Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft
File:                     4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft (raw, json)
Hash identifier:          CQmWzR9m/fHnz3NKrGNWG8IIKgDGz8WiHuKFR68xtNY=
Subject key identifier:   AB:0C:74:D5:87:48:24:EC:19:65:B3:8C:84:5A:61:18:2F:06:B0:76
Authority key identifier: E1:D3:30:31:6C:3A:26:84:24:D7:19:7A:BF:34:12:F7:23:11:41:DF
Certificate issuer:       /CN=A9110E65/serialNumber=E1D330316C3A268424D7197ABF3412F7231141DF
Certificate serial:       BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dMwMWw6JoQk1xl6vzQS9yMRQd8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft
Manifest number:          BF
Signing time:             Mon 11 Aug 2025 06:01:46 +0000
Manifest this update:     Mon 11 Aug 2025 06:01:46 +0000
Manifest next update:     Mon 18 Aug 2025 06:01:45 +0000
Files and hashes:         1: 4dMwMWw6JoQk1xl6vzQS9yMRQd8.crl (hash: DrhJScuG43voJuEchRwHa3eKA8+jWEt88IL0jsdZ8a4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.crl
                          rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dMwMWw6JoQk1xl6vzQS9yMRQd8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 Aug 2025 06:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110E65, serialNumber=E1D330316C3A268424D7197ABF3412F7231141DF
        Validity
            Not Before: Aug 11 06:01:46 2025 GMT
            Not After : Aug 18 06:01:45 2025 GMT
        Subject: CN=6899874a-cb01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:33:7d:97:04:3b:cb:ff:c1:57:e3:f2:05:0e:
                    f9:8a:a7:03:ee:7d:6f:53:99:07:99:6c:91:8f:53:
                    42:70:01:84:4b:1e:d1:7d:81:34:12:b3:97:d8:1f:
                    8d:e5:28:fa:b0:76:87:40:33:de:f6:fd:f3:88:89:
                    ba:a1:94:85:a5:e4:83:4c:6a:bf:91:1a:a8:7b:92:
                    44:f1:52:fa:93:67:80:a1:a8:b2:cc:4c:b6:d8:43:
                    9b:09:61:ee:63:79:be:10:ed:30:6d:27:69:1a:16:
                    41:01:f2:7d:58:74:27:fe:d9:80:2a:e6:31:4e:41:
                    b7:71:c3:50:4c:22:60:9a:92:71:b3:7e:fa:ea:b8:
                    43:2a:44:29:2f:93:35:4d:36:8a:75:b2:9a:78:cf:
                    06:36:13:9b:e8:80:38:76:4b:76:83:5f:cd:b7:87:
                    c9:2f:e9:65:ee:40:46:3d:79:d3:44:0e:75:d0:2c:
                    81:42:65:72:b8:b4:2c:9f:9f:7a:0d:1a:1d:00:2a:
                    e3:7d:4a:47:ea:58:fd:59:1e:bd:1e:9b:61:cd:54:
                    64:b2:24:82:00:c3:b8:23:4c:fa:fb:6a:bd:04:22:
                    dc:d9:98:be:12:ef:cc:9a:6c:a6:b6:0e:2a:d7:2c:
                    41:7c:38:d4:22:ce:ee:02:14:b8:1e:a2:eb:64:60:
                    2c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0C:74:D5:87:48:24:EC:19:65:B3:8C:84:5A:61:18:2F:06:B0:76
            X509v3 Authority Key Identifier:
                keyid:E1:D3:30:31:6C:3A:26:84:24:D7:19:7A:BF:34:12:F7:23:11:41:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dMwMWw6JoQk1xl6vzQS9yMRQd8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110E65/CE216F86538011EFAD67E878C4F9AE02/4dMwMWw6JoQk1xl6vzQS9yMRQd8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:f3:94:78:27:00:26:5a:8a:7d:f8:40:d1:42:9a:90:be:61:
         19:36:73:ee:d6:17:d7:6d:9e:68:90:7c:2c:73:49:05:e7:8a:
         0f:c8:a0:ed:b5:a3:36:13:4f:e4:45:40:8a:43:65:9d:8d:42:
         75:cc:a4:44:c8:6b:5f:7d:c8:db:b1:9e:ed:bf:af:8f:3a:dc:
         d9:f6:aa:08:c3:5b:d3:77:5d:1f:da:b4:6f:42:5f:a0:d4:81:
         ca:d1:2d:91:54:48:68:a6:5e:55:67:7d:60:e0:e8:c4:da:c1:
         d6:50:49:ce:c4:9f:7d:d3:c8:32:d9:a4:cf:61:9a:f8:b8:df:
         1b:05:cd:b0:43:4d:91:cb:4d:0e:ec:1b:e4:53:f8:fb:c3:f9:
         b7:49:65:09:0c:f6:f6:33:82:91:f8:b9:d3:13:96:db:ac:b1:
         c2:ef:f2:3b:14:1a:7c:97:fe:34:e1:48:1d:75:db:77:0f:8d:
         c8:e2:42:5c:8a:92:33:6f:e3:49:c1:cb:5a:95:97:f7:02:76:
         e1:ba:77:69:a5:69:61:d5:cc:99:67:41:b0:30:49:c1:38:63:
         83:b2:0d:ae:37:69:62:35:82:c3:36:0d:92:5f:57:0f:7e:69:
         25:7d:7f:27:2c:61:bd:ca:16:d0:57:87:2f:5d:01:fd:42:be:
         08:39:28:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:52:21 2025 by rpki-client