Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
File:                     -Fr9bnRbCjR8ppbujrwWfQikT1Y.mft (raw, json)
Hash identifier:          6hfoxt9sVW7TRMzYTsZ+RWVdzPCtr8i0jtUZIhdhGCA=
Subject key identifier:   34:D4:3C:88:12:08:63:2A:45:70:8C:3B:27:FB:FA:27:6D:E0:B5:C5
Authority key identifier: F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56
Certificate issuer:       /CN=A9192B84/serialNumber=F85AFD6E745B0A347CA696EE8EBC167D08A44F56
Certificate serial:       A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
Manifest number:          9F
Signing time:             Tue 17 Jun 2025 05:12:28 +0000
Manifest this update:     Tue 17 Jun 2025 05:12:28 +0000
Manifest next update:     Tue 24 Jun 2025 05:12:27 +0000
Files and hashes:         1: -Fr9bnRbCjR8ppbujrwWfQikT1Y.crl (hash: XCtH6j3AHuNIjqGDpPg6BI9Hqag6VBWmr3ziI754aVs=)
                          2: 4419BD7A5BA011EFB239695EC4F9AE02.roa (hash: KXezgGFWbIUkw3XjH1WWu+jwoNxTjSoHBx4zCxaN7e4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl
                          rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Jun 2025 05:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192B84, serialNumber=F85AFD6E745B0A347CA696EE8EBC167D08A44F56
        Validity
            Not Before: Jun 17 05:12:28 2025 GMT
            Not After : Jun 24 05:12:27 2025 GMT
        Subject: CN=6850f93c-5286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:26:5f:22:d2:34:0e:7e:8a:f2:4b:82:b4:17:
                    67:77:5f:f2:d0:52:ca:e5:96:24:70:6a:e8:10:dd:
                    5d:e0:78:38:a9:45:93:ce:69:04:7f:95:e3:1f:b8:
                    dc:c3:ba:e1:d8:ce:80:ec:c9:f2:3e:a8:d7:d7:fe:
                    2c:cb:9a:2c:20:fc:0d:cc:56:56:12:c3:42:02:ef:
                    43:f2:29:b1:96:7c:44:0e:e9:94:26:3d:bd:6b:ed:
                    09:c6:71:e5:f7:1f:36:cb:ae:eb:53:b1:07:94:0c:
                    26:95:51:2f:02:0f:6a:ee:15:76:5e:19:5d:f2:8d:
                    65:25:8c:6f:25:5e:40:ea:ab:cc:e1:29:49:ba:04:
                    cb:39:d3:8b:76:05:38:1c:73:15:3b:38:30:cc:d9:
                    f7:d9:1a:aa:f4:0c:fe:6c:78:77:76:23:fa:c7:d2:
                    ac:31:ba:69:0f:b5:fa:dd:07:08:77:60:27:43:fa:
                    3f:e0:16:fa:50:88:4a:65:76:de:ac:fb:2a:1b:4c:
                    75:45:c6:e3:52:b8:92:2c:07:9b:cb:86:1b:bb:b6:
                    18:d1:2f:94:88:d4:2a:2c:ce:3d:ea:91:72:8b:79:
                    88:be:77:02:72:26:48:c8:aa:df:2e:04:07:06:86:
                    6c:db:c2:4e:56:15:0a:a8:e5:65:f0:9e:50:d0:83:
                    49:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D4:3C:88:12:08:63:2A:45:70:8C:3B:27:FB:FA:27:6D:E0:B5:C5
            X509v3 Authority Key Identifier:
                keyid:F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:51:6b:50:21:e1:df:85:94:b0:2c:eb:8d:6d:98:14:28:9f:
         cb:05:9f:75:17:11:5b:1e:63:d8:04:70:c4:36:e6:6a:93:e4:
         3d:5b:5e:96:6a:d0:6a:f4:09:50:de:ba:04:e7:91:96:b1:0f:
         f7:9f:f6:34:e9:dd:bf:09:44:c9:b8:e2:6a:47:e5:ac:a9:c6:
         20:58:85:ab:f1:db:74:03:50:a5:dc:23:a0:09:4a:b8:63:af:
         86:81:86:83:04:0b:f3:e5:de:65:06:5f:09:df:80:ad:ad:01:
         64:e4:c0:5f:aa:3d:9e:e8:3f:15:2a:9e:c2:43:9d:bf:b4:84:
         fa:b7:a7:de:4b:6c:cc:a7:dc:8a:45:40:d4:3f:f2:54:8b:d7:
         1c:76:89:10:ed:ee:0a:b8:55:c5:d3:9f:22:2c:96:1b:d2:d4:
         1f:bb:02:07:aa:ba:09:ce:48:84:3a:ef:04:7c:be:72:dc:10:
         8a:d8:de:c4:38:c8:68:f3:6b:4f:97:36:e3:eb:60:2c:1b:70:
         a2:ff:b0:80:5c:af:3d:72:d0:73:88:a2:55:cb:49:a6:1d:82:
         6b:d2:76:d9:18:9a:1b:79:83:c4:dd:72:f2:a1:67:77:54:15:
         75:2e:b5:aa:99:0e:bd:e8:b9:bc:f8:9b:c8:2f:47:c1:2e:6e:
         b7:7a:49:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:07:14 2025 by rpki-client