Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
File:                     9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft (raw, json)
Hash identifier:          2gcDxaQgKgCd1hxKhGVMzTv6MEoSVwWQsp4xKpmT6Dk=
Subject key identifier:   1C:EF:A4:F9:63:F7:F4:EC:F3:7C:3B:F6:AC:A2:8D:B5:F2:5D:DF:D0
Authority key identifier: F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E
Certificate issuer:       /CN=A918E2AC/serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
Certificate serial:       0DB4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
Manifest number:          0D9D
Signing time:             Sun 10 Aug 2025 17:56:08 +0000
Manifest this update:     Sun 10 Aug 2025 17:56:07 +0000
Manifest next update:     Sun 17 Aug 2025 17:56:07 +0000
Files and hashes:         1: 9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl (hash: a0OyDFNZPktE18EjbT1YBo+eaXOLVu/CPZD8bbDSvVs=)
                          2: 471FC532E6FC11EE84213C0FC4F9AE02.roa (hash: HGatQ3NBKjAKkQPomWLYHF4m0jKMBV6J5PFitZtRd34=)
                          3: 22639692E6FC11EEB3BCD10EC4F9AE02.roa (hash: MezHZiP7Ru8seZ060InpEpEJV9FnDzBoEJ7GFAcZfh4=)
                          4: 6D83AA1CBF5711EEAB9A037FC4F9AE02.roa (hash: L8kpi1SVm7ckPOHWxdzSsXqtMgpg83APjUnCBcHdbJE=)
                          5: 79666614E79311EC81D3720BC4F9AE02.roa (hash: +SK15TzGKYn5ZYvjCDCxNInAkPIS5ISaiZ+uwJr/wDo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl
                          rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3508 (0xdb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E2AC, serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
        Validity
            Not Before: Aug 10 17:56:07 2025 GMT
            Not After : Aug 17 17:56:07 2025 GMT
        Subject: CN=6898dd38-fb2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:46:e3:e4:64:57:50:83:ed:dd:8c:9c:e6:32:
                    fb:9f:34:0a:31:34:00:b5:0b:c2:3d:ea:79:48:9c:
                    93:0c:0a:99:bf:e5:f1:8b:22:58:b3:79:e5:79:a2:
                    ff:d5:14:ce:20:45:ef:70:70:5c:e3:59:25:82:40:
                    74:5d:f6:9f:b6:d3:a2:85:46:53:58:f3:cc:72:21:
                    b5:16:51:ec:85:6c:0e:78:0e:37:99:29:e0:a4:0c:
                    8c:13:0a:ca:8a:00:ad:95:27:b8:2b:76:85:9e:f5:
                    17:de:c1:fa:52:fb:24:b9:6c:ec:64:3b:f2:bc:a6:
                    70:28:6b:31:cf:c3:50:aa:75:5b:06:43:d5:96:88:
                    fa:a3:46:af:68:04:d4:93:0b:6b:7c:de:06:1a:03:
                    d1:e4:db:59:42:42:47:de:7c:7d:ed:ad:3c:5d:8b:
                    c0:01:18:f3:cf:bb:59:36:c2:27:b1:33:d9:ec:8c:
                    ab:93:7b:77:e4:0a:e8:b3:b8:a0:4d:95:fd:15:a3:
                    07:4c:04:a6:da:50:a3:cc:0a:07:bd:1c:98:5b:c2:
                    5c:5f:62:01:a8:7d:06:e6:5e:af:8f:ca:c1:86:14:
                    ff:65:f1:32:6b:19:a1:a9:42:3f:61:50:67:bb:a2:
                    94:24:c6:45:24:08:a9:51:7f:d7:be:dc:e7:6c:6a:
                    54:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:EF:A4:F9:63:F7:F4:EC:F3:7C:3B:F6:AC:A2:8D:B5:F2:5D:DF:D0
            X509v3 Authority Key Identifier:
                keyid:F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:a0:0d:30:3f:a3:e0:e6:f5:f9:e0:89:ce:82:bc:1c:3b:2d:
         d0:92:89:be:a3:0d:6a:8d:95:5d:81:c1:8d:d6:e1:1f:3b:d3:
         7f:c2:8f:2c:19:98:c6:2b:bc:54:d5:89:32:fb:4a:21:49:0a:
         7f:a4:ce:90:56:bd:9a:d3:4b:bf:7f:cc:da:0d:cf:fd:83:36:
         da:df:ab:87:e5:eb:bb:77:c5:b1:1f:b3:18:d6:fc:e0:af:1a:
         c5:ee:32:da:1b:70:05:d2:05:21:0a:f3:41:86:48:50:21:0e:
         82:ce:8c:1c:56:18:c4:c3:53:fb:3c:e4:03:bb:7b:e4:68:d6:
         e8:47:d9:22:f1:3e:be:a8:12:1c:ca:8e:cb:51:41:38:b9:1f:
         10:7f:b4:84:7d:2a:c0:49:e8:81:d2:53:53:c2:d8:48:09:6b:
         ac:bb:80:4b:62:61:22:76:bc:ec:53:70:6c:41:79:fb:9c:a8:
         1e:77:99:36:c6:7e:39:b9:12:13:f4:e3:ca:a5:38:c3:50:55:
         0f:f6:27:24:1c:19:11:b6:7d:dc:b6:4c:b1:b9:78:db:73:ea:
         7d:81:24:8f:55:04:b4:4e:af:64:d1:9f:3c:ee:5b:47:99:b7:
         7d:3c:86:85:65:ca:34:30:8a:01:76:49:c3:c1:fe:6d:5f:94:
         99:8c:6f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:18:42 2025 by rpki-client