Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
File:                     _3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft (raw, json)
Hash identifier:          hKYBgKyl+qOre5qei5xEflJabP56Kfz6vGiTYbyEzao=
Subject key identifier:   18:BF:D1:36:53:2E:AE:E1:B0:72:DB:42:6E:60:53:C1:E2:C6:FC:CD
Authority key identifier: FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F
Certificate issuer:       /CN=A911B11E/serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F
Certificate serial:       051F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
Manifest number:          0519
Signing time:             Sat 09 Aug 2025 00:03:26 +0000
Manifest this update:     Sat 09 Aug 2025 00:03:25 +0000
Manifest next update:     Sat 16 Aug 2025 00:03:25 +0000
Files and hashes:         1: _3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl (hash: o/VtlmAHkPBP2f84kNAzmBVytjQVPaZipgnhF2hzJzY=)
                          2: 22DA1C02131B11EC83377D59C4F9AE02.roa (hash: Xe+ld1uOyTTINEu5qOXliS5+W9Wqwt4es/Y7VM8UtHc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl
                          rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1311 (0x51f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B11E, serialNumber=FF75FE93F8462CB763AD561992B03D163D16ED5F
        Validity
            Not Before: Aug  9 00:03:25 2025 GMT
            Not After : Aug 16 00:03:25 2025 GMT
        Subject: CN=6896904d-6df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0c:3b:e2:46:70:f8:f3:05:38:29:18:8e:ef:
                    ff:ff:9e:c3:8b:4a:aa:8e:28:15:b5:da:d2:74:4a:
                    53:c7:54:8a:7f:a0:ff:39:8a:18:26:6f:4f:db:12:
                    06:76:62:3a:cf:66:d3:f7:a6:af:62:06:ca:92:f3:
                    e6:da:54:17:78:98:0b:8d:fa:66:92:89:3a:99:8a:
                    05:3d:d5:66:5d:d1:14:ff:f6:39:ed:7e:ab:d7:f7:
                    af:bd:11:2b:b7:67:9d:af:7a:71:1e:14:a7:40:33:
                    1e:a0:76:41:b0:ee:ba:77:49:db:f6:73:a2:4c:aa:
                    ff:34:bf:a5:c5:9f:b9:e3:cf:5f:e1:7c:e0:6e:9a:
                    d0:f1:99:d1:b1:c0:34:42:ef:2e:72:90:d2:62:33:
                    dd:d4:3f:75:da:58:42:90:ab:48:39:5c:51:77:84:
                    4b:20:86:43:fe:14:4f:83:ae:40:13:10:0f:f9:27:
                    c1:9d:60:ad:8f:8e:ca:dc:a1:86:67:fa:04:a9:90:
                    76:2b:31:42:e6:9e:90:0c:33:12:a1:d7:39:96:45:
                    2c:78:2b:77:f7:d0:6d:36:9b:e8:f2:b7:1c:4e:4d:
                    64:1e:88:4c:1e:8c:2c:b0:be:65:27:18:f2:2b:a5:
                    8e:79:8a:88:af:41:62:23:23:9c:59:72:59:82:2d:
                    f8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BF:D1:36:53:2E:AE:E1:B0:72:DB:42:6E:60:53:C1:E2:C6:FC:CD
            X509v3 Authority Key Identifier:
                keyid:FF:75:FE:93:F8:46:2C:B7:63:AD:56:19:92:B0:3D:16:3D:16:ED:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B11E/06AF1FB2131811ECA1734356C4F9AE02/_3X-k_hGLLdjrVYZkrA9Fj0W7V8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:68:01:57:a7:7d:a5:34:4a:80:83:a1:7a:62:40:51:15:05:
         c1:da:85:06:7f:d0:10:ab:07:16:7d:b4:3a:63:d3:e0:db:f7:
         ef:d0:95:b4:b7:c7:e5:f5:f7:e9:82:ef:c9:74:aa:92:f1:d4:
         06:f0:9f:25:6a:db:53:53:85:b0:2c:7a:e3:84:7c:f6:6d:dc:
         30:74:e2:52:51:b8:74:22:02:35:cf:c1:0a:ba:e0:22:a5:de:
         41:f3:2c:4b:5e:c9:62:00:b0:15:61:dc:0b:f0:b4:d0:3c:22:
         da:67:de:b2:c0:1e:74:0e:ce:cf:15:4d:6c:36:33:c7:fe:a5:
         b3:a6:5e:bf:a9:bf:60:27:99:13:45:7f:c3:6d:fd:0a:8a:bd:
         ac:ef:ab:53:b6:ec:0d:e7:fb:15:43:ee:a5:81:12:26:92:18:
         12:14:ad:2b:7c:8c:1f:d8:ee:ef:27:11:ec:ec:c8:43:86:85:
         ac:57:95:5f:4f:68:62:b1:de:cb:ab:81:5e:75:b8:b2:1d:56:
         95:f5:84:35:2e:29:83:52:59:f5:d1:44:f4:3d:5f:be:ed:e0:
         ce:05:6a:85:64:b9:44:57:67:d1:04:dc:61:83:32:39:56:36:
         70:06:c4:a9:38:d9:33:41:a8:b2:6d:17:e7:b8:ae:af:50:89:
         ee:04:6c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:42:52 2025 by rpki-client