Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft
File:                     X-MMr29aMskZ0zWqlNDnMzzQVDU.mft (raw, json)
Hash identifier:          ZcgKbj9xWoOkFQLIzZQSqtmrUWRgwF4sMtVRHqw0TP0=
Subject key identifier:   C3:F7:19:32:60:3B:7C:5D:20:93:55:C6:D8:5D:81:B5:59:3C:C2:68
Authority key identifier: 5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35
Certificate issuer:       /CN=A911E403/serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435
Certificate serial:       080A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft
Manifest number:          07F9
Signing time:             Fri 08 Aug 2025 21:24:15 +0000
Manifest this update:     Fri 08 Aug 2025 21:24:14 +0000
Manifest next update:     Fri 15 Aug 2025 21:24:14 +0000
Files and hashes:         1: X-MMr29aMskZ0zWqlNDnMzzQVDU.crl (hash: Q0bqtddSNO+ukXUnivi9Lm6levxEgzyJDJ9qpyD3lu4=)
                          2: FE02E774CFFD11EC8CFDFF68C4F9AE02.roa (hash: Mb3AFxuyqsJCVgV+HTF7n8MDdauyi9spCKyVJmftERQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl
                          rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2058 (0x80a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E403, serialNumber=5FE30CAF6F5A32C919D335AA94D0E7333CD05435
        Validity
            Not Before: Aug  8 21:24:14 2025 GMT
            Not After : Aug 15 21:24:14 2025 GMT
        Subject: CN=68966afe-93a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b5:5a:6d:04:68:a0:60:a4:b7:50:19:1e:dc:
                    d3:d4:20:3e:a7:dc:1a:20:21:83:8f:3d:46:ac:90:
                    70:69:42:f4:9c:77:9d:8e:e5:fd:fb:b0:44:a9:fd:
                    e9:e2:0d:a7:36:e4:44:4a:31:f1:a4:c2:e1:4f:76:
                    2f:cb:75:96:39:f2:7a:c5:fb:dd:61:d0:05:cc:c6:
                    3b:56:c9:ef:51:2e:a2:11:65:e0:96:da:9d:76:c2:
                    a8:96:00:f1:d0:bb:f7:6b:9e:9e:8c:61:3a:ed:08:
                    72:80:ac:48:73:36:a9:bb:00:62:1c:dd:2f:6e:4f:
                    e7:00:56:03:ae:f2:de:ff:4e:ca:9f:d3:1b:fd:36:
                    28:96:93:09:0a:d4:75:3e:51:01:32:3d:f3:64:e4:
                    d6:69:2f:e5:7a:9d:a2:62:cf:d4:ae:6b:38:c7:f7:
                    44:8d:b9:86:ef:7f:4c:57:37:de:52:e7:68:93:b0:
                    37:5c:10:e7:8e:10:5c:cc:be:1d:85:27:d3:d8:ce:
                    bc:07:e1:6b:55:89:65:f0:66:2e:25:97:36:4b:04:
                    99:51:31:04:94:b6:30:3e:8b:64:8b:cc:96:3c:64:
                    39:5f:2d:4d:e5:f1:b3:92:e4:78:29:1f:1c:90:a2:
                    b0:af:f8:3c:63:46:75:ec:ec:0b:79:11:ea:a3:12:
                    6a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F7:19:32:60:3B:7C:5D:20:93:55:C6:D8:5D:81:B5:59:3C:C2:68
            X509v3 Authority Key Identifier:
                keyid:5F:E3:0C:AF:6F:5A:32:C9:19:D3:35:AA:94:D0:E7:33:3C:D0:54:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-MMr29aMskZ0zWqlNDnMzzQVDU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E403/A1CCECFEF8BB11EA87B1DE6BC4F9AE02/X-MMr29aMskZ0zWqlNDnMzzQVDU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:90:a9:92:e2:db:14:3a:97:b2:38:e9:4a:fd:1d:a5:50:22:
         59:0e:7a:9d:69:7c:3d:9c:ea:c7:df:d9:da:d6:b3:8e:8e:b7:
         56:25:6a:56:e4:0c:93:28:1c:e6:f6:47:85:59:9e:e1:db:bc:
         b5:f0:22:b1:d2:90:4e:6b:bd:14:9d:40:8e:ab:f2:09:cf:19:
         d9:84:ec:e5:bf:e3:30:24:62:db:8f:25:d4:7d:a1:11:e9:35:
         e4:94:18:9a:77:27:8f:6d:03:cf:13:12:ad:8b:93:d4:8b:37:
         3a:2e:71:3a:c3:cd:f4:9c:13:b0:5e:22:ad:67:2d:e8:6f:49:
         61:31:f7:c5:9e:87:44:2b:57:79:48:03:61:d7:98:ee:04:a0:
         4d:c6:e3:25:fd:76:dc:8b:99:f3:4e:13:fd:aa:60:d1:95:63:
         c7:0a:38:97:7b:da:20:ee:80:e9:0e:1b:ca:c2:6f:59:00:27:
         96:0a:c1:6f:5d:db:04:6e:dc:87:cb:d2:90:69:23:46:b0:61:
         0c:52:36:08:9f:f7:1d:da:5c:fa:fd:db:b6:f1:c5:57:f2:1e:
         c6:8a:98:5d:42:fe:87:00:78:a5:4d:b8:c4:ed:53:d8:d2:14:
         26:21:1a:7a:4d:1c:2e:9d:75:e1:9f:ca:31:33:7e:cc:9b:6e:
         b6:33:16:6f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUU0MDMxMTAvBgNVBAUTKDVGRTMwQ0FGNkY1QTMyQzkxOUQzMzVBQTk0RDBFNzMz
M0NEMDU0MzUwHhcNMjUwODA4MjEyNDE0WhcNMjUwODE1MjEyNDE0WjAYMRYwFAYD
VQQDEw02ODk2NmFmZS05M2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr7VabQRooGCkt1AZHtzT1CA+p9waICGDjz1GrJBwaUL0nHedjuX9+7BEqf3p
4g2nNuRESjHxpMLhT3Yvy3WWOfJ6xfvdYdAFzMY7VsnvUS6iEWXgltqddsKolgDx
0Lv3a56ejGE67QhygKxIczapuwBiHN0vbk/nAFYDrvLe/07Kn9Mb/TYolpMJCtR1
PlEBMj3zZOTWaS/lep2iYs/Urms4x/dEjbmG739MVzfeUudok7A3XBDnjhBczL4d
hSfT2M68B+FrVYll8GYuJZc2SwSZUTEElLYwPotki8yWPGQ5Xy1N5fGzkuR4KR8c
kKKwr/g8Y0Z17OwLeRHqoxJqMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMP3GTJg
O3xdIJNVxthdgbVZPMJoMB8GA1UdIwQYMBaAFF/jDK9vWjLJGdM1qpTQ5zM80FQ1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTQwMy9BMUNDRUNGRUY4
QkIxMUVBODdCMURFNkJDNEY5QUUwMi9YLU1NcjI5YU1za1oweldxbE5Ebk16elFW
RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1gtTU1yMjlhTXNrWjB6V3FsTkRuTXp6UVZEVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RTQwMy9BMUNDRUNGRUY4QkIxMUVBODdCMURFNkJDNEY5QUUwMi9YLU1NcjI5YU1z
a1oweldxbE5Ebk16elFWRFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB3kKmS4tsUOpeyOOlK/R2lUCJZDnqdaXw9nOrH39na1rOOjrdWJWpW
5AyTKBzm9keFWZ7h27y18CKx0pBOa70UnUCOq/IJzxnZhOzlv+MwJGLbjyXUfaER
6TXklBiadyePbQPPExKti5PUizc6LnE6w830nBOwXiKtZy3ob0lhMffFnodEK1d5
SANh15juBKBNxuMl/Xbci5nzThP9qmDRlWPHCjiXe9og7oDpDhvKwm9ZACeWCsFv
XdsEbtyHy9KQaSNGsGEMUjYIn/cd2lz6/du28cVX8h7GiphdQv6HAHilTbjE7VPY
0hQmIRp6TRwunXXhn8oxM37Mm262MxZv
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:28:47 2025 by rpki-client