Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
File:                     T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft (raw, json)
Hash identifier:          UjQR+TcbktNJ57ieISV54/0RTTWGQ4DYXMgesFmURBs=
Subject key identifier:   AA:B5:32:C4:12:AF:B3:0A:6B:FE:51:AB:CF:41:00:B0:D7:DA:33:51
Authority key identifier: 4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C
Certificate issuer:       /CN=A9190818/serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C
Certificate serial:       99
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
Manifest number:          97
Signing time:             Sat 09 Aug 2025 06:51:28 +0000
Manifest this update:     Sat 09 Aug 2025 06:51:28 +0000
Manifest next update:     Sat 16 Aug 2025 06:51:28 +0000
Files and hashes:         1: T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl (hash: +BP8cjb8Xw9kFrnck7wduUx/cf2MrpDdQrWSs3p20T4=)
                          2: DE3EC424979411EF875EE369C4F9AE02.roa (hash: 5QE8zDybdgUA94Tpp6+guNsFhK7KXTxJ0yxg/2zsqZo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl
                          rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190818, serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C
        Validity
            Not Before: Aug  9 06:51:28 2025 GMT
            Not After : Aug 16 06:51:28 2025 GMT
        Subject: CN=6896eff0-2224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b9:80:6c:85:e9:58:64:8a:a2:85:47:6f:74:
                    32:62:77:dc:95:4c:f6:3c:d9:29:95:25:64:1e:3f:
                    79:cd:53:bc:f6:22:98:0f:c9:df:3b:f9:ec:b2:bc:
                    92:55:6c:11:a6:aa:ee:8f:6b:2b:7c:a8:3d:84:df:
                    6e:cc:8f:a2:18:81:e0:75:9a:b0:16:54:d0:d5:b7:
                    2d:2e:07:86:4e:d2:1d:2c:f8:b9:26:18:e8:c3:58:
                    25:05:75:cf:a8:db:54:f5:bc:6d:96:c4:53:63:ab:
                    25:60:27:f0:95:69:3c:48:c4:c1:b3:30:bc:0f:ec:
                    11:01:53:38:59:89:d7:96:a5:dd:00:4a:ae:c2:f9:
                    4d:4b:a4:34:b5:dc:d7:bb:a6:b7:cf:7a:e5:a8:6e:
                    af:e5:1e:0c:0a:c2:95:2e:bc:35:70:45:f3:ae:5b:
                    dd:a3:bb:96:e6:db:cc:93:45:a4:06:25:05:1f:65:
                    83:41:04:c3:a5:da:33:09:34:3c:a9:88:61:ba:97:
                    8b:9d:ee:59:d5:7c:31:2d:f8:a7:f7:f0:ad:32:17:
                    f6:f9:5d:27:40:f1:6a:29:05:76:b1:56:af:31:f6:
                    68:25:0b:b8:1a:59:17:4d:98:97:ed:42:64:ac:a4:
                    75:5e:9f:d4:e3:0e:9e:7f:b9:14:83:87:5b:06:68:
                    72:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B5:32:C4:12:AF:B3:0A:6B:FE:51:AB:CF:41:00:B0:D7:DA:33:51
            X509v3 Authority Key Identifier:
                keyid:4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b1:18:ad:24:4e:7d:f3:36:03:fb:fe:a9:d0:c5:b7:7d:71:
         bd:ac:ea:37:fc:f5:ab:a1:d1:63:61:c5:c6:79:a0:ca:c7:3d:
         ed:c2:96:e8:71:36:83:ec:19:73:66:ab:2f:cc:37:89:f1:29:
         a1:98:15:bf:23:4a:3c:4d:48:2f:49:2f:35:3e:e2:9c:3b:99:
         f1:95:fb:c7:20:31:d3:e7:be:02:e4:b5:65:64:c0:db:91:a4:
         8a:bb:2a:74:ca:db:f9:37:55:e1:5a:c9:ec:3c:16:85:e5:00:
         c2:de:1b:75:61:1b:90:a3:a0:2f:32:20:88:88:d6:19:2e:e2:
         5d:5e:ac:a9:7d:d8:42:2c:33:7c:f6:bb:c1:4e:cc:14:53:44:
         1c:d3:e1:4a:16:b1:ee:a1:a3:f1:85:2e:7f:36:64:36:a5:a6:
         9f:47:7f:6e:43:c9:4a:f0:a1:84:a8:c9:5c:1f:6a:e9:bf:ca:
         47:91:22:60:2e:95:99:cd:bb:ac:17:b4:d9:24:1a:88:1d:bd:
         b7:ad:05:a0:bf:2b:bb:6f:49:c6:51:41:b9:b8:64:cc:03:8f:
         59:14:fd:8f:77:1b:12:75:39:d1:3c:47:ba:f0:52:a3:20:f2:
         08:12:bb:1e:76:1f:13:0f:4d:4a:59:d5:0b:aa:9b:d9:16:31:
         1d:37:a0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:50:21 2025 by rpki-client