Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
File:                     Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft (raw, json)
Hash identifier:          1PTUmoWZz/8G81dx42UJyrwRuqJnN4DaAAoMFKr7DyY=
Subject key identifier:   0F:2B:F9:8B:68:0C:73:4F:67:45:41:16:46:8F:75:9D:D6:A9:A7:EB
Authority key identifier: 22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7
Certificate issuer:       /CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7
Certificate serial:       082D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
Manifest number:          081C
Signing time:             Fri 08 Aug 2025 21:12:18 +0000
Manifest this update:     Fri 08 Aug 2025 21:12:17 +0000
Manifest next update:     Fri 15 Aug 2025 21:12:17 +0000
Files and hashes:         1: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl (hash: OSNutHs/ZjFsknkHo3sgVvMyow9zSmeKtqsZ2l9LaxE=)
                          2: 903E8812E38A11EAA3B8AE59C4F9AE02.roa (hash: HYLlaeYCfOhwQIw7Fb2O6gPao8D0dgK0DzH31riAA30=)
                          3: B94BEEA036D811ECB5BD1470C4F9AE02.roa (hash: CYIyqLTD/N7RHKkzVI9yCjfPCRo2bvj5EsxmVhBkQbM=)
                          4: DA0C233E3EE411ED905A3415C4F9AE02.roa (hash: EAWxypzDCQPQzqcMnvR1K/XDUjaENmu81MPhjQzqwkk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl
                          rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2093 (0x82d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D539, serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7
        Validity
            Not Before: Aug  8 21:12:17 2025 GMT
            Not After : Aug 15 21:12:17 2025 GMT
        Subject: CN=68966831-04e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0e:87:01:aa:31:b0:1d:27:31:31:02:b2:ea:
                    82:93:2c:b1:4c:1f:cb:9a:40:2c:29:dc:a3:09:5b:
                    76:3a:7d:5f:f2:da:8c:74:23:30:f0:a6:d8:37:28:
                    7e:95:4d:4e:20:59:5f:37:32:5b:3e:0b:13:90:70:
                    be:46:c6:fe:9f:44:c0:2a:0a:5c:2f:e7:10:00:8d:
                    69:69:7b:fd:8b:89:4e:58:62:3f:03:7c:0e:4b:69:
                    5f:82:d2:53:15:f1:85:58:38:dc:c8:58:ca:c0:74:
                    80:a1:81:3b:56:5e:a6:69:5c:aa:55:23:d0:b7:09:
                    b7:1a:43:67:00:29:96:5f:ba:48:af:e8:8c:29:f1:
                    5e:7e:dc:e8:5c:46:43:f3:cb:a7:9e:af:eb:a5:4c:
                    be:e5:88:02:06:46:3f:af:82:0a:6c:a2:33:53:96:
                    d8:8c:24:4e:c4:ec:31:79:81:67:56:91:3a:d5:b2:
                    4c:25:3f:d6:6c:37:6f:fe:e1:23:e4:50:b5:4a:35:
                    fe:4e:74:c2:8f:5c:10:49:30:24:6e:aa:5c:7f:36:
                    a4:82:4e:91:26:2c:1f:3f:f7:21:b1:89:5c:40:3c:
                    7a:ce:4a:79:75:2b:05:d3:80:b5:6a:ee:b9:fb:d5:
                    e8:1c:df:4d:f8:87:bf:3b:b0:1c:6c:3d:73:42:dc:
                    6e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2B:F9:8B:68:0C:73:4F:67:45:41:16:46:8F:75:9D:D6:A9:A7:EB
            X509v3 Authority Key Identifier:
                keyid:22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:16:f2:7c:90:35:ae:cd:37:4a:12:29:de:54:c3:18:46:4f:
         61:45:1c:3c:7f:69:f3:15:39:a3:cb:36:0c:f4:ad:6b:be:a3:
         ee:8e:0b:f0:67:18:c1:37:fd:ba:fb:4d:47:31:0c:bb:f9:32:
         be:97:1a:cb:51:d4:5c:0a:47:69:21:dc:21:df:05:b9:d7:b8:
         2c:2f:a5:12:e7:68:5d:e1:b0:bd:0b:d5:19:dd:ce:2b:7e:75:
         6c:c6:98:9a:08:6b:da:a5:3d:bb:d1:0b:e7:fd:8f:f4:6d:81:
         2a:e1:50:38:31:2f:38:43:df:42:19:e5:b5:b8:0c:ec:79:5d:
         0f:76:54:92:8a:6d:10:9c:2a:28:cc:75:fa:2d:df:ce:fd:68:
         ff:5b:c0:7d:63:4f:8a:be:76:f3:0f:33:a0:8e:8c:3c:ae:80:
         75:3e:2e:42:36:62:16:95:24:52:8f:7f:1d:45:46:f4:39:37:
         48:ce:f2:ac:48:14:b8:fa:e6:ea:c2:46:30:40:2e:7d:74:4e:
         84:8c:55:8b:d4:5d:36:c6:7d:90:13:51:5c:bc:44:68:23:a3:
         11:7a:8f:b4:86:8e:60:6c:8d:4f:d7:e7:9e:9e:ce:7e:fb:a5:
         42:24:c7:c1:81:75:f9:fb:b0:92:6f:9e:05:0f:84:f6:56:88:
         ac:a0:e2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:50:51 2025 by rpki-client