Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
File:                     aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft (raw, json)
Hash identifier:          D0o48cQXq6qNyE8dzlYOvqDmlxwit2Qg7jdpkyUuvZw=
Subject key identifier:   19:DF:AF:B7:90:34:19:3E:2E:3A:AE:FE:EA:4F:4F:7B:12:79:8D:74
Authority key identifier: 68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F
Certificate issuer:       /CN=A911CA82/serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
Manifest number:          73
Signing time:             Wed 06 Aug 2025 23:21:50 +0000
Manifest this update:     Wed 06 Aug 2025 23:21:49 +0000
Manifest next update:     Wed 13 Aug 2025 23:21:49 +0000
Files and hashes:         1: aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl (hash: 5YJY2j3fUqeVWzR05rXYSZ4n6FpJcCWBXWYJSX2yzxA=)
                          2: AF4301D4CF8511EF94856A41C4F9AE02.roa (hash: eqsW8B/nzh24Js41J8yQQdlaY75NMXqpYi5U4uiBwdI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl
                          rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 23:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CA82, serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F
        Validity
            Not Before: Aug  6 23:21:49 2025 GMT
            Not After : Aug 13 23:21:49 2025 GMT
        Subject: CN=6893e38d-9440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c4:1b:55:d8:23:6d:cd:bc:09:da:01:92:da:
                    5f:97:4b:75:e1:14:94:a8:95:85:59:74:a0:c6:4b:
                    76:df:5c:20:08:f3:85:85:83:90:66:7f:95:d1:ef:
                    36:0b:a6:79:ae:27:87:d8:f5:bc:c8:d5:30:65:ed:
                    b1:e7:0b:a1:3e:7a:da:cc:32:35:52:c9:13:72:18:
                    83:a2:ab:c1:2d:ac:ce:5a:08:68:96:e9:79:8d:5f:
                    9e:3d:ae:5f:7f:92:3a:68:6a:2f:46:13:ca:8f:f1:
                    f8:0c:ac:ee:09:53:17:95:db:38:7f:65:89:57:88:
                    db:b2:9a:72:85:19:4d:72:41:1c:7a:24:90:1c:fc:
                    d1:ef:89:9d:e5:86:28:25:f9:95:54:45:95:eb:bd:
                    95:83:30:49:7a:28:4e:00:48:7b:79:9f:fb:52:70:
                    a1:cf:00:03:3c:64:b1:76:04:c6:52:be:d9:ac:b8:
                    f4:0f:77:42:cf:1a:4d:0d:29:db:fd:8b:e0:e9:3c:
                    ce:5c:6c:10:35:fe:ab:ad:ef:3a:f4:3a:7c:5d:e1:
                    1a:9b:48:13:63:eb:63:eb:ca:92:54:a3:a6:e2:1f:
                    4c:62:d7:7d:5c:e0:df:c7:36:0f:57:d2:72:c7:08:
                    e7:bb:ce:9a:47:42:bf:18:c4:11:2d:b1:9d:55:0a:
                    3b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DF:AF:B7:90:34:19:3E:2E:3A:AE:FE:EA:4F:4F:7B:12:79:8D:74
            X509v3 Authority Key Identifier:
                keyid:68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:28:39:08:09:c9:66:b3:83:98:68:25:55:77:b0:fd:a1:54:
         e7:27:2d:2c:4f:7c:10:07:aa:7e:25:61:01:3e:8b:ec:71:be:
         80:26:e1:fd:a6:b5:03:43:d6:d1:5b:a4:f2:5e:04:a1:68:e9:
         b7:58:d0:2d:eb:61:3a:d7:70:39:52:b1:8e:67:13:4a:90:e0:
         ec:d5:5a:4d:18:c5:11:ce:11:02:da:1c:6b:26:85:8e:6b:ba:
         58:da:a6:f8:53:e7:6e:07:ec:b5:da:58:c1:8d:6a:cb:b6:1d:
         01:a3:f8:f0:ad:bc:2c:61:f7:d7:a9:d2:52:a4:7a:4b:14:25:
         64:c8:84:c9:d9:a8:83:d5:2e:86:db:9a:1a:62:91:5d:f6:b4:
         a7:68:87:33:af:1c:e9:5e:98:e7:42:1f:39:55:d5:0f:bf:58:
         e0:8b:54:a8:15:a4:fc:b4:d4:81:6a:5a:2a:1b:66:ae:d5:22:
         2e:7d:30:a3:e4:a9:4c:1a:46:87:53:89:14:dd:b6:0b:26:93:
         bd:ec:82:58:be:1d:7d:fd:4b:2a:1a:11:b7:4a:30:ca:62:59:
         c0:69:60:24:b6:6f:5e:ae:4d:d5:55:e4:0d:6f:18:3c:4e:fd:
         f5:79:29:64:2a:5e:1c:79:a3:e3:28:06:b4:a2:67:33:8a:60:
         5c:e0:84:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:59:07 2025 by rpki-client