Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.mft
File:                     p93zVatoEjcBpb3RX2W6lktd4DU.mft (raw, json)
Hash identifier:          x0QG0V5iJ1+k6kbqmkRwAxuq9pIKiO3pgg1mWYmtgB0=
Subject key identifier:   AF:81:98:6B:83:73:BA:A0:B5:88:0D:BB:71:09:59:64:9A:7F:00:7F
Authority key identifier: A7:DD:F3:55:AB:68:12:37:01:A5:BD:D1:5F:65:BA:96:4B:5D:E0:35
Certificate issuer:       /CN=A9195A1A/serialNumber=A7DDF355AB68123701A5BDD15F65BA964B5DE035
Certificate serial:       8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p93zVatoEjcBpb3RX2W6lktd4DU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.mft
Manifest number:          8C
Signing time:             Sun 15 Jun 2025 05:36:26 +0000
Manifest this update:     Sun 15 Jun 2025 05:36:25 +0000
Manifest next update:     Sun 22 Jun 2025 05:36:25 +0000
Files and hashes:         1: p93zVatoEjcBpb3RX2W6lktd4DU.crl (hash: jdKZr5bzQdAMuM8EdbB2+ZILdCBNlabueL8USOYZxto=)
                          2: 77BC7D3A74F411EF8B9E1067C4F9AE02.roa (hash: TnDDPyuYfLyHK//K+Hn8T0/qN9TuFXBURI4PhKRtzFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.crl
                          rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p93zVatoEjcBpb3RX2W6lktd4DU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195A1A, serialNumber=A7DDF355AB68123701A5BDD15F65BA964B5DE035
        Validity
            Not Before: Jun 15 05:36:25 2025 GMT
            Not After : Jun 22 05:36:25 2025 GMT
        Subject: CN=684e5bd9-0a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:41:29:c4:c5:b5:4d:f8:b6:14:cf:91:dd:b2:
                    ff:e4:a5:b3:5a:69:a4:3c:4d:78:8a:6f:fa:1e:21:
                    8d:6d:c4:ff:9b:2f:c9:4b:6e:d0:b2:63:2d:f8:af:
                    d2:53:b9:7a:11:ff:8d:3b:26:6e:b0:d4:3f:df:0b:
                    58:0d:d2:9d:03:ed:23:36:ff:ef:a2:33:bb:83:b2:
                    7f:18:23:9b:36:34:9a:44:58:cc:36:88:54:68:70:
                    fd:e0:e5:7e:87:57:75:33:9a:49:b3:90:98:87:98:
                    02:3c:53:77:43:04:ef:5b:7f:aa:96:55:ce:f9:9b:
                    fd:3c:9b:3d:a4:36:4e:c7:4d:d3:59:64:87:1a:65:
                    44:4e:82:89:59:1c:e2:ac:0e:a5:d7:9d:ab:5b:5a:
                    95:b4:1f:b8:e9:12:93:e7:57:ad:41:41:cb:9c:fb:
                    87:19:85:c5:fe:f6:a0:8b:5b:00:14:9a:18:96:35:
                    19:1d:62:49:db:b1:1c:07:93:4a:37:e2:95:0c:ff:
                    df:ed:09:56:0d:75:08:09:02:57:e8:29:a4:dc:ad:
                    60:f3:88:4a:66:e6:a4:23:71:5c:6a:2f:7f:85:8e:
                    38:9b:09:26:53:34:e0:28:c8:58:23:bc:a3:bd:d5:
                    df:d1:51:2b:03:be:aa:3f:99:c7:63:27:43:18:f8:
                    f4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:81:98:6B:83:73:BA:A0:B5:88:0D:BB:71:09:59:64:9A:7F:00:7F
            X509v3 Authority Key Identifier:
                keyid:A7:DD:F3:55:AB:68:12:37:01:A5:BD:D1:5F:65:BA:96:4B:5D:E0:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p93zVatoEjcBpb3RX2W6lktd4DU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A1A/C2F4EE2074A611EFAE54783CC4F9AE02/p93zVatoEjcBpb3RX2W6lktd4DU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:b7:5a:4b:57:84:41:6b:79:5f:c0:0b:46:ee:16:3c:6f:21:
         aa:d4:3b:f4:d1:5f:75:9a:e5:03:57:0e:14:25:3c:fb:41:27:
         a0:f0:2c:a4:07:ce:43:33:f4:65:78:45:2d:3e:0f:e2:bd:9f:
         ef:e2:7b:6e:72:82:c9:f2:07:51:62:4c:18:bc:62:d4:e8:ae:
         09:fb:49:83:bd:4e:d3:ed:12:9c:de:51:1b:e6:af:b0:89:c3:
         03:95:52:d5:51:02:50:fb:ce:c9:8d:45:a1:86:92:dc:d8:e1:
         95:f3:09:61:a3:cd:17:e4:e2:1e:70:30:8f:99:49:19:ed:45:
         6c:16:ce:59:aa:6c:ec:20:dc:8a:bc:fc:5f:df:54:a1:be:f8:
         83:9c:62:2d:ac:32:3a:9b:e4:32:9b:e0:c3:e7:a4:75:20:b7:
         42:19:24:0c:bc:e8:4d:6b:05:63:68:13:e6:d8:3f:f3:92:06:
         bf:98:36:4f:25:a7:af:a8:ab:46:19:ef:bb:84:64:7d:a3:d0:
         0a:19:9f:96:28:50:d7:0b:2e:ca:97:8c:b6:63:6c:16:81:e3:
         ba:b7:47:45:8e:01:1a:0a:41:c3:60:8a:ff:47:03:60:b8:41:
         43:2b:7a:b7:26:cf:1f:5b:08:b3:fe:11:b5:ce:58:b8:ee:33:
         9d:87:f5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:42:14 2025 by rpki-client