Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft
File:                     sgd9XTkKxy472IWxHzrm0qUmqe0.mft (raw, json)
Hash identifier:          R5vyUp/0tkDTb3lBAnqatsC2SiD5bOrytdCCi0VZAuY=
Subject key identifier:   75:D8:65:99:37:27:5D:3B:8E:F7:E8:F2:BE:B3:C2:E2:EC:1C:0E:BA
Authority key identifier: B2:07:7D:5D:39:0A:C7:2E:3B:D8:85:B1:1F:3A:E6:D2:A5:26:A9:ED
Certificate issuer:       /CN=A91C9B85/serialNumber=B2077D5D390AC72E3BD885B11F3AE6D2A526A9ED
Certificate serial:       0794
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft
Manifest number:          078B
Signing time:             Wed 18 Jun 2025 21:15:59 +0000
Manifest this update:     Wed 18 Jun 2025 21:15:59 +0000
Manifest next update:     Wed 25 Jun 2025 21:15:59 +0000
Files and hashes:         1: sgd9XTkKxy472IWxHzrm0qUmqe0.crl (hash: 5mLBcRLNZQLTfdBluMt+SlqiUNfd3AtaOnmhxgGBcJ8=)
                          2: 53B6E5D212CF11EBA8D2C037C4F9AE02.roa (hash: SqNXqLNgkpLICxW/LBSYL1V/21ZqqGqKzf6yPi47f5c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.crl
                          rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 21:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1940 (0x794)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9B85, serialNumber=B2077D5D390AC72E3BD885B11F3AE6D2A526A9ED
        Validity
            Not Before: Jun 18 21:15:59 2025 GMT
            Not After : Jun 25 21:15:59 2025 GMT
        Subject: CN=68532c8f-4291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:23:78:25:bf:dc:2d:60:35:30:d5:70:de:52:
                    58:0c:e1:20:c4:a4:a3:bf:50:e5:3f:43:50:11:d7:
                    1d:56:7c:98:52:cc:61:1c:04:23:9d:b5:e1:09:dd:
                    0c:fa:19:4c:fc:ae:6f:6e:b4:e1:75:d4:a3:e2:a9:
                    8f:f9:d0:16:4f:f8:48:46:ae:55:23:1d:30:f8:66:
                    cc:b1:99:71:33:b0:0a:c5:c9:4c:e2:91:d9:52:3c:
                    d3:b4:08:a7:d7:3c:8c:3d:f2:f7:7e:c5:6c:a1:a4:
                    d2:a3:64:17:54:d1:c8:e8:46:a6:0d:b7:7f:8f:04:
                    f5:ed:f8:c6:63:f1:03:fe:7f:fe:b4:c2:01:f1:fe:
                    4a:3f:6e:80:db:7a:b8:f9:cd:45:c4:c9:3a:9e:33:
                    f5:49:56:44:56:4f:5d:cd:a6:e0:cd:ce:67:2a:55:
                    5e:f6:a6:a1:69:a5:3b:a1:8a:d7:6b:4b:30:0e:85:
                    ef:59:85:aa:5e:c5:4e:fb:47:d8:3e:ee:1b:4a:47:
                    cc:13:ac:84:76:02:bf:af:58:04:63:e6:d3:dc:e0:
                    f2:0d:51:65:e9:63:90:e5:63:09:11:92:4f:e8:3a:
                    77:3a:b9:47:67:24:d7:be:95:bc:8e:27:4e:27:d4:
                    1c:c1:f8:e6:bc:9a:34:fc:a7:ba:cc:4f:27:6a:a6:
                    5d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D8:65:99:37:27:5D:3B:8E:F7:E8:F2:BE:B3:C2:E2:EC:1C:0E:BA
            X509v3 Authority Key Identifier:
                keyid:B2:07:7D:5D:39:0A:C7:2E:3B:D8:85:B1:1F:3A:E6:D2:A5:26:A9:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgd9XTkKxy472IWxHzrm0qUmqe0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B85/42D7C00C12CE11EB95331937C4F9AE02/sgd9XTkKxy472IWxHzrm0qUmqe0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:d2:37:a0:a3:91:5d:e7:9a:8b:3b:b3:2f:dd:56:82:66:15:
         67:41:c5:5a:80:1b:12:2b:ad:aa:33:a9:70:56:ed:77:92:4b:
         64:d1:fd:4d:e2:c2:54:78:a0:cf:cd:ee:8e:dc:0a:ac:9c:f2:
         ef:22:fb:c2:36:a5:de:58:f1:ea:b8:b2:bf:05:cc:7c:38:0c:
         ff:cb:26:b2:fe:0c:ea:72:22:fb:51:b0:31:20:cb:61:e9:18:
         2b:da:63:22:ee:52:71:ce:b9:bb:67:3e:71:12:84:af:38:c5:
         36:07:88:77:2c:f8:05:b8:8d:bb:f8:26:8e:66:07:00:65:5e:
         cb:7d:cf:a3:42:72:aa:63:37:8a:38:71:b4:29:d4:dc:b6:c2:
         ed:68:30:28:20:97:e8:0c:aa:06:56:29:a2:f1:03:18:37:50:
         39:8e:9b:7d:6c:a6:b0:7e:34:6f:c5:75:d0:a4:89:e6:4b:f5:
         95:58:d1:c4:c8:ef:92:ef:3c:83:ee:28:99:b0:0e:87:a2:7c:
         a5:6f:58:a2:79:2c:15:09:ef:1c:70:d0:d5:e0:e0:04:21:70:
         bd:a5:d1:d1:73:37:06:a0:a5:49:3c:52:8b:62:06:4a:bf:ab:
         c5:af:5c:4d:12:1d:ca:de:b0:e6:49:23:b1:91:51:4a:a8:4c:
         a5:74:26:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 06:41:59 2025 by rpki-client