Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
File:                     yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft (raw, json)
Hash identifier:          4lwhzy/2+1YQzCSeQGk6HF9zPLvDLce5KJnR3MovBRQ=
Subject key identifier:   88:98:C8:B2:0F:5B:0A:16:89:43:77:F5:55:AD:1D:CC:94:9C:F1:2A
Authority key identifier: C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34
Certificate issuer:       /CN=A912AC33/serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634
Certificate serial:       0439
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
Manifest number:          042D
Signing time:             Sat 09 Aug 2025 00:50:07 +0000
Manifest this update:     Sat 09 Aug 2025 00:50:06 +0000
Manifest next update:     Sat 16 Aug 2025 00:50:06 +0000
Files and hashes:         1: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl (hash: tIXy1He7JbBKo+C3ShsTDoPGNujdQfGmf07JwtHoxUQ=)
                          2: E4804004737211EC866EAC24C4F9AE02.roa (hash: NdcrODMvzPxbGahsHjIC859CSUu00GxcxQ7bS9fv+uc=)
                          3: 204CB89672C011EC809A5933C4F9AE02.roa (hash: Gfvw/vl1mymWE2Hz3blrobSO5Bvy6xdNCRghpmsy0TE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl
                          rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1081 (0x439)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AC33, serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634
        Validity
            Not Before: Aug  9 00:50:06 2025 GMT
            Not After : Aug 16 00:50:06 2025 GMT
        Subject: CN=68969b3f-100a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7d:36:f9:c6:63:77:4e:6b:03:c8:ce:97:89:
                    28:6c:42:64:43:4d:66:43:76:f0:f2:7f:7d:a9:9b:
                    c4:96:57:82:03:6a:e0:02:0b:59:13:d0:71:9e:d5:
                    4e:fa:7e:74:20:a8:56:dd:4e:23:1e:ba:b5:67:a7:
                    b4:28:dc:79:a2:4d:ca:9e:dd:f4:fb:72:ba:02:04:
                    d4:d5:af:48:c9:2a:39:f6:8a:71:fb:f2:81:ed:1b:
                    a6:3d:0e:8d:1e:3f:9d:57:b4:cd:be:e8:e5:52:ff:
                    dc:78:c4:4f:17:8b:f7:f3:25:93:86:a7:4b:ad:1b:
                    8c:18:4b:e2:57:cc:0d:33:ff:ef:c2:ab:8c:09:1f:
                    22:35:ce:78:80:26:15:34:24:95:80:f2:02:bb:f4:
                    a2:96:b1:dd:ad:0a:f0:66:98:09:bd:8e:60:9d:fd:
                    72:eb:c8:d0:a4:83:9b:4e:af:83:d0:f8:70:b6:e8:
                    d4:b3:4e:ed:94:a7:b1:f3:b8:83:00:b3:b7:ba:94:
                    4a:0b:95:d4:42:15:5b:5c:37:0b:0c:eb:f1:90:4e:
                    35:a1:72:66:72:77:98:cc:41:21:35:0b:80:be:56:
                    8c:16:e6:8e:34:e2:ac:57:6a:bc:5e:50:33:79:31:
                    28:cc:cc:ac:08:59:a8:cf:d6:3d:ec:8a:ce:a5:34:
                    11:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:98:C8:B2:0F:5B:0A:16:89:43:77:F5:55:AD:1D:CC:94:9C:F1:2A
            X509v3 Authority Key Identifier:
                keyid:C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:70:36:ce:c4:9d:e1:59:00:6e:f9:90:90:0b:8f:61:00:46:
         c7:55:16:fd:16:56:40:ec:dd:ff:96:cf:bf:08:f3:87:4c:6b:
         71:f6:d1:59:89:86:43:b7:95:6c:9d:34:0c:fd:ca:65:89:a8:
         b9:76:2a:8a:fd:0e:65:54:c6:a6:aa:71:2e:04:a5:96:60:e5:
         3a:9d:a9:8d:25:aa:5a:ec:fc:49:2b:48:03:87:b1:74:1e:5a:
         11:db:88:ff:b1:9b:5a:5e:88:a4:13:19:f1:b6:8a:fc:d2:0b:
         52:56:ab:1b:2f:c8:9b:3a:e9:71:07:5e:5d:7d:db:7a:f5:da:
         18:36:ad:6b:ca:5f:4b:6c:60:f4:54:39:7c:56:61:6e:07:71:
         56:7c:7a:ef:5f:f9:bc:8a:cd:38:ae:91:18:82:12:26:d6:15:
         31:a5:2b:9e:01:2e:69:87:ab:66:b8:c1:9a:fa:75:ce:cd:e5:
         f2:77:59:ea:e4:8b:3c:0d:c7:4a:16:fa:27:02:d3:b4:7c:aa:
         d6:84:e3:69:14:7b:25:4f:cd:cb:56:33:8b:2e:bb:ea:04:cf:
         ee:ba:1b:61:1e:33:c8:0b:54:72:9e:c8:f8:15:09:eb:11:6a:
         7b:ed:2a:e9:09:6b:94:ed:32:58:f9:16:a4:57:d2:ea:d1:04:
         9b:28:4b:1c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFDMzMxMTAvBgNVBAUTKEM5NUNFOUQxQjZCMzEwODFDMDI1RDQ2QTNBMTY3RkNG
REZBNzI2MzQwHhcNMjUwODA5MDA1MDA2WhcNMjUwODE2MDA1MDA2WjAYMRYwFAYD
VQQDEw02ODk2OWIzZi0xMDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArn02+cZjd05rA8jOl4kobEJkQ01mQ3bw8n99qZvElleCA2rgAgtZE9BxntVO
+n50IKhW3U4jHrq1Z6e0KNx5ok3Knt30+3K6AgTU1a9IySo59opx+/KB7RumPQ6N
Hj+dV7TNvujlUv/ceMRPF4v38yWThqdLrRuMGEviV8wNM//vwquMCR8iNc54gCYV
NCSVgPICu/SilrHdrQrwZpgJvY5gnf1y68jQpIObTq+D0PhwtujUs07tlKex87iD
ALO3upRKC5XUQhVbXDcLDOvxkE41oXJmcneYzEEhNQuAvlaMFuaONOKsV2q8XlAz
eTEozMysCFmoz9Y97IrOpTQR2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIiYyLIP
WwoWiUN39VWtHcyUnPEqMB8GA1UdIwQYMBaAFMlc6dG2sxCBwCXUajoWf8/fpyY0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzMy8wNEIzMzQ4ODcy
QkMxMUVDODYxMTZENUVDNEY5QUUwMi95VnpwMGJhekVJSEFKZFJxT2haX3o5LW5K
alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lWenAwYmF6RUlIQUpkUnFPaFpfejktbkpqUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QUMzMy8wNEIzMzQ4ODcyQkMxMUVDODYxMTZENUVDNEY5QUUwMi95VnpwMGJhekVJ
SEFKZFJxT2haX3o5LW5KalEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBPcDbOxJ3hWQBu+ZCQC49hAEbHVRb9FlZA7N3/ls+/CPOHTGtx9tFZ
iYZDt5VsnTQM/cpliai5diqK/Q5lVMamqnEuBKWWYOU6namNJapa7PxJK0gDh7F0
HloR24j/sZtaXoikExnxtor80gtSVqsbL8ibOulxB15dfdt69doYNq1ryl9LbGD0
VDl8VmFuB3FWfHrvX/m8is04rpEYghIm1hUxpSueAS5ph6tmuMGa+nXOzeXyd1nq
5Is8DcdKFvonAtO0fKrWhONpFHslT83LVjOLLrvqBM/uuhthHjPIC1Rynsj4FQnr
EWp77SrpCWuU7TJY+RakV9Lq0QSbKEsc
-----END CERTIFICATE-----
Generated at Sun Aug 10 21:11:29 2025 by rpki-client