Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
File:                     6zifszmzkI1UmmU5DJLhX533xUs.mft (raw, json)
Hash identifier:          XF1QRDl4z71ZiAfH0tBnQJ09ArWMBAbMsm9RH0i6kNQ=
Subject key identifier:   8B:FC:D8:F9:6A:7E:16:93:E3:DD:D3:56:3F:EE:96:79:FA:CC:D8:27
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       395F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
Manifest number:          3743
Signing time:             Wed 06 Aug 2025 14:21:55 +0000
Manifest this update:     Wed 06 Aug 2025 14:21:55 +0000
Manifest next update:     Wed 13 Aug 2025 14:21:55 +0000
Files and hashes:         1: 6zifszmzkI1UmmU5DJLhX533xUs.crl (hash: xn+bHM74NECudhG2RS8c4TOSzTT0j4FtNo9hmo1yYyY=)
                          2: 5E035B480E8C11F0AD0C273AC4F9AE02.roa (hash: 7Qy9qXoaY9x4VuN4EZ0lO0nUdpYSzQD6Nyrn1uaVEq8=)
                          3: FAF6D732CD3811EDBD37B674C4F9AE02.roa (hash: z9HaUp/F2Eb09B4FeQi8go7G2DS9o12Zg3mvwv3IbtM=)
                          4: FB4F0F9EF90011EDAEA1FC13C4F9AE02.roa (hash: ChYD+dNYyCInKmhyHsi0B1wkTq6FHjT+KDylhmMIQaU=)
                          5: FFB4329A5B9011F0A3ECA351C4F9AE02.roa (hash: ngLPWJnAOp37+VU9f3DQJVToWiTF9NgeRaLixJCdqgM=)
                          6: 8470E428A2E711EFA6A5B91AC4F9AE02.roa (hash: Fum9wynbW46bBWpLsLIRjpqgESZ0wYgIRM9aD5ujlCc=)
                          7: 2C7A8F5C8CE511EF96182462C4F9AE02.roa (hash: C8anzo3wIrPEk1GE8PbP/ejOtinKtiNErIk39oiNvt0=)
                          8: 4F698B525F5011EFA66ADA2CC4F9AE02.roa (hash: 2UAmCqv65l0EyrJ8vogZ6XvweSD9Dk8E2FEP81jdWxE=)
                          9: 6D84D2D05DE911EF84282B80C4F9AE02.roa (hash: evSbADlKi6Aoc1pxAc2NrEs9X2WBgu7ILOt35lu9gm4=)
                          10: FEDF0BA43E5111EF86CB780AC4F9AE02.roa (hash: Xwu2cFcPAEo+elSKxorX+Sf443v4LqtlzkSNNtTquMc=)
                          11: 27E277D891AA11EF9DBFF265C4F9AE02.roa (hash: mg1teoBc7Boh3ZoLd+5gvaGJaFd/PWcUnxH/SupEHww=)
                          12: 97DE828061E211F0A89DA027C4F9AE02.roa (hash: ZE7ZukYBgBvNYyPPJAzJ612eGNB9AKUYhTrRQDE3DEk=)
                          13: 3BCB61DA01D411EFB260D83DC4F9AE02.roa (hash: MdnVi1OIFkoo0dm/yCy+3NB6G2QdHBGCAwYC8bNp0Zg=)
                          14: 02414522C98A11EBAF4F9280C4F9AE02.roa (hash: XeOavvZiR3sFlQ/5myU2/vsanQb5X0EfvxEaH+f2fdc=)
                          15: 4E211A5C408A11EE91A09746C4F9AE02.roa (hash: kfvn38ixprZNvoP8sdkWRE4Y87QEhE7Cfyn7D4FPsf4=)
                          16: 862D18003A1011EDB5225E73C4F9AE02.roa (hash: DcHlNA8XpoMoa8j+kjrzppHmEvQSR+3K0O1rUE7HneA=)
                          17: CDCC902E170811EFB6DE866CC4F9AE02.roa (hash: Ffh0Llbu+aifsZ/PhUzKVAABbwr/NW6qzAkEIXJ6/7A=)
                          18: EEF771D4FED311EF8B263515C4F9AE02.roa (hash: 09tGhGYy1EBd0MGX/GluMy6ke+NPb5M4XAtBFpqIk9Y=)
                          19: A59A5B6641F611ECB1465157C4F9AE02.roa (hash: y/ZcKXvRId0MU2jWP2qiUlc9klsFtiDYeSjklRbVi0k=)
                          20: BF6649687AC811EDAE44E656C4F9AE02.roa (hash: LcpUVsxOJi3t+CPRAWzqjfdnmFogw8cF+SJQm5U5O4I=)
                          21: 76FA132A8B0511EC993E2B20C4F9AE02.roa (hash: qUMKMRxZ99VhDadcacr3UtNm3iVgxflvwhxpIHuV3Uc=)
                          22: 000724C6F7D511EE8C03CA65C4F9AE02.roa (hash: R3NOwHRvbG4Sj9UJHqKDj+q85wrGI2+UCl4SulBfUw8=)
                          23: 3DAAE73A1A2D11EEBC20C11FC4F9AE02.roa (hash: YitENFm9BCdA92I41DJxpRQ7XMmhtSEQKT0EzpScV8g=)
                          24: B6D40A18822F11EFA848053BC4F9AE02.roa (hash: vFBJDYKINsG7qNbm5o+Za+m+zPuBlKRNX+X12lKjHMw=)
                          25: 52850542A60811EF91FB1113C4F9AE02.roa (hash: M6YB2rmwwkNibJ4OogBvzsryRcCd0Ftm7HHimXMezmg=)
                          26: 2622AA12010511EE8C750D39C4F9AE02.roa (hash: VhA+Hs+q7s+bBv48I0pk72FnDH5rcT3DytwZJAE63fk=)
                          27: 9D8E6D02C2A511EBB2025B36C4F9AE02.roa (hash: PlEnsEP21PJC16O7WpqiMN6BCHLW/59u/YvhE9nkz+Y=)
                          28: 26C39BB6010511EE8C750D39C4F9AE02.roa (hash: qHE4CVNPl2hfbb1z0WR6L0xNSdCigOSFLS7QO+iIYEU=)
                          29: CAD5365E090C11EBA5412411C4F9AE02.roa (hash: DzJjX26F/6q2iCnJ1sWD2xCr+N10vleN++lLSBNm8a0=)
                          30: 4D4EE370408A11EE91A09746C4F9AE02.roa (hash: /SphmDOXIGkmk4Dx70JMdSpOBjmQfa6XPTmojFUioL8=)
                          31: D34236BE7D0511EEB381D02CC4F9AE02.roa (hash: rowBvIqawxIBDAjrerBCpZz930ir2eOmQUO5U3LzEmQ=)
                          32: 46186F4EC6E711EDA2FCBA34C4F9AE02.roa (hash: Cen6H7O/9BMGQfEMnjJkwMjjekXxF8vODlzBKhy+TQU=)
                          33: E614D0A2CD5011EF863CDE64C4F9AE02.roa (hash: l8Dw0ddBvCAgKUHsutMECKNj1UHJE2k/V9PmgyyUJds=)
                          34: 0BD5724C3A3211EDA1B7D863C4F9AE02.roa (hash: GvJakzzk6/d7G+Vxt5rr4xnMS4OHrqYd4CORSpkPBhM=)
                          35: 813979825BB011F0AC78A45BC4F9AE02.roa (hash: y253tv6qx5tZsbZ2c5EC5vtkvkECQA5aV06Pji+pbOE=)
                          36: 5E775F6644CE11F09A370919C4F9AE02.roa (hash: CV0j95RqvFk5vdn0PU1qSmljoaTpS4bQLUN+bT3PTXI=)
                          37: 83F06CF2DF1211EDB91D5C61C4F9AE02.roa (hash: rRWG0qYGlcMnQzzd2jOwyjp0JRek+hed3twRZmd9Rfg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 14:21:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14687 (0x395f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Aug  6 14:21:55 2025 GMT
            Not After : Aug 13 14:21:55 2025 GMT
        Subject: CN=68936503-56d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0a:ca:ca:66:7d:f6:e1:4e:83:86:f4:88:c8:
                    76:3e:d1:28:dc:69:ab:65:60:9d:63:bb:8e:b7:1f:
                    e6:bb:1d:a2:98:dc:22:db:ee:0c:f1:f1:b4:ed:3e:
                    a6:80:f9:29:10:25:24:27:23:02:1f:89:be:f6:ab:
                    7c:f2:4f:9f:80:e2:ea:e6:34:79:5c:73:65:91:d9:
                    64:92:b4:7e:be:6b:5f:72:f0:b0:06:0a:1b:80:07:
                    be:80:eb:02:32:1a:a2:91:ff:6e:dc:64:68:bd:9a:
                    f3:b6:cd:dc:1f:02:21:c7:8d:ea:0d:26:83:a2:a1:
                    63:39:a4:52:68:6f:65:42:44:10:7b:3d:6d:6e:c5:
                    cf:5c:21:7d:9a:6e:85:de:8d:fc:74:77:6a:32:bd:
                    ad:06:92:9f:00:f2:95:af:68:da:96:3d:28:c3:57:
                    a1:71:31:cf:06:0f:f6:de:85:31:40:8b:2d:e2:62:
                    89:9f:d9:5f:f1:b4:3c:09:09:56:71:ba:8e:7e:1d:
                    56:b0:4b:c4:57:cc:68:b5:90:c0:b5:69:fb:05:9f:
                    8c:d8:e1:15:e6:35:da:9a:65:01:1f:08:18:0f:ee:
                    be:0f:4a:d3:42:ef:73:26:b3:cc:30:0a:a8:7e:2b:
                    82:58:9e:07:08:77:ef:4f:b0:65:d4:37:94:0b:0f:
                    5a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FC:D8:F9:6A:7E:16:93:E3:DD:D3:56:3F:EE:96:79:FA:CC:D8:27
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:f3:c8:71:6f:27:48:f9:81:fd:f4:3d:c2:7b:21:f8:2f:ca:
         39:d9:49:37:c2:59:7f:7f:c2:1a:83:3c:27:b4:03:b3:cd:ef:
         04:d4:65:2c:46:e2:06:3f:8c:25:64:d6:ee:80:cf:60:1f:c0:
         9e:a3:c2:d7:4a:de:59:25:95:2c:57:7f:3b:fc:c4:43:72:07:
         a3:8f:7f:2f:41:dc:7e:ef:34:75:30:4d:96:68:36:e0:9c:9c:
         ee:d6:66:64:2d:e0:b8:84:5e:59:48:34:a1:b7:86:bf:81:6f:
         99:e0:90:27:43:4b:bd:ce:60:31:6d:2f:a8:3b:1c:e0:5a:7f:
         60:88:d9:c0:63:77:eb:46:5e:7e:fd:7f:12:fe:ab:31:ce:4c:
         66:09:eb:d3:2c:6a:53:46:0f:c4:93:cc:15:86:b2:a2:39:4d:
         e8:17:bf:b1:53:22:a5:97:be:dd:6f:d3:3e:5e:50:05:86:17:
         09:76:eb:4c:68:13:8a:7b:b0:f1:8c:3a:bc:b7:50:cf:1d:c2:
         f5:41:29:72:18:54:1a:3c:38:53:11:b9:7b:34:85:37:f5:df:
         c2:1e:0c:6c:f9:01:90:0e:b6:96:39:12:c5:b5:b7:d8:ad:9c:
         9d:a8:63:ba:34:de:7d:c8:d9:4b:3a:74:c5:6d:77:b4:9d:a0:
         b4:30:9a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:12:46 2025 by rpki-client