Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
File:                     PDd12fh_DqopaGZ3TqYvYnTQZss.mft (raw, json)
Hash identifier:          jBeF2r05qBeXitJgFQPECcNmsV9zMNvQyD+Gsk49elg=
Subject key identifier:   94:DA:0A:6F:8B:43:C3:9C:D9:94:05:36:FD:4D:F1:EA:AD:F0:2E:CA
Authority key identifier: 3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB
Certificate issuer:       /CN=A9193388/serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
Manifest number:          9F
Signing time:             Sat 09 Aug 2025 07:12:47 +0000
Manifest this update:     Sat 09 Aug 2025 07:12:46 +0000
Manifest next update:     Sat 16 Aug 2025 07:12:46 +0000
Files and hashes:         1: PDd12fh_DqopaGZ3TqYvYnTQZss.crl (hash: GJeyEGxD/MwdEjcGSSXm80vCohiIy8lnllyt6zhRw3s=)
                          2: A3472C78743711F088C1E956C4F9AE02.roa (hash: LV6X80L3ccxBK4v6DA6N8RMZNVJ1B9qUcxOULyULswY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.crl
                          rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193388, serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB
        Validity
            Not Before: Aug  9 07:12:46 2025 GMT
            Not After : Aug 16 07:12:46 2025 GMT
        Subject: CN=6896f4ef-1751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:89:10:30:12:2b:01:0e:d1:8a:99:c5:87:f5:
                    6e:f1:f1:2b:63:c8:31:72:22:7b:38:da:f7:45:ef:
                    82:0e:bc:3e:e3:d2:f6:2c:a3:ee:19:98:bc:43:9e:
                    d9:f5:9e:78:46:c7:48:3b:a6:c7:6c:8c:f9:a1:ea:
                    86:4b:f0:a7:11:d8:1f:28:0c:6e:d1:87:8d:cf:d7:
                    7f:1e:c4:ad:9a:e0:56:a3:40:99:8b:05:f5:2d:bc:
                    4a:44:46:b0:9f:c3:95:e4:93:6e:a4:c9:26:29:54:
                    86:19:1b:b6:37:d0:44:00:45:22:d9:b8:74:d0:a6:
                    3e:0c:e9:7b:0c:28:8b:4d:d8:9f:9f:12:5f:8d:1d:
                    98:70:c6:50:88:0a:c7:a1:ee:fa:3a:4f:fe:10:66:
                    e6:3a:73:14:cc:e3:08:a2:a6:fc:c6:44:c4:bf:25:
                    83:8a:af:64:a2:db:83:32:92:ef:f7:5a:30:e0:8b:
                    e7:34:da:c3:68:be:86:a6:cf:d0:8f:5b:5f:b7:c8:
                    df:a8:66:4e:da:c8:00:a1:bc:bb:1a:1d:45:a0:c4:
                    2e:23:e6:22:24:48:69:3a:b1:a6:48:9b:ea:d3:99:
                    64:38:ce:91:00:10:93:a5:07:c8:74:39:b2:9b:3a:
                    81:d5:09:80:76:44:40:58:e2:97:d2:e9:b9:3c:95:
                    cd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DA:0A:6F:8B:43:C3:9C:D9:94:05:36:FD:4D:F1:EA:AD:F0:2E:CA
            X509v3 Authority Key Identifier:
                keyid:3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:1d:ce:cf:e5:0b:07:ee:fa:b3:9a:e1:d0:ba:d5:0d:c0:ea:
         f9:61:5c:fb:ce:c1:ad:48:18:a8:c5:e8:be:23:d7:c1:26:03:
         20:93:af:48:0a:d9:b6:17:ce:c4:a8:11:fd:42:f6:9c:cd:2a:
         7d:1e:b1:b4:3c:e1:11:63:00:df:08:1e:8a:be:ee:bf:56:3a:
         b7:33:f7:6a:81:0c:29:25:2b:43:d7:78:e2:4b:dc:52:79:a5:
         98:64:f4:ed:f6:b4:a8:a5:c4:83:4b:d0:8f:c1:dc:4a:a1:e0:
         50:59:21:09:12:29:d1:8c:da:a8:0e:2f:9a:70:fb:86:a0:95:
         72:1d:8e:ce:91:20:bf:c7:03:49:f8:59:8e:16:cc:42:2b:4e:
         f6:97:1f:d6:36:ca:3b:bf:f0:4d:35:1b:c4:db:45:e8:c9:79:
         16:5c:44:7b:24:39:01:d5:46:72:5c:34:73:0d:7a:43:c9:41:
         88:36:a5:b1:31:f8:0d:8d:0d:55:99:11:a3:3b:66:45:98:fe:
         b8:cb:61:bd:7d:1e:96:7d:74:c5:30:b1:56:63:79:d8:81:a4:
         1c:f5:e0:e2:64:61:66:c3:20:48:4e:a2:3d:64:76:63:96:cf:
         bb:6e:1e:ab:fd:7c:65:64:09:02:71:3a:07:0e:94:bf:97:55:
         89:fe:fa:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:16:10 2025 by rpki-client