Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
File:                     h_lY2vSYZZqe7g_xRCJrFxBIneA.mft (raw, json)
Hash identifier:          DdjtTadsFXTE21nL9ezf/XHjfcG2+MaJHOlRg+TeptE=
Subject key identifier:   B0:A4:6F:D4:D5:CA:5F:CA:5F:85:88:16:79:93:B8:72:D9:08:A4:A1
Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
Certificate issuer:       /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Certificate serial:       03BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
Manifest number:          03AD
Signing time:             Mon 11 Aug 2025 00:57:30 +0000
Manifest this update:     Mon 11 Aug 2025 00:57:30 +0000
Manifest next update:     Mon 18 Aug 2025 00:57:30 +0000
Files and hashes:         1: h_lY2vSYZZqe7g_xRCJrFxBIneA.crl (hash: DAn3eFOgeZPKh141doMxVqO2y5N0k1OSbCyQajpR30s=)
                          2: 8DB35F6A766511EF8820F844C4F9AE02.roa (hash: DUjlMecJ3MCBuCiDf6r0BnVvRVnuDf5vmODbFKyvDAA=)
                          3: 8C5D4FF4766511EF8820F844C4F9AE02.roa (hash: a/GUffZHyYeIWzCyqNA7Fc/IgTrpVgmYYpvH+uBkGnA=)
                          4: FFF8A36A34E311EE877E760DC4F9AE02.roa (hash: Td4Qw51TSr10UgTmfhROy8qSBPdrA5ySYZaY11oYN0U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl
                          rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 Aug 2025 00:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 955 (0x3bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91354AE, serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
        Validity
            Not Before: Aug 11 00:57:30 2025 GMT
            Not After : Aug 18 00:57:30 2025 GMT
        Subject: CN=68993ffa-3c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8a:56:ec:e3:5a:8b:ed:37:98:87:fd:ee:ad:
                    9b:75:68:05:98:c0:4f:f2:77:e6:e0:94:07:4a:85:
                    b5:7d:eb:ba:e7:07:8a:22:d9:79:f9:3a:9e:ed:da:
                    f7:8a:c3:cb:f2:67:cf:8f:20:b9:d4:5c:1d:af:12:
                    4c:be:a1:07:33:50:6c:67:58:07:bd:c5:2e:7e:bc:
                    d7:7c:7a:37:1e:8f:06:dd:22:0d:1a:94:b0:69:07:
                    25:25:11:0b:14:5d:d4:10:4e:1c:ea:6e:1e:d4:d3:
                    38:08:f5:90:3f:84:1a:48:50:1b:3c:dd:cd:4c:ac:
                    62:b2:b5:d3:6d:ea:14:ee:f3:62:61:b8:40:4e:b8:
                    92:c0:5e:40:fb:ab:a2:ee:41:97:17:c5:a4:42:51:
                    ee:4b:ac:ba:43:95:54:c9:0b:cb:c5:93:69:78:12:
                    f2:ce:eb:e0:5c:26:8e:c2:ae:b0:02:cf:ba:76:28:
                    e3:e8:d2:10:3d:77:6b:e1:1c:eb:79:f5:24:7a:37:
                    39:cd:2f:1c:ee:16:1e:7a:e9:54:0b:38:24:31:c6:
                    77:cb:0c:27:02:08:9c:a5:8f:a8:0d:fa:d3:8e:d4:
                    54:68:ab:b9:6e:87:46:d0:bb:90:d3:67:ec:d0:ea:
                    94:6b:4d:05:f8:ac:f7:89:c5:78:f6:61:51:d7:54:
                    3d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A4:6F:D4:D5:CA:5F:CA:5F:85:88:16:79:93:B8:72:D9:08:A4:A1
            X509v3 Authority Key Identifier:
                keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:f5:ec:2d:58:56:cb:09:2a:ac:cc:a1:16:16:85:55:75:c1:
         a9:ab:cd:d3:41:24:f1:5b:dd:ed:31:61:80:a9:4d:e5:e3:92:
         27:50:1c:dd:fe:91:c4:13:cf:c1:ed:39:b0:79:e5:77:7e:e7:
         26:a9:31:5b:0e:e7:d7:7e:a1:fb:ea:bb:8d:5f:33:71:16:15:
         02:73:6c:93:b2:23:63:dc:d8:8a:f8:2b:1d:28:44:a1:66:f5:
         71:c9:96:bd:3a:15:cb:57:3b:64:d5:c9:47:99:2d:92:ef:77:
         78:d3:f2:8f:39:f9:f8:f9:d9:a3:68:a7:9a:77:e7:c2:f4:ad:
         ba:ba:bc:de:3e:3b:78:5a:0c:df:04:85:93:1c:44:2d:9d:43:
         81:61:59:f3:e6:16:a6:28:64:96:24:f0:e6:69:1b:1a:67:ca:
         bb:20:a1:d4:0c:1b:58:88:0d:43:ff:6a:0c:d2:4d:a5:c3:cc:
         58:a1:72:dc:7c:26:f9:cc:d5:1e:7a:ad:85:13:ad:05:c0:95:
         37:8a:7c:7e:42:26:f2:b2:bf:a5:e0:f2:6a:56:3f:7b:53:9b:
         4a:1d:0d:d1:9c:5d:8e:88:d9:3a:69:8e:bf:27:76:ef:b5:1a:
         83:71:92:bf:b9:9a:11:6d:83:62:aa:74:db:ba:98:f9:b9:25:
         63:35:e9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 19:04:04 2025 by rpki-client