Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
File:                     Psg0IE1rqvmRQMA712IRRcB7umI.mft (raw, json)
Hash identifier:          GBJuAzoswM73bNxhdMeZSDlN5xX/uSJl9Td8ZPFd51w=
Subject key identifier:   08:6D:CB:BF:6E:75:B9:8E:EC:FA:D1:0C:42:0D:44:CB:14:83:FA:06
Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
Certificate issuer:       /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Certificate serial:       34C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
Manifest number:          34B1
Signing time:             Wed 06 Aug 2025 15:11:27 +0000
Manifest this update:     Wed 06 Aug 2025 15:11:27 +0000
Manifest next update:     Wed 13 Aug 2025 15:11:27 +0000
Files and hashes:         1: Psg0IE1rqvmRQMA712IRRcB7umI.crl (hash: ADRox26QE2yMtkuqib+Pv8QgP4iHCmYa6LPMDAkgCec=)
                          2: E7DDE5B8682811EB8D635520C4F9AE02.roa (hash: JPpUiaz8as6ncagKgyuUXaP5ZRdmrTGzakjmAvPZHY0=)
                          3: E73006AA682811EB8D635520C4F9AE02.roa (hash: 3dh9yLLZm2+U6xobWuHKGIC0VGl5iGyZmQBPzOFbKDA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
                          rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 15:11:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13504 (0x34c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196D24, serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
        Validity
            Not Before: Aug  6 15:11:27 2025 GMT
            Not After : Aug 13 15:11:27 2025 GMT
        Subject: CN=6893709f-2c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8d:0a:0e:69:43:4e:13:cd:af:d0:e0:b0:a8:
                    e1:4e:f9:50:43:19:9b:fb:08:88:66:9f:89:7e:18:
                    e9:74:8e:cc:2c:64:ce:f3:a0:c9:ef:df:7e:83:fc:
                    1e:dd:64:0f:43:5b:06:5f:6c:05:25:14:90:c3:53:
                    c6:16:b5:ae:75:9f:a8:3f:b8:fc:0f:76:c7:8a:e4:
                    06:f6:46:e6:82:46:af:d0:8d:ff:46:c5:e1:2c:3a:
                    50:7e:fd:6e:2b:4e:68:75:5d:7b:21:65:8e:d0:95:
                    3c:82:95:d6:9d:3b:38:52:bb:cd:88:a6:79:cb:74:
                    54:cf:6f:1f:1a:f6:fd:46:ce:76:00:c8:94:de:24:
                    41:3a:51:db:1c:18:ee:69:7b:8d:a5:f3:6d:d0:f2:
                    f0:c4:ee:b2:ee:b8:5e:cf:4b:3b:bc:cd:eb:ec:ed:
                    89:70:35:b3:83:0e:73:ab:ac:74:9f:4c:17:74:92:
                    8f:d6:40:fa:14:4f:28:0c:d4:7c:7f:79:9a:cb:09:
                    5f:10:65:e4:63:da:a1:c8:9d:ad:88:56:b7:92:0d:
                    69:0f:30:a4:74:ec:cc:50:8d:9e:0e:7e:bc:c2:7b:
                    7b:9e:89:ee:13:57:02:3e:b0:19:61:87:8a:76:50:
                    d9:0b:eb:a5:4b:12:ee:57:bc:2e:f8:4f:95:73:63:
                    99:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6D:CB:BF:6E:75:B9:8E:EC:FA:D1:0C:42:0D:44:CB:14:83:FA:06
            X509v3 Authority Key Identifier:
                keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:8f:58:92:51:2f:27:51:46:36:cf:a3:5e:a2:01:98:ba:52:
         8b:04:8e:48:76:67:6a:3d:d9:01:bc:2b:f5:e2:4e:ff:53:d7:
         f7:66:0b:24:18:10:31:2e:03:64:2d:c4:f9:c0:35:43:5b:68:
         6f:26:9b:3c:1a:d5:8e:1c:7a:28:1b:6e:dd:ab:9d:20:93:78:
         55:a5:bf:65:36:83:5f:18:fb:36:bf:8e:13:38:0b:12:a8:78:
         00:30:62:30:14:87:bc:2a:c5:c1:b1:7f:f1:f6:30:ba:b0:e2:
         b5:bc:8c:45:14:56:c1:c4:06:48:0d:3b:db:f0:c9:64:98:2b:
         4b:a7:1d:81:a9:85:92:32:e5:33:ec:88:36:9c:33:e2:ef:27:
         db:80:2e:7c:8a:e5:c1:fb:ff:55:fd:4b:49:d2:ee:73:f3:89:
         7a:4d:e0:f0:f6:78:e6:28:86:0f:96:38:d0:c8:85:8b:5e:f1:
         d9:b7:56:98:31:e9:34:81:ce:22:08:66:22:16:c9:cd:dd:6a:
         85:72:72:09:31:d2:a2:38:80:49:6c:e5:46:ba:af:f8:f4:c8:
         07:c3:3d:0d:d6:9f:cb:a0:55:1b:80:24:50:7b:74:2b:e7:58:
         69:18:d9:6e:98:73:b0:e9:1e:0b:89:7b:e3:f1:72:bb:b5:f5:
         dd:2e:ee:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:34:27 2025 by rpki-client