Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft
File:                     D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft (raw, json)
Hash identifier:          DfI0hLDcdRYlItN1hAWt0rcXmk06AeX+7d22Ni+Kz+g=
Subject key identifier:   D2:57:A0:4E:09:5D:5D:95:BF:AB:ED:0D:BA:92:9D:79:B4:CB:7C:3F
Authority key identifier: 0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F
Certificate issuer:       /CN=A9186883/serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F
Certificate serial:       015C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft
Manifest number:          015C
Signing time:             Thu 07 Aug 2025 04:30:57 +0000
Manifest this update:     Thu 07 Aug 2025 04:30:56 +0000
Manifest next update:     Thu 14 Aug 2025 04:30:56 +0000
Files and hashes:         1: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl (hash: v7d6d5MYpm6f6KrkrjMaJ9CDEQMa7SrRI+ZD1Pkc2q0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl
                          rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 04:30:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186883, serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F
        Validity
            Not Before: Aug  7 04:30:56 2025 GMT
            Not After : Aug 14 04:30:56 2025 GMT
        Subject: CN=68942c00-edda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:58:93:62:4d:c6:97:52:08:6f:8f:2a:e6:4d:
                    d6:29:45:27:18:5b:a2:5f:68:97:0c:c6:0c:a2:23:
                    81:cc:b9:09:5f:64:21:f0:48:16:c6:80:fd:d8:2b:
                    bf:32:a6:74:a5:6e:2b:8a:f1:77:d9:4c:ab:ef:b6:
                    ef:ce:ef:96:d6:cb:65:65:28:c5:c5:f2:59:5b:aa:
                    9a:a9:65:00:ca:c0:4b:de:b2:ea:72:b8:9e:de:aa:
                    6d:fb:d4:9f:20:68:a9:62:10:7d:2f:e2:dd:48:83:
                    80:06:79:1d:ff:55:72:83:b8:ed:1d:0d:6a:4f:c2:
                    33:43:30:3b:fc:ec:51:7a:91:c5:93:eb:69:97:65:
                    d0:4e:1e:39:0e:8c:46:27:27:b3:43:27:51:16:fb:
                    0c:68:54:62:82:a0:70:c0:3e:10:a5:a3:9b:20:83:
                    50:e0:f4:07:ea:63:7e:d1:1b:d5:09:00:ec:d9:31:
                    d7:98:fd:3a:60:74:ca:8f:00:79:b5:cf:76:47:99:
                    fd:e8:fe:77:ee:e7:d6:32:6b:a9:e5:aa:fe:22:30:
                    08:9c:06:ff:f4:78:37:cd:eb:fa:0d:cd:20:f6:3f:
                    ea:e4:be:37:25:1f:6f:a5:b0:53:78:84:65:92:59:
                    c6:8d:cb:66:e6:2b:fb:15:09:6b:9e:0f:c1:65:f8:
                    71:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:57:A0:4E:09:5D:5D:95:BF:AB:ED:0D:BA:92:9D:79:B4:CB:7C:3F
            X509v3 Authority Key Identifier:
                keyid:0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:56:35:f6:77:04:7d:12:3e:4a:bd:b8:fb:36:11:87:86:79:
         ce:62:cb:2b:0d:20:77:03:58:23:1e:94:35:83:50:13:d7:25:
         e1:cd:65:74:f4:8a:d9:14:89:64:21:df:a2:e3:40:3b:f9:7e:
         cc:2b:4e:76:1f:c2:3e:8c:9c:5f:d2:3f:81:ec:3e:dc:b7:e7:
         cf:a1:81:d4:dc:dd:37:fb:82:54:3a:49:2b:cf:7c:d3:22:e4:
         bb:6f:4a:e3:16:cb:0a:67:70:2c:f0:83:34:12:5e:d4:96:6f:
         78:f3:96:ab:ca:63:dc:23:43:94:9b:5f:ad:ad:b8:e6:8f:67:
         b9:59:89:16:53:05:dc:51:a4:08:58:8e:64:e7:7c:db:65:e8:
         21:5b:b2:a7:6c:70:e0:a5:23:8d:4d:03:16:9d:c5:cc:d5:96:
         88:b2:db:09:df:e3:cb:09:21:08:7b:17:e5:5f:3f:53:40:87:
         69:d3:91:62:08:d0:fb:b9:c5:35:0f:35:3c:3c:f5:ed:cd:da:
         82:01:4d:30:27:06:7d:2f:67:4d:4a:e1:e2:ba:6b:7f:67:75:
         30:1f:91:be:03:4e:ed:94:39:07:36:9a:bf:1d:ad:e3:1c:d6:
         88:66:bb:30:48:b9:d2:bc:f0:96:b4:f7:49:6a:d1:0b:15:9a:
         83:16:69:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:49:04 2025 by rpki-client