Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
File:                     _dkd0w6bH-o7t-Eq73YhZigSmyM.mft (raw, json)
Hash identifier:          cZUGgWmbutqH6WZbzhPpbQif5pLSn+puZlYmQ5RCMW4=
Subject key identifier:   31:BF:A2:74:39:1A:E8:7E:C8:39:49:BE:2F:A8:5C:74:11:86:47:D4
Authority key identifier: FD:D9:1D:D3:0E:9B:1F:EA:3B:B7:E1:2A:EF:76:21:66:28:12:9B:23
Certificate issuer:       /CN=A9192B86/serialNumber=FDD91DD30E9B1FEA3BB7E12AEF76216628129B23
Certificate serial:       0133
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
Manifest number:          012F
Signing time:             Sat 09 Aug 2025 04:57:25 +0000
Manifest this update:     Sat 09 Aug 2025 04:57:24 +0000
Manifest next update:     Sat 16 Aug 2025 04:57:24 +0000
Files and hashes:         1: _dkd0w6bH-o7t-Eq73YhZigSmyM.crl (hash: X1b6vyMWe0eY5ojESvuwuIHXHmukxlW7BrB+lPRwXpk=)
                          2: DECE1662A87D11EE882D7B6EC4F9AE02.roa (hash: C77jJoshdfxzPcbWVGuVdmC/Yt4X5b0+J8bsZe99ndM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.crl
                          rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307 (0x133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192B86, serialNumber=FDD91DD30E9B1FEA3BB7E12AEF76216628129B23
        Validity
            Not Before: Aug  9 04:57:24 2025 GMT
            Not After : Aug 16 04:57:24 2025 GMT
        Subject: CN=6896d535-b8c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:96:f9:61:b0:8a:38:03:2e:ea:a7:6b:71:54:
                    2e:5e:d4:58:24:32:94:f0:f0:d7:aa:ce:f8:2f:2a:
                    92:f1:83:07:53:64:99:c8:83:c1:28:cb:8b:98:e9:
                    af:94:77:6f:8a:ef:4a:1a:06:45:83:72:b0:41:9e:
                    84:05:a3:8a:ae:33:02:b2:75:08:59:bc:24:98:a3:
                    04:45:b1:9b:46:ab:fe:49:9a:85:62:ac:53:90:48:
                    11:35:29:d3:e8:4e:33:3a:31:7e:97:10:40:33:83:
                    f5:4e:b7:18:c1:bc:92:2f:d3:fe:57:25:45:e8:8c:
                    d5:ed:19:0b:07:6a:b2:41:5e:93:a3:30:f3:1d:10:
                    a5:ed:26:74:77:02:e2:cc:00:fb:cb:c3:8f:aa:6c:
                    3d:c3:9e:46:06:c7:67:b2:3c:a8:74:03:22:d9:8b:
                    f5:74:4d:ca:5f:a4:83:b9:53:ad:83:b6:0f:48:72:
                    4e:5a:a0:76:4f:8f:0f:db:6a:86:67:5e:80:c1:0b:
                    38:d4:5f:91:fa:6b:ff:5e:04:78:32:51:b1:5a:ac:
                    27:cf:6a:0e:b6:4e:14:43:12:6b:ea:f2:4b:5e:bc:
                    3b:c6:5c:df:3d:db:2f:4b:4d:a6:3c:3c:52:bd:b6:
                    69:c8:83:07:4e:26:e8:ae:d2:8e:35:58:33:fa:85:
                    27:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:BF:A2:74:39:1A:E8:7E:C8:39:49:BE:2F:A8:5C:74:11:86:47:D4
            X509v3 Authority Key Identifier:
                keyid:FD:D9:1D:D3:0E:9B:1F:EA:3B:B7:E1:2A:EF:76:21:66:28:12:9B:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:2f:c6:46:a8:fb:b4:b0:2c:42:94:40:50:dd:20:8e:12:9c:
         54:03:62:2e:45:2a:ed:0b:25:37:94:d9:4e:fe:34:5d:86:86:
         b6:cd:54:b2:dd:12:7b:d9:31:61:2a:80:cb:d1:bd:56:e1:26:
         a8:fa:38:ad:a1:87:89:15:24:06:b2:b4:1e:e7:5a:4d:0b:6e:
         de:d8:00:95:59:8f:9a:49:e4:79:dd:bf:82:2d:59:99:2c:5c:
         ea:e9:cb:a6:7a:f2:43:45:ce:26:cf:25:09:72:a3:a5:5a:e7:
         25:62:be:84:24:27:da:c6:11:6c:e1:35:d5:cd:80:c3:96:b3:
         44:a5:1d:ab:71:a8:54:11:f8:f0:07:10:95:42:51:5d:e0:09:
         38:66:a7:42:64:d2:09:b8:68:5c:69:4a:b7:d9:25:11:ce:40:
         ab:c9:03:68:0c:7d:8e:4e:45:90:fc:00:b4:08:12:aa:cb:cd:
         88:c0:4c:38:aa:bf:6f:f7:e3:e6:d3:94:87:02:50:52:ba:f5:
         55:32:e3:ed:d7:d5:04:28:38:96:6e:64:94:00:37:38:7a:23:
         70:fb:42:19:79:87:7d:00:92:9d:be:a6:2c:00:0f:ff:5b:38:
         5c:91:ee:06:a3:84:d9:f1:ea:81:1d:a2:fb:5f:b6:2a:37:33:
         81:a6:7e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:11:05 2025 by rpki-client