Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.mft
File:                     0ATM-ubwekS9796TeAatucMyn_o.mft (raw, json)
Hash identifier:          8M6WtTFbwXRb3nbE6apDUfqIrP/I0AXTSNh700wvc2I=
Subject key identifier:   A5:05:00:72:2E:37:01:1F:BD:8D:C0:D1:2E:5B:A5:7B:38:8C:61:65
Authority key identifier: D0:04:CC:FA:E6:F0:7A:44:BD:EF:DE:93:78:06:AD:B9:C3:32:9F:FA
Certificate issuer:       /CN=A91E116E/serialNumber=D004CCFAE6F07A44BDEFDE937806ADB9C3329FFA
Certificate serial:       17F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ATM-ubwekS9796TeAatucMyn_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.mft
Manifest number:          17E9
Signing time:             Fri 08 Aug 2025 16:43:13 +0000
Manifest this update:     Fri 08 Aug 2025 16:43:12 +0000
Manifest next update:     Fri 15 Aug 2025 16:43:12 +0000
Files and hashes:         1: 0ATM-ubwekS9796TeAatucMyn_o.crl (hash: lUnKNjW3wyq5NfisnKSGXboPT38MbwT2C+QCi+0ldXg=)
                          2: A1021498C53311E7B0B0744BC4F9AE02.roa (hash: CJnMqYQU8gUfeRnUpkZiw2o/uqMdgxl50z9qK6F+HgU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.crl
                          rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ATM-ubwekS9796TeAatucMyn_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6134 (0x17f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E116E, serialNumber=D004CCFAE6F07A44BDEFDE937806ADB9C3329FFA
        Validity
            Not Before: Aug  8 16:43:12 2025 GMT
            Not After : Aug 15 16:43:12 2025 GMT
        Subject: CN=68962921-ab74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:25:72:ec:ba:06:ed:47:ef:95:5a:cc:0c:fd:
                    1a:fa:a5:b0:0f:81:79:3b:10:20:5b:9c:68:f8:97:
                    47:36:00:22:3a:9f:fb:60:11:32:89:94:59:17:03:
                    db:9a:09:97:6d:bb:09:1c:16:c6:46:b1:b1:65:9a:
                    64:27:4b:1c:e9:28:6d:dc:2f:c9:dc:e1:3c:e3:5b:
                    48:3f:c4:6a:12:e0:65:6b:72:0c:45:a0:c4:4f:05:
                    a0:2b:c8:40:2b:f8:62:3b:af:43:9e:42:08:48:f4:
                    f3:bc:06:99:e4:18:7d:d2:21:5d:5d:90:ca:80:a7:
                    92:57:3b:47:e7:ed:cc:e4:ac:14:3b:36:42:65:0a:
                    be:a1:74:74:d8:67:53:ed:9e:c5:b6:ea:d0:ad:18:
                    3a:be:bd:34:3b:7f:54:5e:54:23:16:ea:64:b3:3b:
                    bb:e9:cc:13:1e:ee:cb:72:d7:7c:69:e7:0b:4d:31:
                    b8:53:34:b1:82:a3:66:52:cb:80:c0:32:ad:cb:ef:
                    85:55:d1:fc:47:d7:92:c9:74:c9:3c:ff:7c:bb:20:
                    e2:ac:25:6e:3c:ef:88:8a:32:29:ac:b0:22:79:e2:
                    af:41:a6:df:e8:d6:b6:aa:62:bd:19:9e:f2:e5:02:
                    3a:32:f9:f9:b9:11:f7:f2:3a:b8:7a:49:ef:a2:0f:
                    23:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:05:00:72:2E:37:01:1F:BD:8D:C0:D1:2E:5B:A5:7B:38:8C:61:65
            X509v3 Authority Key Identifier:
                keyid:D0:04:CC:FA:E6:F0:7A:44:BD:EF:DE:93:78:06:AD:B9:C3:32:9F:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ATM-ubwekS9796TeAatucMyn_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:f1:2c:23:4d:26:85:91:2f:9c:c8:62:53:9e:e0:c3:a5:d5:
         1c:9a:69:af:d5:49:df:a4:65:8c:42:4e:ad:7d:11:b8:7d:00:
         d9:d6:4f:5c:5d:a7:df:b0:77:a8:20:40:f0:f5:4c:3f:80:48:
         57:55:00:bc:a0:44:f3:7e:a2:64:a9:47:ac:48:08:ff:9f:f6:
         6a:99:8f:b3:20:71:f6:77:3d:33:67:95:25:d6:70:8a:4f:95:
         c5:fd:e2:20:e1:7f:be:90:35:29:07:69:b5:1e:cd:31:f9:39:
         94:3c:79:db:44:62:69:5a:47:1d:04:bf:65:da:6c:93:b5:98:
         bd:e6:d5:83:db:10:10:40:9e:58:fc:77:f3:7e:1e:47:84:f5:
         eb:c6:28:b7:9d:ea:62:45:f5:f2:4c:14:79:6d:dc:6a:1f:e3:
         b7:b6:57:72:e5:3a:eb:7f:35:aa:1b:ba:c1:37:69:ff:6b:e1:
         bd:e6:52:77:cd:95:a7:78:6f:f7:b3:ed:72:4e:14:87:2e:af:
         bc:aa:e3:2c:b7:cc:ca:c4:66:78:33:4a:3a:c7:ac:a6:3c:fc:
         84:75:70:14:86:e4:6a:90:33:7f:20:54:97:90:ff:bf:0d:cc:
         dd:21:50:04:23:bf:d6:88:82:7e:df:f6:ff:cb:8d:cb:d4:c5:
         2d:a7:84:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:48:07 2025 by rpki-client