4f:25:a3:14:4d:af:
                    ba:07:83:fe:ed:3e:a5:75:1c:8c:6d:87:29:dd:43:
                    59:20:28:46:a0:87:80:2a:8f:b7:4d:7a:a2:c7:53:
                    70:1c:fd:9a:33:bb:5c:15:3e:b8:fd:cd:d7:53:b4:
                    6a:bb:9a:0c:69:e2:70:78:8c:ce:c9:d2:55:d8:8c:
                    66:a6:e7:c8:be:18:8a:6c:c4:27:77:c5:66:af:95:
                    f6:c7:a7:38:cc:a5:23:15:7c:2f:95:a3:d2:2b:27:
                    d7:17:14:f3:96:1f:86:c2:25:0d:f8:4c:db:ec:01:
                    80:dc:bb:d2:a1:b3:60:30:bd:76:0a:bd:ec:87:3f:
                    c1:50:d6:44:cb:9e:a8:c2:a4:08:9b:34:c0:99:5c:
                    df:44:a7:95:02:2c:c7:38:5b:06:2a:11:3f:57:26:
                    d2:d1:cd:52:c9:79:1f:8a:47:c5:8c:62:3d:cb:33:
                    c8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9E:E7:A0:79:DC:C4:C8:30:75:96:FF:1D:2B:34:22:35:7D:19:19
            X509v3 Authority Key Identifier:
                keyid:F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:dc:a5:63:9f:fe:8e:30:a7:3b:b3:4f:64:c6:b6:94:6f:65:
         b7:63:9d:08:06:34:06:31:70:9e:a7:96:33:25:36:de:f6:47:
         89:34:c9:15:23:6e:36:65:58:d2:cd:f0:48:52:90:ce:b6:52:
         cf:87:9d:72:4c:9d:da:99:0e:9d:05:dc:fa:ed:f5:91:a3:cd:
         71:46:09:a3:c6:51:52:c5:7b:78:b8:f8:47:ec:27:59:4d:bb:
         5d:d0:ff:2c:1c:23:1d:b1:a7:fc:25:dc:c6:d7:e4:5d:02:1d:
         1f:3b:8d:06:ca:6a:2b:fd:fe:a5:95:41:6c:94:8d:7a:48:67:
         ef:2b:36:ea:2d:12:90:6c:bc:8a:ef:a6:a3:9b:01:d4:d1:17:
         60:6c:9b:83:c0:35:51:39:1b:6e:28:63:6c:78:6a:82:cb:4e:
         46:d6:dc:79:7d:6f:96:58:c2:0f:56:13:db:5c:4b:63:bc:80:
         ca:93:9a:9b:68:d8:ba:e6:82:6d:1a:f4:a7:00:36:f6:66:68:
         16:20:d2:90:64:de:af:63:de:c8:11:b5:4a:20:c6:1f:9c:68:
         2d:e5:19:e8:c3:76:d5:cc:74:9f:d9:54:63:fc:89:f9:ea:36:
         77:c8:24:26:33:dd:22:1e:89:88:14:36:5d:68:4f:89:39:40:
         cd:3d:61:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:35:55 2025 by rpki-client