Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
File:                     rOKNq-U2SWN_puTjId4bY0Y7g88.mft (raw, json)
Hash identifier:          JFIfYesWMcXAzym74cllmNJLBiB0S+MZ3T/tD5NBXoI=
Subject key identifier:   1A:12:8C:7B:95:0C:5A:5D:3E:CA:E8:68:68:BE:F9:42:2E:75:2F:9F
Authority key identifier: AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF
Certificate issuer:       /CN=A9186249/serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF
Certificate serial:       0117
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
Manifest number:          0114
Signing time:             Sat 09 Aug 2025 05:19:51 +0000
Manifest this update:     Sat 09 Aug 2025 05:19:51 +0000
Manifest next update:     Sat 16 Aug 2025 05:19:51 +0000
Files and hashes:         1: rOKNq-U2SWN_puTjId4bY0Y7g88.crl (hash: yEwmnaVgfI8JSQIViJQGGnKgM710KKDMMjpWI/v6LGk=)
                          2: E7F6D15AD17411EE87F7325DC4F9AE02.roa (hash: roB5hg8LbgyHBq3NzG2BxN4ORRxykj532WnJpDlGnj0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl
                          rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186249, serialNumber=ACE28DABE53649637FA6E4E321DE1B63463B83CF
        Validity
            Not Before: Aug  9 05:19:51 2025 GMT
            Not After : Aug 16 05:19:51 2025 GMT
        Subject: CN=6896da77-57db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:93:43:a2:b5:9e:61:6f:35:98:d2:24:a8:8b:
                    97:bd:1d:f1:3b:38:99:c9:8a:37:6f:d2:5a:85:c0:
                    86:78:4e:0f:5d:65:33:5f:2f:72:67:24:15:8a:f1:
                    d8:98:98:cc:ea:aa:c3:66:10:b6:5a:4d:1a:d2:bc:
                    b4:f7:19:66:a8:5f:5d:e9:3f:56:cb:88:fb:20:be:
                    fb:88:95:55:27:d5:1d:cd:c8:00:df:21:79:2c:51:
                    a4:49:b3:47:a5:71:df:94:3d:fd:f1:43:51:39:3d:
                    c3:64:7c:cb:aa:e7:a1:fa:c2:24:db:1e:d5:2c:f1:
                    5a:91:68:c1:e7:2c:53:5c:8d:92:f7:6f:d5:14:63:
                    4a:36:82:38:60:78:57:6b:88:6d:3e:4d:dd:d1:13:
                    75:7b:69:24:e9:f6:37:a1:85:32:11:63:c5:d9:a3:
                    b0:29:74:6e:4f:c7:5d:0d:da:2b:46:d1:d5:69:4c:
                    77:97:27:ca:cd:5a:45:7c:6d:ea:60:69:77:2d:fb:
                    73:2e:b0:70:c6:b7:90:98:94:6e:03:9c:a7:0f:d3:
                    d6:51:cc:97:7c:34:a9:f0:ea:32:4d:f1:97:10:52:
                    7b:96:70:4c:7b:54:ff:76:f8:20:21:89:6b:0a:19:
                    cb:bb:48:b6:14:bb:94:6b:bf:20:2b:dc:7f:dd:0e:
                    39:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:12:8C:7B:95:0C:5A:5D:3E:CA:E8:68:68:BE:F9:42:2E:75:2F:9F
            X509v3 Authority Key Identifier:
                keyid:AC:E2:8D:AB:E5:36:49:63:7F:A6:E4:E3:21:DE:1B:63:46:3B:83:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOKNq-U2SWN_puTjId4bY0Y7g88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/A1F2343CD17011EEA6151C4DC4F9AE02/rOKNq-U2SWN_puTjId4bY0Y7g88.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:bf:16:4c:57:f0:b6:62:0a:ad:d0:fd:b0:8c:5e:32:05:37:
         0c:29:b5:75:b9:e5:12:f4:8f:9a:11:ab:8b:14:45:f9:9b:48:
         21:09:44:62:d8:24:07:86:5a:7e:09:45:e0:77:ed:de:5c:d9:
         d3:92:0b:6a:5a:ff:57:9d:6a:34:39:73:14:18:48:50:9c:d6:
         f4:64:d0:95:58:0c:18:15:ae:e3:ea:b4:e7:f0:88:94:31:e4:
         33:8b:f8:f7:02:c4:46:53:de:a3:d7:d7:4e:1e:33:ce:34:ee:
         0b:82:97:89:a5:1e:f0:82:7f:e4:83:9a:82:19:8c:a5:39:87:
         57:cc:30:df:de:c8:b7:6c:98:99:78:27:e4:ed:33:ce:ef:0f:
         05:c8:19:a7:fa:2d:57:0b:76:14:25:29:ad:5a:b0:05:b3:cb:
         1b:ea:da:b7:6b:6a:44:98:26:7a:4d:0b:37:1c:0e:2a:1c:0a:
         a8:b1:40:e9:92:86:f2:9f:f7:24:b7:75:4f:bb:ef:8a:49:be:
         ea:cf:b7:e3:f8:88:4f:f4:d8:2d:87:28:1d:57:6a:97:0b:32:
         44:95:6a:ff:ad:91:b5:37:4f:6c:0b:b2:7d:2c:c9:67:5d:1f:
         a7:5a:c5:a3:fb:aa:4b:69:8d:ec:4c:6c:c4:79:ce:1c:ae:48:
         72:9a:84:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:58:35 2025 by rpki-client