Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft
File:                     79iPiiibFMeUQxKLu7eRtS2lEa0.mft (raw, json)
Hash identifier:          pPY/XGTmjJAiOsf/cnDZLDTnssAbfCzowh588Vm1fpk=
Subject key identifier:   D5:F5:F3:E9:74:B9:7A:D0:E2:71:AC:30:FA:E7:89:6A:5C:A5:A0:10
Authority key identifier: EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD
Certificate issuer:       /CN=A9171D3F/serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD
Certificate serial:       01D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft
Manifest number:          01CF
Signing time:             Sat 09 Aug 2025 03:12:21 +0000
Manifest this update:     Sat 09 Aug 2025 03:12:20 +0000
Manifest next update:     Sat 16 Aug 2025 03:12:20 +0000
Files and hashes:         1: 79iPiiibFMeUQxKLu7eRtS2lEa0.crl (hash: wi7hghM4y1P2Uwnrn5IYucehh9oxfeA0575w24hH400=)
                          2: 9344B512B1BA11ED8DC4D42EC4F9AE02.roa (hash: 05FYul9tCmnEluZqc+GxuuNUpvwFpQ5F6tjIORKsJIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl
                          rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 466 (0x1d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171D3F, serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD
        Validity
            Not Before: Aug  9 03:12:20 2025 GMT
            Not After : Aug 16 03:12:20 2025 GMT
        Subject: CN=6896bc94-2820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:67:cb:2f:1c:4b:78:98:34:44:92:a8:a5:4a:
                    cc:06:31:d2:a3:47:fe:b7:e1:05:d5:10:65:00:43:
                    58:74:51:5d:9a:bc:8d:dc:1a:e8:54:0f:79:85:8d:
                    4f:63:7d:6c:7b:14:59:42:54:f8:b2:e8:21:44:e5:
                    02:0f:25:a9:e1:43:db:4c:97:1c:54:6a:72:35:80:
                    2f:d8:0f:f4:6e:0d:b1:2c:d9:6a:86:78:ac:98:70:
                    60:e8:4b:4f:65:ea:20:3e:29:8d:e3:42:de:fc:d3:
                    20:a4:bc:40:b0:e9:2d:a1:dd:31:9f:59:95:96:f8:
                    3c:a0:5f:69:7e:8c:30:a5:6c:9d:f1:0e:f4:3e:a1:
                    ea:22:46:82:17:05:78:3f:22:e0:ce:2f:c9:31:11:
                    4d:4d:03:e2:6c:12:7c:63:e0:8d:85:8c:ba:34:4c:
                    d1:0d:5e:95:b7:fe:d7:0a:b0:00:7a:01:77:5e:0d:
                    fc:86:f1:59:a7:93:cd:98:9d:25:62:9d:e2:99:7e:
                    35:4c:a1:44:f0:40:f0:e6:1a:a2:8f:d0:93:b7:73:
                    1e:3e:bb:78:ba:30:e3:ef:a0:e1:5b:9b:e9:eb:a4:
                    69:de:e3:ca:e6:3c:24:5a:9e:c1:c5:20:94:57:01:
                    60:4d:45:ba:74:e6:ee:c8:96:1f:a2:73:2b:c8:d8:
                    f9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F5:F3:E9:74:B9:7A:D0:E2:71:AC:30:FA:E7:89:6A:5C:A5:A0:10
            X509v3 Authority Key Identifier:
                keyid:EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:67:8d:cf:31:c4:a5:9b:b7:c9:88:41:3a:93:20:56:47:4f:
         a7:0b:00:97:a3:b8:99:15:ef:0c:3a:e8:5a:dc:e7:bb:5a:b2:
         4c:85:4e:fc:9c:1c:50:41:21:13:7d:23:95:72:76:ac:42:84:
         81:01:67:25:eb:0d:56:3b:79:dc:62:46:a7:24:b1:74:a0:a1:
         5c:c9:90:4e:5c:0d:ad:f7:ee:92:21:b1:12:2a:be:d7:7d:f8:
         1c:d9:b3:58:97:e9:7a:73:36:3c:df:07:23:b9:32:c8:1b:19:
         49:e9:fe:fc:2e:85:64:5c:19:96:79:93:5b:77:fe:00:2d:21:
         38:ad:2b:87:bc:ce:81:f8:a3:91:62:20:d8:73:27:90:92:c1:
         7a:93:aa:af:52:17:cd:59:35:37:09:07:30:48:f6:2f:45:e5:
         1b:85:8b:d0:79:9b:b1:b5:e8:d5:f5:6e:a0:78:a6:25:25:ca:
         77:e4:32:dd:9c:2b:9f:19:aa:9e:32:80:b1:f5:20:41:d0:4d:
         34:21:85:ca:eb:a6:29:17:35:90:df:a3:01:db:2a:b2:fe:d6:
         74:18:25:ff:92:44:8d:2a:bc:a7:14:71:25:65:c2:83:92:19:
         a8:ab:0e:ab:7d:4b:7e:65:fe:56:bc:3f:52:58:ca:b4:fa:57:
         12:79:cf:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:20:40 2025 by rpki-client