Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
File:                     Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft (raw, json)
Hash identifier:          x6TZsxedu5dIWlgkrVzHKFbhBnDEWTfuykijZl7/plE=
Subject key identifier:   24:B7:90:DA:DA:5A:1D:63:19:16:68:78:BC:97:D3:BE:6D:F9:17:7C
Authority key identifier: 21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4
Certificate issuer:       /CN=A9176302/serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4
Certificate serial:       D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
Manifest number:          D2
Signing time:             Sat 09 Aug 2025 06:02:51 +0000
Manifest this update:     Sat 09 Aug 2025 06:02:51 +0000
Manifest next update:     Sat 16 Aug 2025 06:02:51 +0000
Files and hashes:         1: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl (hash: YeSTygS93reHWltEDqusaw+KrWyH3daMBPZ2JadflPA=)
                          2: 0EE57B38378F11EF88F9BF5AC4F9AE02.roa (hash: J7/kiN3L5QvG4wInB+6wlLOPrN0QJOnlQzSphywWm/s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl
                          rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176302, serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4
        Validity
            Not Before: Aug  9 06:02:51 2025 GMT
            Not After : Aug 16 06:02:51 2025 GMT
        Subject: CN=6896e48b-bf17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9d:42:a8:57:29:42:3a:f0:d4:de:d4:94:b6:
                    b1:aa:d8:79:70:58:e1:00:54:ca:bb:ad:f9:00:a5:
                    69:1b:ab:cc:0d:4d:e5:ae:0b:fd:2f:e6:d8:b8:a5:
                    27:43:59:fc:6b:4b:f0:52:b9:71:f3:53:2b:c7:62:
                    75:45:51:dc:e1:00:19:93:25:15:a3:aa:23:be:c1:
                    96:d9:0b:42:1b:8f:e8:3e:82:d5:57:02:e2:6c:2c:
                    cb:31:7d:c2:c5:83:b5:20:73:eb:b0:c7:9d:d9:b7:
                    91:f5:3d:8a:cd:27:5c:d3:32:24:fd:df:ce:ab:07:
                    13:45:3f:86:3b:ad:6e:9d:87:f2:aa:9e:33:22:18:
                    e4:c7:4f:bd:b4:70:84:30:35:aa:c2:35:0b:1d:fd:
                    b9:60:2c:5e:1b:68:a2:09:21:23:4a:61:2a:1b:41:
                    ea:9c:0b:cb:92:f9:06:4e:ac:a9:c0:93:c2:c5:af:
                    a9:8c:70:ba:00:60:f3:5c:29:f8:96:47:ad:27:c7:
                    8d:bc:1f:8a:ed:63:ea:7d:9f:60:37:99:62:5b:90:
                    93:a5:53:11:ee:99:1f:ee:b6:fe:66:a6:3c:de:87:
                    58:97:67:01:84:fa:13:59:94:8a:02:9c:ab:8e:26:
                    9d:19:07:31:e8:c7:dc:9a:aa:3d:58:90:67:7e:75:
                    12:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B7:90:DA:DA:5A:1D:63:19:16:68:78:BC:97:D3:BE:6D:F9:17:7C
            X509v3 Authority Key Identifier:
                keyid:21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:45:56:fc:86:16:c3:dc:7d:47:c1:ac:53:04:bc:fc:0d:ac:
         5a:a5:af:31:4f:bb:31:ea:b5:d7:b2:b8:0e:fb:5d:ee:59:a9:
         2d:46:3d:03:8e:7b:19:7b:42:81:c7:69:a9:d2:53:2d:5a:3f:
         36:ed:d8:05:87:5a:d4:a6:d4:60:92:4c:0c:5d:a2:0d:b4:3d:
         61:ec:a2:87:6b:98:47:45:5a:e3:d5:be:14:74:09:c6:db:e5:
         d1:fb:34:6d:25:42:c3:5c:27:62:b5:c1:55:91:20:1b:82:8a:
         b1:d7:a8:ab:71:05:aa:f8:4a:aa:8d:fb:8d:35:1e:41:ea:e0:
         49:4f:6c:d0:35:1f:dc:0a:36:9c:21:c9:06:7d:e6:86:30:a7:
         e8:e1:2e:96:61:9e:ea:c3:ea:ea:08:b7:e5:de:37:84:7f:6f:
         13:c2:43:fe:ee:19:13:04:82:16:23:e3:0c:3e:fc:13:3c:5a:
         ad:59:29:90:95:66:da:50:02:ec:01:6c:f3:6e:d2:66:4b:a9:
         d8:36:f0:5d:cf:98:e0:4f:89:16:ac:35:6e:ac:88:91:28:25:
         60:a2:61:1c:46:59:9f:52:91:95:d0:de:30:28:b9:5f:e2:3d:
         7b:56:8e:b3:87:44:2e:fe:a8:80:90:d5:ee:d7:fa:a9:b4:c6:
         b7:9f:3b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:14:28 2025 by rpki-client