Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
File:                     PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft (raw, json)
Hash identifier:          ceU0WARQF+LuXGp4otwN0r3T7GrAVgWggRH2JLSxsWY=
Subject key identifier:   FE:E6:2C:21:67:84:A5:E0:BE:04:14:2C:CE:BE:54:C4:49:EF:32:C9
Authority key identifier: 3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E
Certificate issuer:       /CN=A91DD3FB/serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E
Certificate serial:       07D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
Manifest number:          07CB
Signing time:             Fri 08 Aug 2025 21:29:57 +0000
Manifest this update:     Fri 08 Aug 2025 21:29:57 +0000
Manifest next update:     Fri 15 Aug 2025 21:29:57 +0000
Files and hashes:         1: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl (hash: M7WCPem6BN3jqsX8Z3SvPBnqCsLTd7Pro5d8j+1g5rM=)
                          2: 2037569602BD11EBB333DA0FC4F9AE02.roa (hash: wrP/aiUubLvMy2sDZxNt1LMzFgR4k2obYAa+c5WHPY8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl
                          rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2001 (0x7d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD3FB, serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E
        Validity
            Not Before: Aug  8 21:29:57 2025 GMT
            Not After : Aug 15 21:29:57 2025 GMT
        Subject: CN=68966c55-4826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:66:25:4a:e2:c4:0b:1d:69:a3:bf:9c:1d:2a:
                    52:ff:a8:51:85:d1:e5:70:a4:ae:17:2d:b5:14:9a:
                    e1:6e:2f:2f:45:0a:db:89:a4:74:ef:92:e6:53:38:
                    1b:57:42:ba:d0:4e:41:f5:6d:28:f0:d7:ff:bf:7c:
                    27:f8:65:97:c3:3c:70:a2:f3:7f:fd:69:26:77:3d:
                    ed:3b:93:dc:ee:17:e2:2a:65:0a:39:6d:7f:66:36:
                    7e:ab:02:6e:18:11:81:fd:1d:df:97:2d:5a:5d:c0:
                    a0:d6:8c:39:de:2d:71:0d:b4:0d:a9:1a:51:2d:07:
                    b0:e1:50:73:85:da:d7:81:21:bf:43:8b:19:b8:2b:
                    04:8a:09:f0:6e:bd:53:88:74:63:2e:5e:f1:95:b5:
                    3a:4e:e6:ec:78:42:95:16:d8:a0:c4:8f:aa:6f:b6:
                    b5:54:e0:a8:d4:b8:da:55:fa:bc:3d:43:01:c5:bd:
                    16:2d:46:70:b5:f8:51:12:f2:7f:a3:54:95:28:f4:
                    8e:40:87:9c:ce:be:6f:bc:bd:ff:76:5c:0e:0c:70:
                    a1:bb:11:a9:35:85:9f:ec:c7:58:08:27:09:b9:a7:
                    11:df:e3:fb:61:b4:c0:a0:a7:1f:b8:ed:d2:95:43:
                    e6:01:1b:f5:e5:05:0c:0c:ce:1e:5d:3e:8a:30:23:
                    33:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E6:2C:21:67:84:A5:E0:BE:04:14:2C:CE:BE:54:C4:49:EF:32:C9
            X509v3 Authority Key Identifier:
                keyid:3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:67:64:be:12:39:0f:fd:05:8d:5c:27:85:ab:09:3b:a4:d9:
         18:a4:b7:5d:f6:14:25:a1:6d:3d:bd:3c:87:6e:ed:7e:0e:2f:
         67:01:60:ce:fd:34:db:01:b0:a2:81:8a:12:cd:bc:7e:5d:24:
         a9:76:fb:50:5e:c0:b2:ad:03:dd:16:4e:e3:c5:a2:75:17:88:
         1e:f4:3c:b0:fb:2b:3c:90:ad:bb:7d:d2:6e:d7:c6:61:dc:78:
         76:1b:4a:e1:6e:5d:32:19:7b:ef:b1:d6:ab:6b:32:a0:71:44:
         9d:5a:d6:cf:46:55:7d:73:fb:a7:4e:79:9f:64:ee:81:62:8f:
         ec:74:5b:30:5b:5d:a4:b2:33:60:d2:df:d7:8b:76:43:7a:dc:
         1c:6b:5e:cc:ac:b4:b7:66:b4:fa:20:f9:e3:ec:64:c8:1d:77:
         fb:bc:46:c3:d4:e3:66:57:1e:d5:ae:73:c9:fe:c8:cf:f6:28:
         81:42:d3:5b:20:e3:23:75:7b:65:76:8b:4b:a3:0e:4f:f0:42:
         64:01:7f:a0:a9:f9:64:e3:f4:70:2b:e4:b5:3e:90:74:02:b8:
         5f:6c:44:de:eb:25:e3:7c:74:c6:5a:76:6a:d0:52:6b:25:90:
         7a:8c:be:7b:33:c2:71:da:3b:6e:89:79:b2:6d:0c:42:6c:2f:
         ad:60:27:83
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REQzRkIxMTAvBgNVBAUTKDNEMUY3RkIxNDY0MTBBM0MzMzVCMzNDNDk4MkE3MzYz
OEJFNTQwOUUwHhcNMjUwODA4MjEyOTU3WhcNMjUwODE1MjEyOTU3WjAYMRYwFAYD
VQQDEw02ODk2NmM1NS00ODI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvGYlSuLECx1po7+cHSpS/6hRhdHlcKSuFy21FJrhbi8vRQrbiaR075LmUzgb
V0K60E5B9W0o8Nf/v3wn+GWXwzxwovN//Wkmdz3tO5Pc7hfiKmUKOW1/ZjZ+qwJu
GBGB/R3fly1aXcCg1ow53i1xDbQNqRpRLQew4VBzhdrXgSG/Q4sZuCsEignwbr1T
iHRjLl7xlbU6TubseEKVFtigxI+qb7a1VOCo1LjaVfq8PUMBxb0WLUZwtfhREvJ/
o1SVKPSOQIeczr5vvL3/dlwODHChuxGpNYWf7MdYCCcJuacR3+P7YbTAoKcfuO3S
lUPmARv15QUMDM4eXT6KMCMzGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7mLCFn
hKXgvgQULM6+VMRJ7zLJMB8GA1UdIwQYMBaAFD0ff7FGQQo8M1szxJgqc2OL5UCe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDNGQi80MjEyQkM5RTAy
QkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNqd3pXelBFbUNwelk0dmxR
SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BSOV9zVVpCQ2p3eld6UEVtQ3B6WTR2bFFKNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RDNGQi80MjEyQkM5RTAyQkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNq
d3pXelBFbUNwelk0dmxRSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBFZ2S+EjkP/QWNXCeFqwk7pNkYpLdd9hQloW09vTyHbu1+Di9nAWDO
/TTbAbCigYoSzbx+XSSpdvtQXsCyrQPdFk7jxaJ1F4ge9Dyw+ys8kK27fdJu18Zh
3Hh2G0rhbl0yGXvvsdarazKgcUSdWtbPRlV9c/unTnmfZO6BYo/sdFswW12ksjNg
0t/Xi3ZDetwca17MrLS3ZrT6IPnj7GTIHXf7vEbD1ONmVx7VrnPJ/sjP9iiBQtNb
IOMjdXtldotLow5P8EJkAX+gqflk4/RwK+S1PpB0ArhfbETe6yXjfHTGWnZq0FJr
JZB6jL57M8Jx2jtuiXmybQxCbC+tYCeD
-----END CERTIFICATE-----
Generated at Sat Aug 9 15:12:10 2025 by rpki-client