Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft
File:                     pK73BplO997sjIomg0NykQSEsbA.mft (raw, json)
Hash identifier:          ksUhVcibq0njFBL6/5PT61IZNtCwcyxvJBOjQOpP8WQ=
Subject key identifier:   DF:99:BC:58:39:34:3D:B9:9D:E0:1B:A1:FE:96:04:69:72:3A:51:5A
Authority key identifier: A4:AE:F7:06:99:4E:F7:DE:EC:8C:8A:26:83:43:72:91:04:84:B1:B0
Certificate issuer:       /CN=A9196412/serialNumber=A4AEF706994EF7DEEC8C8A26834372910484B1B0
Certificate serial:       06CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pK73BplO997sjIomg0NykQSEsbA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft
Manifest number:          06C1
Signing time:             Wed 06 Aug 2025 22:29:52 +0000
Manifest this update:     Wed 06 Aug 2025 22:29:51 +0000
Manifest next update:     Wed 13 Aug 2025 22:29:51 +0000
Files and hashes:         1: pK73BplO997sjIomg0NykQSEsbA.crl (hash: mUS5uCGhz26CFRy21KEIBTNi6C+b6x2CytGPAEyuNAk=)
                          2: 7568D85E731211EBAFF0B481C4F9AE02.roa (hash: 4hu+Ea1WW3aPEC6/j9KPgOfcmbDhbVy01ftALoJDrTc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.crl
                          rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pK73BplO997sjIomg0NykQSEsbA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 22:29:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1743 (0x6cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196412, serialNumber=A4AEF706994EF7DEEC8C8A26834372910484B1B0
        Validity
            Not Before: Aug  6 22:29:51 2025 GMT
            Not After : Aug 13 22:29:51 2025 GMT
        Subject: CN=6893d75f-bf1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0e:e6:f7:e7:87:65:01:bb:fb:93:42:f6:5f:
                    99:e9:7a:08:d7:e1:df:33:38:74:56:45:8d:ef:01:
                    ed:66:13:17:b0:c2:99:32:3f:ae:5f:10:d8:f6:a4:
                    c6:55:65:a6:38:5e:28:0a:0c:3e:45:14:c2:80:57:
                    61:a5:ca:81:54:7a:8f:8c:64:21:df:ca:ec:43:b3:
                    b5:2e:bb:b8:5a:76:97:29:b1:3c:1d:0a:c3:84:aa:
                    ac:28:d9:2c:09:d4:d6:1d:49:e8:85:93:a4:90:d3:
                    4c:b3:77:f9:c1:71:f0:ef:4e:fd:06:1a:f8:85:60:
                    d8:05:89:6d:cd:d2:94:18:58:70:66:23:e0:06:9f:
                    40:88:c3:22:c8:01:d4:0b:ee:5c:88:a7:31:8d:22:
                    72:54:a8:c5:55:7f:54:62:9a:a9:4a:18:db:7a:7c:
                    ec:77:40:e0:e8:72:d2:84:84:5c:32:77:e5:3c:eb:
                    c5:51:ba:d3:dc:d5:89:29:49:fa:ec:d9:13:78:b9:
                    be:f9:23:6f:2a:c2:b6:8b:56:00:da:be:09:4e:21:
                    ab:44:77:94:d1:e3:fe:0a:44:0b:14:a4:d8:1e:1b:
                    04:18:a1:eb:de:67:cd:fa:8b:b6:93:cd:ec:0f:f8:
                    51:44:8d:13:04:ab:9b:40:e8:14:1b:33:4f:3d:42:
                    aa:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:99:BC:58:39:34:3D:B9:9D:E0:1B:A1:FE:96:04:69:72:3A:51:5A
            X509v3 Authority Key Identifier:
                keyid:A4:AE:F7:06:99:4E:F7:DE:EC:8C:8A:26:83:43:72:91:04:84:B1:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pK73BplO997sjIomg0NykQSEsbA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196412/A8D662406F9A11EB8A13DF17C4F9AE02/pK73BplO997sjIomg0NykQSEsbA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:a2:db:05:a0:aa:cb:0c:96:41:bc:a7:c3:64:91:dd:22:fa:
         98:f3:3d:09:31:bb:c8:df:e4:0f:b2:67:49:3d:86:db:ea:58:
         45:cd:e5:cb:84:05:24:bc:e8:5a:db:28:57:8e:2b:f3:13:c5:
         86:0c:52:6b:17:4d:b9:fd:ac:63:03:68:59:b5:65:e9:57:5a:
         00:73:94:10:e2:65:90:50:c4:66:20:82:fa:71:80:f6:11:77:
         2b:d0:9d:e1:60:40:e0:33:95:2b:e8:58:62:42:77:26:fd:88:
         56:74:34:b5:5c:93:76:57:bd:ae:00:50:d9:0f:41:0d:be:93:
         b4:cc:40:34:b4:d6:22:4f:f4:6b:eb:7d:80:a5:8c:24:48:f9:
         be:2d:c5:0c:65:aa:5f:3e:a2:8d:dc:a8:2f:43:c3:ee:78:31:
         e2:c9:eb:a1:2a:5f:23:95:fd:58:8c:9c:3e:a7:31:9a:6e:ff:
         75:7d:b4:14:bc:d0:06:dc:01:94:40:8e:90:93:d3:ee:cc:3c:
         81:50:35:2a:af:c3:42:66:3d:f3:d2:99:4b:eb:2e:a4:83:da:
         a8:dd:e5:26:51:4b:7c:fa:eb:c7:8b:71:30:70:3d:8e:cb:f0:
         9b:bc:b5:3b:f9:d0:e6:af:65:f0:b7:c0:08:ee:8f:02:30:bb:
         8f:03:54:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:03:18 2025 by rpki-client