Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.mft
File:                     n82PZ2ktvYIee95qb7vWfHgHV_k.mft (raw, json)
Hash identifier:          ZTNvCtvpZ5SE076aNcuddblCHJKXFpTNd0lJSjA7zP4=
Subject key identifier:   EB:69:91:F7:CA:41:72:B2:BE:89:77:F1:83:4C:97:40:E0:24:CD:4C
Authority key identifier: 9F:CD:8F:67:69:2D:BD:82:1E:7B:DE:6A:6F:BB:D6:7C:78:07:57:F9
Certificate issuer:       /CN=A9196780/serialNumber=9FCD8F67692DBD821E7BDE6A6FBBD67C780757F9
Certificate serial:       1B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n82PZ2ktvYIee95qb7vWfHgHV_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.mft
Manifest number:          19
Signing time:             Thu 07 Aug 2025 08:36:27 +0000
Manifest this update:     Thu 07 Aug 2025 08:36:26 +0000
Manifest next update:     Thu 14 Aug 2025 08:36:26 +0000
Files and hashes:         1: n82PZ2ktvYIee95qb7vWfHgHV_k.crl (hash: SLnvxDWeRF7dwWToKFv7gjoRmp1zJfmSd1bbfy8x0zw=)
                          2: 8CB6031052AB11F0BFD3D952C4F9AE02.roa (hash: 7wTyCg/0wP3GL3JeAUaulyMMeddiOEV7adzs5N2hvf8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.crl
                          rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n82PZ2ktvYIee95qb7vWfHgHV_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196780, serialNumber=9FCD8F67692DBD821E7BDE6A6FBBD67C780757F9
        Validity
            Not Before: Aug  7 08:36:26 2025 GMT
            Not After : Aug 14 08:36:26 2025 GMT
        Subject: CN=6894658a-7861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7b:c2:7b:9d:09:db:a1:ad:72:7f:e3:e9:63:
                    4b:e8:4d:4b:c3:e0:8b:97:51:c4:0b:c6:07:95:70:
                    73:eb:88:5f:83:21:7f:7e:82:ca:d9:74:89:b4:9a:
                    3f:c7:55:59:c4:62:e9:59:a6:6a:e9:9a:95:1c:69:
                    d3:9e:ae:cd:52:80:93:5b:49:7d:22:88:ff:c8:ac:
                    39:1d:d2:79:7f:ee:97:17:b2:28:e1:5f:41:09:33:
                    ef:c5:b4:5e:e6:0a:e0:48:1f:60:77:1b:f4:04:33:
                    a6:ed:2a:a4:44:2e:3e:70:e9:2e:4c:21:4e:0c:65:
                    22:93:02:7f:32:c8:18:9b:98:51:78:ad:15:ed:42:
                    98:97:3f:68:5f:ed:ef:c9:a1:01:99:ea:5f:0f:dc:
                    21:3a:dc:48:d2:23:05:0e:15:79:f7:6d:af:d3:b6:
                    6e:02:0c:e2:a4:be:62:43:ba:c0:06:8d:4a:86:93:
                    cc:7c:5a:b1:19:cb:dc:70:38:da:5d:ce:a3:01:23:
                    e3:c6:8d:99:59:9a:af:2b:68:06:ea:5b:09:f9:b1:
                    20:0f:da:ad:5f:f3:2d:10:ab:ad:29:d2:d6:97:87:
                    f5:00:c8:3e:34:da:fc:ff:a2:e6:04:90:32:1f:95:
                    a0:b7:0f:46:f5:df:46:51:91:30:6b:97:e4:41:ef:
                    89:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:69:91:F7:CA:41:72:B2:BE:89:77:F1:83:4C:97:40:E0:24:CD:4C
            X509v3 Authority Key Identifier:
                keyid:9F:CD:8F:67:69:2D:BD:82:1E:7B:DE:6A:6F:BB:D6:7C:78:07:57:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n82PZ2ktvYIee95qb7vWfHgHV_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:00:63:df:18:74:e1:da:e3:0e:22:ad:4c:1a:97:18:7e:24:
         05:aa:20:1d:25:e1:b3:fc:19:df:53:5f:3d:ef:aa:3a:9a:e4:
         27:d6:ab:22:0d:9b:35:8d:b7:d3:d1:6d:b9:80:52:28:71:35:
         2e:54:a1:47:f6:f2:1d:52:08:33:c7:5e:8e:64:fa:91:36:7b:
         cc:e2:3c:8f:e5:2b:7c:38:03:72:ca:e3:13:5e:43:ff:53:60:
         b3:2d:ce:f2:12:b1:31:bb:82:ce:f8:47:dd:69:d8:0d:c3:8f:
         0e:1d:99:e8:e3:1d:65:3a:eb:c9:c0:ce:67:2e:23:b2:38:9b:
         0b:e1:e0:5b:7a:28:88:4c:13:1d:70:bb:78:65:25:72:65:5f:
         d5:4b:bb:73:2f:d3:79:ad:7b:81:af:b8:72:c6:c9:38:7c:93:
         76:78:1e:40:9d:0c:23:b9:e4:e8:de:08:f8:b4:36:d8:ec:ae:
         e6:b0:d8:35:77:b2:48:8b:0d:15:36:d7:df:77:59:3c:1b:4b:
         ef:2c:9c:6c:bc:6a:c4:cf:d3:aa:43:b5:c4:4e:0d:0f:97:4a:
         d4:7d:36:8c:b4:ae:4c:51:c3:bf:0e:86:2c:7a:88:e7:39:7d:
         fc:07:da:1b:01:d6:a4:27:dd:e5:d6:5f:3a:ba:68:54:b5:22:
         72:04:0c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:04:26 2025 by rpki-client